last executing test programs: 11.972102651s ago: executing program 3 (id=798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(0x0, 0x1ff, 0x52300) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 8.424679135s ago: executing program 2 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r1, 0x603, 0x70bd30, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x10) 7.886487076s ago: executing program 2 (id=808): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "3b05829cb4f83234965bf0e7670faaeffce54967a307ce873d4e80b5e0799060c7383e6114ef31d1ac55ce4a65927d4023ff5b1ee624e189dcba631c71d81280e60c05131a163a8daea6ad8524a0b18ac5603081ccc8dba31fd18ce5488e1d1150af79440e1dd80410949612746cf56a7dbc8152b34a070de02ed2911d29f69143bcc2aa14b8bf53fc78a07b4f286606e956c0a6646dd44faa6ba91f520c45f649447f00ec6fc14b9f203be7caea3db5fc51ed3d2912d9bfa3a499c13ee16550a7de7ef3b57bb6e412b59607d6ef6bea1a837a0eb06603dadc75617c965d177a51ce67e6ff16bec2da30507131118acac772f4a34dd69207b48e76d184f24624", "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"}) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r5, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 6.57197292s ago: executing program 0 (id=811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b8202e81610f23c00f21f835020003000f23f8b805000000b9008000000f01d90f30c4e37d19432700c4e2a99004310f233ac4e2118e2a0fc768aec4c187d0373e2e0f01cb", 0x45}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r9 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x101, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 6.542129523s ago: executing program 1 (id=812): r0 = memfd_secret(0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'vlan0\x00', 0x4}, 0x18) close(r0) r1 = dup2(r0, 0xffffffffffffffff) sendto(r0, &(0x7f0000000040)="a5cbb3803d215eb285a8c0218d8ef309a5b3c284175fab00176e4fc398adc970b45416cd3d1f346fb9867c70c23ad406d7cc46e938e7", 0x36, 0x1, 0x0, 0x0) r2 = getpid() prlimit64(r2, 0x0, &(0x7f0000000080)={0x6, 0x8000000000000001}, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/118, &(0x7f0000000180)=0x76) r3 = mq_open(&(0x7f00000001c0)='%.\x00', 0x2, 0x162, &(0x7f0000000200)={0x47, 0x401, 0x2, 0x80}) mq_notify(r3, &(0x7f00000003c0)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000240)="79ae0422242c66f7da3c54f0a35fca0cf7c6fe8cc655e7ae95b72825f15a7775abd39aff33cd6d51e4c3ef099c17e12010a426d26ad62735fc4ceda9bbc6e5f605cd8f54119b9d750bba0df718d4730aa469cc8172c411e02f7fa76e603b3c94d230eecae41ac3742c1de3775e5a5ee7bea0956482dda27a37a7810d5707f18e45e400faedf6a103841f39", &(0x7f0000000300)="b9d951fc6fb6f16d6168066e02abf4c79287f9474cf9d91ecd516c3a24c47f1f26b27b6b92f2faaabc03de8969a6ac8919c812f4b1eeb1610f0d84515db2152d29f31d3c38694338096d45c8d48952d9d5b0cef60b3051a86fc8b7cdde7f52d46b724c1178cf298fef7c5e093d29863164a0cffc6fc1201e890cbb278ea1ff280d8209d01e903e627d3bf12fb79d32bbfa5cb906a199b2d37022460e2a6bbb1dcd6a873e4b768c9362e176c6b1c5d0ab156f1fa09e9d365f0b069fe332"}}) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {0x9, 0x38, 0x4, 0x36fe}, 0x2b, [0x3ff, 0x8, 0x3ff, 0x5, 0x8, 0x5, 0x5, 0x2, 0x7ff, 0x3, 0x8, 0xa, 0x101, 0x1, 0x7, 0x80000001, 0xfff, 0x5, 0x80, 0x5, 0x3, 0x0, 0xe0d, 0x7, 0x3, 0x6, 0x2, 0x9, 0x4, 0x6, 0x80000001, 0x8, 0x4, 0x0, 0x3c1e, 0x5, 0x5, 0xc8b810b, 0x3, 0x7, 0x800, 0xe000, 0x5, 0x5, 0xff, 0x7, 0xffffffff, 0x7, 0x101, 0x3, 0x10, 0x2, 0xffff, 0xfd6, 0xa, 0x6, 0x7, 0x55, 0x6, 0xa, 0x3, 0x8, 0x7fffffff, 0x4], [0x8c0000, 0x434, 0x6, 0x7, 0x0, 0x10001, 0x5, 0xdc, 0x8, 0x5, 0xd948, 0x5, 0x1, 0x8d, 0x3, 0x7, 0x3, 0x3, 0xffffffff, 0x3, 0x8, 0x3, 0x2, 0xa79, 0x40, 0xc37, 0x850, 0x7, 0x6d0, 0x6, 0x5, 0x3, 0x200, 0x820, 0x1, 0x8a1, 0xcdd, 0x5, 0x46, 0x5, 0x3, 0x7, 0x8, 0x1000, 0x5, 0x8, 0x2cc4, 0xa, 0x7, 0xa5f, 0x9, 0x7f, 0x17b, 0xd, 0x7, 0x10001, 0x6, 0x9, 0xc107, 0x4, 0xa88f, 0xfff, 0xfffffbff, 0xa], [0x9, 0x9, 0x11, 0x6, 0x100, 0x0, 0x9, 0x6, 0x7, 0xb, 0x7, 0x97c6, 0xfffffff8, 0x8e, 0x6, 0x2, 0xd403, 0xffffffff, 0x3, 0x80000001, 0x1, 0x35dc8239, 0x4f, 0x5, 0x6, 0x5, 0x2, 0x83f, 0x80000001, 0xff, 0xfffffffe, 0x1000, 0x6, 0x7, 0x7fffffff, 0x0, 0xd, 0xbe1, 0x4, 0xfffffc01, 0x4, 0x0, 0x4, 0x67, 0x80000000, 0x8, 0x2, 0x180000, 0x1, 0x7ff, 0x0, 0x43848, 0x7, 0x5, 0x2, 0x0, 0x0, 0x3, 0x6, 0x8, 0x40, 0xffffdcab, 0x6, 0x6ebea91a], [0x0, 0x9, 0xfffffffe, 0x101, 0x3, 0x40, 0x933, 0xff, 0x7ff, 0x4, 0x9, 0x0, 0x6, 0x81, 0x8001, 0xd, 0x400, 0x3ff, 0x7, 0xfffffff7, 0xf27e, 0x6656, 0x1, 0xbc, 0x2, 0x9, 0xffffffff, 0x1, 0xd, 0x1, 0x1, 0x4, 0x8, 0x1, 0x4, 0xce9, 0x8, 0x8001, 0x3cee, 0x80, 0x1ff, 0x3, 0x6, 0xdaa, 0x1, 0x7, 0x200, 0x280, 0x0, 0x6, 0xc, 0x0, 0x1, 0x9, 0x5, 0x3e, 0x3, 0x6, 0x9, 0x2, 0x6be, 0x5, 0x4, 0x9]}, 0x45c) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000880)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000008c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000900), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0xa8, 0x0, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf0}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x48}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004010}, 0x40045) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = open(&(0x7f0000002bc0)='./file0\x00', 0x410500, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000002c00)) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsu(&(0x7f0000002c40), 0x7509, 0x8800) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000002cc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xa) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000002d00)={0x9, "ae8e8ebafad984016c4c2929a73130a4dcb6330af470fab650fd8f6813ee55b8", 0x3, 0x0, 0x2, 0x1700, 0x2010100, 0x2}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 6.48367847s ago: executing program 1 (id=813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"}) 6.417716577s ago: executing program 3 (id=814): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000004adeffffff00000000000000fdffffff0100"/38]) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006000000", @ANYRES32, @ANYRESDEC], 0x0, 0x4}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x7) accept4$x25(r4, 0x0, 0x0, 0x80800) r5 = socket$rxrpc(0x21, 0x2, 0x2) socket$kcm(0xa, 0x1, 0x106) r6 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) bind$rxrpc(r5, 0x0, 0x0) listen(r5, 0x100000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000080)) 5.719313823s ago: executing program 1 (id=815): fcntl$setownex(0xffffffffffffffff, 0x11, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f00000003c0)={0x0, 0x0, 0x25, &(0x7f0000000440)=ANY=[@ANYBLOB]}) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={'streebog256-generic\x00'}}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2000c041}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001000)={r8, &(0x7f0000000fc0)}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) 5.497270063s ago: executing program 3 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x54, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x31, 0x701, 0x70bd2a, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) 5.379767884s ago: executing program 0 (id=817): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8, 0x0, {0x0, r4}}) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x700, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r5, @ANYBLOB="05002abd7000fddbdf2501000000a00108807400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240001000000000000000000000000000000000000000000000000000000000000000000200004000a004e2000000001ff010000000000000000000000000001020000000800030007000000e800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffc000098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff050003000100000064000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a0000001400020000000000000000000000000000000001050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000008000100", @ANYRES32=r6, @ANYBLOB="cefed22ea79f7b96abb5e0757fca384d4b90bc5d0d5b47d1307c36cb9da3181e732cdce4471fcc9b59ae35404fb15851c28218c5548eaff6142e75e5b877a01bde4308fd8a2d3088dd75f510cd50bea2d527a8eeb2e4ee949c875da787ec2b74fc8ed54a8526e3fe407448bb31395b8dc0c49f442a11127c895bb1437f0f0ed19ec19bdfb145447b5419bc4c0b6569cc52ec383c"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 5.353196639s ago: executing program 3 (id=818): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff}, 0x4000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000600)=0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2200.L,uname=connlimit\x00,version=9p2000.u,uname=\x00,access=any,uname=/dev/video#\x00,rootcontext=sysadm_u,subj_type=]),euid=', @ANYRESDEC=r7, @ANYBLOB=',\x00']) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000007c0)={0x4, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)={0x88, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000003240)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000140)={0xf0f045}) socket$netlink(0x10, 0x3, 0x0) 4.993169664s ago: executing program 2 (id=820): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x12000, @mcast2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x62}}}], 0x30}}], 0x2, 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(r3, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semtimedop(r3, &(0x7f00000001c0)=[{0x3, 0x5903, 0x1000}, {0x3, 0x0, 0x1000}], 0x2, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5, 0x400}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000500)={0x8b, 0xfff, 0x1, 'queue1\x00', 0x80000001}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4004) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000040)={0x8, 'vlan0\x00', {'lo\x00'}, 0x401}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2f2240, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e24, @empty=0xe00}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgroups(0x1, &(0x7f0000000180)=[r9]) 3.988068704s ago: executing program 2 (id=822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 3.963777194s ago: executing program 4 (id=823): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x1e, &(0x7f0000000180)={@local, @broadcast, @void, {@can={0xc, {{0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "dea68e14fe0356d7"}}}}, 0x0) syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/53) pipe(&(0x7f00000001c0)) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000080)=0x80000003) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) r9 = dup2(r8, r8) read$FUSE(r9, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000000280)="0d1c409c14b8ddbbe2423ac75d732f3d0e9cd37b375b9673cb39c6b35cbb85c4ba83de9d23bbcdd53a9f0d7c92b66f6d872096b32f4bdac32a6136c86365cfd42c3b0a25fac76123b6d700d3ba70cc138bc435d3b1fcee2545c3a421119087bddbbfd0418488219343819cf0a6780d54166d2769a719b207136357ff3f505fc1d6144239ba630b15e7f8aeef7be5cb8c9e738faec0d1ab79d34b994e098323b94d32926bc3b0fd88c13cc781a0fc3da7c4d83fbaf3288fabe01685a3422570fa4cba7e840bd0a01e995c91c5aba51ca15461dc1916bde9e70c66f3aae48475e95aea1f8e6c6f10104d64f767b7f9b7909f5caa5fd61ec7bc7392bfb7fe4f1d1d0528601a87f9248693f31a0f2ea07a0f33e670bad3ba0c648266195c6d9a76cd973a9da6016d1f5e0d49122f64da8933cfcf6a970d11767279a9e8e37a30a007e6ea473e146069e72894fcd378e17d4fa761999c128492a0321c3153edf7b28d0cddd78758f5192a924fbe2e8c594cf35aeffc635b14903d134fc5f7857218f99266c64be16e5f4ad76a8b5f6d39ca2451afcdcb0cf42322a5166becc90621f99f28e42bb2cb610039c45e54cc4bb8e8210e612a3f1ac93366b7bd77410af8b4b3eb03085354c9f8d12cc62da82eff96a006dab656c10e1bf210124b0ed6841158ec70981a399ba7c406f3014bf77553be6197d79dc1d31ac4c598bdbd007578d50f00ce85810e0759e91505549c70005a5f923aba20d8e05d0b764680b9ea259c8fa71f1ee36b71da662b825019c07aade7db363662103887079dea43ca30c32e4f0d9ff043720541633157a3ff1dc055ac1db5b25765b7ef2e338c104db28b6be7fdae54f04075e26ce38ec71d35c029df580ee3ef68e46359031aea121d0776398d1f1e28e9cbdc20cb58adf5dfa01a2819f697bb3189ac0d32eec43c0ef75f5bd4c7926d18daf9a6e9265c961aadbed4fb9627a1f0a6c3dde66fe5530993a7f150e5b361ad0db403a864ef4f5e0f21db55aa22055bdc5b282b057d07efd6abe23f941a62d6f613a1ff8d31da632284e89a3069c6b26ef35e55fc846fb1c28651cc5a879a4994568c4639b9fba8395014c9f4f6152cee1ddf8d582bc496bcbad8e39e0a5a3e713deed021eb9d5b3f8679a8bddc08ca77d7cd101006c5021b65cc7648a646735d9d7f6e54e4fb5bcf1fd9aee4beb700e597011a2fa6c01d22e9b6c7a5afd7def8ab0a3e612d8a5ce571dba2d0696155c3dbfcc851293eebccfac6855a7b024d762e768867f57446ecd6e1d09a31959a6374c50445884dfcc68a62662e5701a25a1da8e0abd0428bb558f9f7e74c250d4af62afad71e0f23268a955c548b41cc83f6810c72c832476383a355abfa449fc05c7afa2ed70849f175e826361882503246e688983f472c418578ae4c893d847c0c7f8ec99352d3024a69134dfccbc6ec3351b321483c57d2d1e77c0c7551cdaf4c14038844b1b05c25541d1d48bf0dfd1ae40c35872a5b37c2958e3a60187531814f3adff870aeb42cf611c3f777b08f7dcacf5c087b19c17dfca413097a603823363c2c55597330de20a73465ccbe5acfad066fcb17c177827cf081c588b73c042150bf1a18aff97518fbc1b4d5d22f29077e186ae9b998b4d6fdbcbc8c3bd57dcc61cc322537743ce480c1dea39adcc6a51da745a60e5272a7181986bcb992895035f0f882cdf79c56a84cd88c9bf0b7dab9c1f453cf4c05e2a33f43f4252fdcf99cf785e639bd9d11c374d4e3107ce128d2a823b6a8631a8fdebdf14a0bfc3f79d44cd54d3e8b9c5a3f41b9a1187e23f5a5eb5fadff92d746ff3befec7189ca19c1987551d0fec321cc306d235f82b3f479f3d7a3c1d2377afe3f22a49c682646e9893d7700061a0229a99d360f89d281dc6bb95b92329cc7277b89a9e6a3edd3c753cbb93e9f1249572bae520fb7c46970f527fd93c445a8159d4992badc395c05313462d37c4f651afbdb04f9f42ad4433c5c765735731ed6d8c97e4ca9fd3a1885de6c051e652a1ea40230e9d854ec2145c78ef5574deac83e78df8932dde1d5c46862c9f808394dc7f064b5649cc7b2627a55683ed33f2712ad2d4f77ec7f2be200e01fca138b3d1f42916a54a66561916bcbd3109f6eacf5096e478442e56e5af61f7c32c681bd35bf94a429a52024a48f6002978594418b66c6eb0fa91dccc4fa83d48927349b8a7cbb70670bd78b8acbbcb554a219cdc6740de4bbfcad2250fc219436ba5db017c172d6e24eaedf29d169b8867fc84eb2e721b31b08604a6fbd8d5edd9bb0152346509619f4a0f41090228b10868f56cd7d7c025cccc8f2b4a7d85ab91862c65d5d578fd5c046928c5c8f999611dea07a1451357b4365b33bac0a2a842b84e2cd4f790dca74cc962000f72d821b093e271e63680c0e9019769f3abed377f51f2e0a373958dfe351a1db29da4b74f9ba1250a8a0b985ed86cd7a2a4ede57ce00dbe77f5c797e6b9896ccb978d3a01047f9ac7d66e820073193b6a3400ff41f2f8a98a44a0d2a608db3000571efdade9a44f278272e7ada101d275c589fed2ee0191801b7a2ea62dec117c9cfd96ccb73de7fa2eb4d60a7ce1170047a5266668da1aa8489c6e4ce564607a485afc6991ba262cd6f155c23fbb47610f555e0be090854ffa0d610ae4baa1dbd1f36249beb0510b8d96132b6396a6261214f3153bfc4f0dcfeb55046bcca5868aa913316a2e802f9bfb51caacfd0045d96b3983b883db123da07fc20d06c973e3dc74c53006c77361cfa9d3b2062da3f9740cc7335ec792d1b2c767e86417433fe047c8d9368c0c51373b5e5158503afa52ab08ef49616499ccb8dc829e343d25fc1fc2ea6c95933295ab397f07703d1d8defebeb44a2a9556bbd5414cf921abfa8df9bc5ea76922d728ef0024f516c9fd7a2927a68ba9a7dcc4f52c3d8b72909b2bde14408e476778a3221644dfa13794e365a9ebb670eaf691b3c2393adc441519c1125b960ff109ccab52294c6584d74b3084cfda3707f7153681c88a1578a77be9224a70ce400f4af3dd72452df147476abf2668c1801fe538be40042717b6c468fe1a33d1d597fb637396b8ebed9f64eee42e645bd8dc0e63fbd3a139bce3157ce7ed6f5f643ee26847908efaf61cd977627647bc0e4f119b924bb185664f1dcf2240b2697c89e8f569332d19ceec176642ebf0bf509bd3b9477272159d45b708510908e74cc5e0304104d5ed6e578b46dffcf64367fe9d274ab8f16f3154f3e83ce6d3ae92a2644ceeb8ec33e07f728319eb69dfa37bb70b40a1001ff0157173e33af633496062b17cfab8b5c06ef2fadfef280da4e1f70fbbac10981a0b35f3ada39733d7d31798e455f0dd1c530939f09df43b5aff342c39052a51d773b22acbc8c1525f3572ef469eefe66d1895a9ca3c637286e3f9acd29e890ffccbb313dd9da50aacce808d06d0b109a16a1c2bf69fc4b85b9b7cc9b9ba9e5d709c65fd0a879032caee38315eb049b12f11c4d485ef426fff3a4f91b4f1ad4c192c4074636787ff966f82c8d4fcad13a7b581718ee7318f6731da2eb1338c95c35f1f2e082bedea7f05b87d891876cfab51ddf2908ebb2bc153c20001ae9c142b35a3de474b732c5f629bd948ac9230067120671d296001cabe19e3d2302c1f32e4fcff1681ab2ef216309c21c6a5afc51ac500687a5140d015ee2bda5f3d8a15826a21a0a9495b36fe958fff32afe270f809f3a8f8cd2d8992a859e5de779bd8aa4dc6979807171282ef34502f1bf34f529cdad15671692f232a9f2dd2107f8198f7a9ea5883cbeb2a060ff1b13fc1a4df315dff940e8f013e8142c640acf51ebb2b2f878dafb6c12747cef3061f2235bccceacce4bf9829df24b9f9e9c5c259aafbe61ff6be827e492e2c03fa1e9f936196ff9acb28081f7ca74109d823c5c96b1e808bc2b8072763954ec5691f7935284e045c6d86c5c68d69b4502a5132b3c1cdc5e000ed1f6aa4bc0a9090a8923004ac05558e08827c71fd2e24f931f880244143a8d092dc8bb2b48317ff49fa0b494b3fea0741fbcac6cf780f93db42f47d23170a70619d06b0462f2fb04dabe2a0c94a1d97ecb159d426df47f0a1e13764e045d97ba75fd0eede9711d112581b4a2e66b10077aa92c98e30d6504f0c08c0c68015c88abbc991d5a799e588d1ee7492d699126627ace339c1bb024a59ccd9d3df0197c8e56219d76698b61ec94927f41ccc7bc80ab6f65380d31d58f796e7e697b28e371ecd9ccf6b58e9cf32daee54c5228268446677f600ca8d091b6a4774749d40d6d4d6a009ae12bae1c530e6961420507a13a2a32c4f0863c790159a26588bed9f50b4ffbfc8649adc8144779653b4226fed5ab93570fb3edcc1be70780f6ddc8d9ef1ff39d22bd20cd8ae0195d02ada60fa0d65e065b7a3950d5a2b77546ad8f1c1018344589085638793d26fb4a5c59c23f1c9b148ddcbc478e1867e109590c44c14f5ad6e8cda21a75358cbfe6f397c711eead2b1c73df1453d184a44e85c2f6ac0c266b0f67b001426cec02efb66085bd1b8bcaf06d6709d545895337fe36e9d26417238f36be5ba51d5cd7cd7cec452780b72bc441052f67496ed8bb4d393db8da52aa3b0ef10a74a33c2b7ee24f76642f83bfc3e686951cbd1983f1ea54d536f6c86e8b20a4eaefb9ca57308abcfd81357e3d0eebeb0ff805c151ea1d0063c3bea7120562886fc4ce284f33d4a85c830d8b9b9b1295c352c3f5db54973a5ed3788e5396a1add7022546f13db95e4ad1a994142aa4f98d644cd822192e3e1875da3b4a6cfd61cca36a82fd4c1f09db84f6b379483e2b81749609750b493e406c8add341d8855ef47d8e8cd49e9d1340be1223d268bed3a2cc949b74cf01160723d26de9b11138fd8e8957354c2a58fa30903b7544d2bdf49249e5ca9f5d030f0c17e7ec605482523d1da3b3ca6c94c8724c20b929954c1c1f321ba7f77e2e954056a2838e57696e40a2fc9f8c2b7e25a41cd500f4fffb196810b3d77f79dfc1f7179fd4e2c63957c65da8325185cdfa37a82d42ebfc631a87ce7ba60ad09132f1eabe7b870c88fa277578e19a6adabd328e6b453dae201ce4327a378174695264ff4411a3815c362480058038b1b70b652e89b0c7743548b897c80c53b16aba4d244753fd8c14c8bcdbe2a2710df7842a8af2bd0a966632655c01bbc2604151b80e349b2f5f63fc8fdfb34c7223803fc0fd1dcf7fb5471c65f59ef9b02c3c0440f7e44fa4759782a46165c64e2ffc246d0438248c461e932806ddc20d3eeb597d74e9cbfba85951c601fd8b903c80f5d8bd5fc5b824cd63d9bc2d38438eb8a8bd1fbbad944b3ca074eb318ae074ef4d7f12076ac1809ca6868be7e5fcbb953ee70bcccb7cf51422e8293faf3e88d4b179b4c7a6ab53638eb05c902715c023f33ba9e121aed0b7b5f0544b5275cf22093e64a7038cda03fc9014002cb52d4568625d321b344e566b50a7e9695c79daab4aa0fc82790cd32708bdc0242686052677eb163cba152231e45d0ad1b8238a7d1230f43612ae8b9525d1f98372774a326e9baa48e69093b215ea503e054729722a71c7e6c58b958f3cec95fdbf1811b7c8a53787e95d266a70d408798e94d9579e813a8e9e3d4bdb4f2682f7aa30b659c722aa07faa911543c57db9fb3abf73ac5b4096cadb4bfa2b25e51b11e754348a2abff384a16194af26590ccd657cf76bae1f1246b67ee0834105f008cf77b1320ecfcb87bfa7d2b2fdec1330f54b6c6cf2280119e39e9a66ccef3df0c4297e1c861a027fa2ea5a1ab530f5b94a98895405c620bb6faecd7e80bfb42d1a4646360e0e8355af548439f8db48d583352ea84385e271b3067bf7b047e69e23c3bd2c3ea74df48b3649985b0ef12a9f3803ccfa52e01381d30a9005f0415a149557b67d0ac7c439ba8b20a9eb293ee4d357cc1d9e1e7f707ad77e58f22d2b26f9a8e726e826b6722c2b910416dcdaf772476e55256fefb1fa5de0139e15c2bf84e267be5d5381bb30607b731c8f305a1b4e1e4bae0b59e61dc77b13d129dfff4fdaf48f95038cc11b14e8266aac4d59fb40346c07a7fee92327e40905e40f8135b0f6e9e31969902e9926a99d7ae30891be917581189ff998ea5310da0cf72faae333ab8ee7cb9f78bb0a8695a841b8d37709e2826594cc8927f5dd98c53ea4c5246b5fc09f756f29b61c21996dcb6c0f1e476674aa9b6f69ccfcf8672b048ee723af55104da1c2f5250e8bbb3bdf2b7edb4878a902032ab4115f516d804d2cde7bce6b0c6dcd1f0d321fe4bb279e4c45294df0fd33956469839c70bcb68c033b597daf3f515354e72fd1ecff87e4b8d1ae52e6ef0fc773a49ca76d0659454b59e9c62fc8e10131e50893c0c0a997fb5766157701ce8e6a6482bd8b0b53a6b4fd4227d8e02c6453114f161017b18e52867282010df15c361a0ed3b17636adce6567ca97d4864dc15fca353490aecd5d26af991a92dcfd3e4dd38b8ed9181dee7e2e20cc2600c3211eecafd0dac537a693573e843259c30789a3d0ef91b78f95ed5da1c9e61716f651284e4eea663aab9c30d28a620745e44fbcf71221a23d332d411d17220c5a43321cbae90ba8104ffb4415d7563a21406d6be1fdc9abfff8998b51628b28b4ed84ded6804726cae5b62281949bb7cd7bec7bb2dfa8d831d4928b274c7452d2e9f8a37c67c98239b121d3acf381a10469d0dee019d38dbba865fdecfa34e39b0dcd4cf7a66e30f87d4f26d4190fdc62d44c850e94121ace3d531de3204ed5f838f5953c98b44a387a0cc95fc5e76facdf3a9f98183d32d887fb7d997a37b4737861bb12ea8e412e1015d3cceff7b448381f3fedd35a535e524f9e6df67e14882d9ec956a81e1972392c8c79cec77fe6d0f88a00710aaab4878187d6c387cf1ade1c61ca3b9bef117ad621c9a971d4f04a2e45314422f9f7606c932ab593db97747d7666948d04aacee1ceb6ae2fb205f32d953d94e5f2c7cb332eefa4bf11c999fb67e287960b64c36fa37de3c81fe53e057abc6f5575cb900a117242340126f721f8ad4c3d744440f2d9e1abf71fb24ca6f5abd392ce1110d4d138cd312373f99eef5a9b55a2a92a73be76860c380e5f2f1c9e5526ab5dc6f91d81d086dcfb70165c69b9bba0670366910ed053d43a61bc8215e95f304d73d38a689f174ac4940f1c7c87a011fbaa364e54887a0f38281509282943c38c77f9dbf385d0f8f62d30b300ae7ce24eb5b855057fc4fc8efcb05c4451fbc4de6f8b545559fb2bd2f8200eaa2822990d4afa0398e4c4d40534ece023306239bd86e2a0b9ae2fbfa640046379c1e2f0471e0005bdbd929119e54808f53fbc9ae318fd128aecaee2e314efcd76085a1da95b1261a321fe8229434dcc57844f15914221116d53faef06466643b996d5802167c0dcabe44979e576b4290aceee7aa771820fe113b85162e45961dea78ba31e0c54faa89ef75263d15580dd144745ab42b5d510f1beb115832df59ce57be19113f97aa21d984448e7fbc92c1291fd84f98e9ddd832336be330528e9df7b88f17f47708dfa401ba49562ef3650155bca61a81348896c151d05651caf865a3c40dbaecde5036233dd42a23f5712c93b2fa1c3ab754445bd258491fcf508ac344eeb38db1a4cb9980b1d97b826d76b0b10f8b8937dd0a9385c66ffffdab1819049c35aaf90b15267f7c58ff236c425414286bc7dfc3bd22abea8aeaeb113592ed41fa566d1426c85c3db9ef04e70b31ea52ae2f9352ae1195035b517f7e36350906773fabaef38fb29348b9797ec90cce08e0afb923fcfe0fe62ed2abd97d39949993048ae10c5be54808986f6c4aa437e413b449f57b0b0fc6f393808631fac191af623b8e90193ef2b0dda64f26b4771ab256bccd61ebf4b7ad099156986d64e77d37039d4a2e5836528a10c8c9d9ca9c640804dbf2db4154384cd8a8c02ce863e102ea944c17a643c120361d631b7f349f920ae6bd06db3e3af1bf902c3204e8632d27bd928701ee206a7d64448f9a81265a17a31878e3c1a2a044fc6f956b557471d1bf7dfe160716028191e851e18439f4e3561aa589528889090a3b673f70aebc1edb12861277f04f300acd8278e5f640ac0dc7e4f8df3ea39186119b0599f3e7bedfa0ee65e4d25d8586a2d10e773182d98ea9eef3b3d9805697adce7daf083b8a934c0d9c6467be25a6a22b6b246abcb355d03b8c3345dff9f40e253ae80a2de668dd9da044a2b90bc5788b0fe3a2c6387b3c817ea456eb7713a728caf4287d15006500435ff93eb6803e42e57c087c483e23605d9dcd6f758883fbb990eb0f91f351191956ac451e1c1d1ae113c03311057f5e70d8231bef8edb7c2cbecc4ab3e46b02945afbcdb2e8b005819dd141055af1fd6a3240af08751cd3a78ff92e39bba4d3c23aef960646512b3b86d6a8fa6880cfce6d58e1fbe734ac5f9b7018451a7a5879b3767dfb359eee615bab65116237e5de5b96bf9fbacd11702c73a8e478a64895d15ac0110737c3ab91222bc4c87326b5d5e3cf089da0a76d43222a8eeeb5286a4cb2fced98ebc2f6e876e8ff48b6f8f8264e52cf5b38906d657bd8d0d91e2d7846224ac60526f878e8189d80957a73a0fb95223842fb819286234d742c0aee14c75ed069411f7631aaa3e2a011fe75e67131a51733b9d2dc7981935d559a08a965363cdbc02dbadfcc4435040cff61df0cea2dcc5017deab9076fcc1a11ebe5020b6c96a16425397df15881815cf60b942648c234a5614ecffd4d5de50884934bdbd5177d24ee76f0c97fd0a2b97e527fa86c73ec672398f1d88c03d467f2712908d8fff5e02b4e1fe2d7bff02205597b3a5360e2767a3d7c488d222a3ea39d3fec61423e349689297868a4bfcf08a0938729fbc819ca2181f03f4ea42c7892dccd76560f1ef812ba7380681a8943e7bf2d6bb0729002a33a4a595c411cec870e8757e5d9cddb17563a627e598bd170cb6eab4d0d8a02c926bd0d67d2084df5873591ba8da1309f9c309fcdb1e1afea2ed48b467170f9d2539e62e75ed1e9ad94e2f574bba5e25f7473534e82e91263cef442f31e9e568a3eafa2b9de2a99fa681c6f6f245db26c24d56ae77fe239c63a70c2edd113f0d48bf5c2a887e1512bfb2801a0c628d3b91f57b1d1401b0e5e6012d32dafacd08775b1b28f15c44b03cd340a4e45be0534c4f5099c5bda5ef0035ab7d1ddbdb2e73ad49e15f6a04b5b09280581ebe2ce940a8058e2d14a0556c14adce8a40b6f0f78cc6bf46f0d0b2c4f9ce79e60eadd828eec8fd5c6b1196f685add24c959d4f1c9cbf7d21fb010df2f26fd1f1a5186186de0ab6f7fbf7ac2406a815382aad4edde90c8aa08ce053e86777fcbb089b4cbeb596949ff04739b53c4262b84881814c1cee97eb9147854b54ea354d53d906869c21e5772be517c127a0feb3844acb8b721f060e065b096d5f390b3557e25d50bb887ac018564a9b3ca3fe38eec76dace59bcadb81ed3764c177766ffc8770b7eca1fd3c87f3fc84f157974dc6356ab41388d973ae0a5a4a1d3d08f207b4add5bb902034f0be23bd27010cf5fb3a8ce4c34b123be47bf50fb6ff1593602e720d893561f72fcabdf7141ea4a274d319e9157ee4deb55dd412296525a1d82726fc8e8ad1ebddd6f7ac4ac10d3f59473cf5b0ae0644db9224268415ad314e4a7f4e4a17be80425198c097287ef95948ef260eb02d59e235caabeb1bcbf8829240e5637358879016ea8b5b06337d58aab36bc1a981d7667974068ca1a353a8caad2885236f407fcfc277210ff15f4d7d0caa2b31e5f745f455ff36a5fd9a9036c02f319a049ecb1d67c057130ae3d68374c82191059b44f8aebdf4574cd84cf7c031b6e177e8f5808f25ac76df8d7f9aada99e1a16ea5b22cc4bb349a352aceb2cb1ea47710704d446498f4d6ff2d8705797cfe62e03de9064a5831df451d021fcd93a71c3105f81df9d1ce5dc27d26d77326ab4bedf0c428a70772f2b0630b0640f643292e68e9b44d53f5c401f6ee09f8217b77b2d308e13cbedefa56920ad948b464a74c3e9ca9259d10132880d7dbd2c972c772985f7022a41ef473c254289982b9cde41f937a1de59b9a50caf728accac23ba485842dae35ad4ed412a31d2a134bf05ede9fc70fab45fee38f1f7e749e803446b418cc1b5e7f2019777ae03eab5e129e1eef2195ca84cde2848df14a93bbc3a917f1e06ce3753cf127f2241295fb630f6e27eadeaff570f955ace44dd204dcc082f7bcbe310e2c33267852049cb839142d072e3f3ebb1fc289c78769fd0f05578630e42a5829b82c6d535c012204aa74659282ba0498156e2183ecee174054d45fd97e5a0159255d8af432563d367f045d209c67cc70f7cf13b9a6578983ea640f0e8e66113484f48d41cb65b1338eb6cec534b3acdf9e5a1a3ac9157d75986583edfda4958e79593b6808b4762f823a6f442ee1749e592bc103f2b9e16107b939ece49cb447e5a7d34d66f18567d0e981f4fef25a467144689662783503a03e1800d22f40f61903d8270453161a68386bdd94d59dd66eb5ae067d4129be23a0b17b89d0478734460bb88c5771d9444caa769aa62d56bd128bc328e03d2e18d966f5784398ca2aab86007f7ca00908d4bd7f2f3ecf3024110b073304c7bb17bd73725721a99e94c8d5e5da7a839d58f2196cace99b98d7f584a49fee2a426e6ec3f08e520f7965aa2dad97084c2ebed43c58dbc9116f420d4735decc47dea514b689f5479c56b6128dd684c4fbf0945aa15363276af833b27b82cb48541413bc9fc51f9ce57c14bb6c39f86cbc99b69e5d91e7cf72f340f67012eb2f5fb21d830e97eb3664674ecc36c754f90d1a8f6092fe3a48827849ec95ed35887cfd2ab3f26331bdc154ad034f31ef26ecec5feedac1367f4f642e99ebb409ddd5dd8d0087ebf048e4924a2119c69ff00af79233443b897f7bd1d80f4d34555719bd8dd9c0d824d0437c2adfc598fd4c2c2d8cf7693e05238987bdb9bb04751dfcd44fbced899a7dadef499b9bfb45ee52ea59369c950821a667712946c7207e36473660f3f9c9906ed889ffe7a8c735e98d41cc96aecf3e577072cb4711eb690d28ff41dbe9070cd73da26875994a7b8480f2d21bd4b92402bc293fea154071c401581a9b858dcb4113149105d793fd4d0e98894f228f24250ada364f49180fbd116e0677cbfbe928a840dbfab2791865cec67ab39affa7b76c266285ed2ede7ce77e9e6f21545b8d177cc73e5142e6bbfbb3e9793716de8d6faeb74e18475cac7541e3ccd875cc0dc8bd5a01e468700d5817fc44b6dd64d74dbe0b351c80815102a0dc2038c83dc75189bb4ca425eabeeaa70fcebfda8f16c4b083762811325fdc6b94f84b6d4629929b85d0cf678b28651cab8a825f28440ca4e7a2193c6f9c769b0aa226754fa8eabd7cd1d31ea2478a83e0d79eaff6f72bfb05c31098f4640256b8c21ef25808821c08cbc68e8b6205fdbcb10b17d63cfb5ead7fb8ae1", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.002968102s ago: executing program 2 (id=824): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(0x0, 0x1ff, 0x52300) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 2.680287765s ago: executing program 4 (id=825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2", 0x2, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003fc0)=ANY=[], 0x1060}, 0x1, 0x0, 0x0, 0x4805}, 0x20000000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0xff0f, 0x0}, &(0x7f0000000000)=0x40) 2.475974744s ago: executing program 4 (id=826): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a0900001400"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0xc010) 2.250943649s ago: executing program 1 (id=827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007900000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) socket(0x28, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x8, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r2, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)=""/31, 0x1f}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) socket(0x28, 0x5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1e, 0x805, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r6}}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2.207985475s ago: executing program 3 (id=828): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000010c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x14, @remote, 'sit0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000280)={0xa, &(0x7f0000000180)=[{0xa, 0x3e, 0x5, 0x600c}, {0x2c31, 0x5, 0x9, 0x5}, {0x81, 0xc6, 0x1, 0x3}, {0x1, 0x3, 0x8, 0xffffff51}, {0x6, 0x18, 0xc0, 0x400}, {0x3, 0xe, 0x3}, {0x1ff, 0x1b, 0x6b, 0x1}, {0x4, 0x1, 0x5d, 0xb7}, {0xa541, 0x9, 0x40, 0x6}, {0x6, 0x4, 0xb4, 0xc}]}) 2.19132131s ago: executing program 4 (id=829): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r2}, 0x18) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r3}, 0x18) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002a40)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c, &(0x7f0000000240)}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x10001, @private0={0xfc, 0x0, '\x00', 0x20}, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="42a6", 0x2}], 0x1}}], 0x2, 0x44045) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x3}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000040)=0x2000000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xffffff04}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20004080) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3}, 0x94) r9 = syz_open_dev$amidi(&(0x7f00000002c0), 0x80d, 0x10000) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000540)={0x7, 0x4, 0x8, 0x0, 0x0, [{{r8}, 0x2}, {{r8}}, {{r7}, 0x7fffffff}, {{r9}}, {{r7}, 0x5}, {{r10}, 0xbc}, {{r4}, 0xc}, {{r10}, 0x80000000}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r11, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r13}, 0x69) r14 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r14, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r14, 0x0, 0x0) sendmmsg$inet6(r14, 0x0, 0x0, 0x400dc05) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000002740)) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 2.004331487s ago: executing program 3 (id=830): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x3, &(0x7f0000000180)=0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r13 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r13, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) eventfd(0x0) r14 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) read$FUSE(r14, &(0x7f000001b000)={0x2020}, 0x2020) 1.909667634s ago: executing program 0 (id=831): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) prlimit64(r0, 0x6, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r7, 0x1, 0x28, 0x0, &(0x7f0000000140)) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x144100, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000040)=[r7, r8, r9], 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000003c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x3) setsockopt$inet6_tcp_int(r11, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000002000)=""/102400, 0x19000) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 1.886094213s ago: executing program 2 (id=832): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sys_exit\x00', r0, 0x0, 0x800}, 0x18) openat$iommufd(0xffffffffffffff9c, &(0x7f0000001880), 0x101100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5040100, 0x0, 0x32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendto$inet6(r2, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x4894) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6638a, 0x1001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x54}, 0x0) shmdt(0x0) 1.867213973s ago: executing program 4 (id=833): setresuid(0xee00, 0xee00, 0x0) (async) r0 = syz_io_uring_setup(0x1aff, &(0x7f0000000240)={0x0, 0x1305, 0x8000, 0x1, 0x2d4}, &(0x7f00000002c0), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cbc-camellia-asm,sha384-ssse3)\x00'}, 0x58) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000020603000000000000000000050000020500050007000000c2360822db74dc1e"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20040004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000001c0)=0x7, 0x4) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYRES8=r5, @ANYBLOB="6071df99ec946eee32d685e7952d290f617929cc84579598ba1cbd55c1b12d62dff7522f8065559ff6e36aa2a4feae35ef61e37c5313d968320ce9629ae8e7db0dfa4c"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000240)="63cd5c1672914cd2d5c5ab9c"}) (async, rerun: 64) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x5) (async) inotify_init1(0x0) 904.182658ms ago: executing program 1 (id=834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_RUN(r2, 0xae80, 0x0) 895.307635ms ago: executing program 0 (id=835): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x31, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0x10, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 324.306696ms ago: executing program 0 (id=836): syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0xfd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000190000/0x4000)=nil, 0x4000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000003a40)=""/148, 0x94}, {&(0x7f0000000580)=""/191, 0xbf}, {&(0x7f0000000640)=""/197, 0xc5}, {&(0x7f0000000780)=""/153, 0x99}], 0x5, &(0x7f0000000840)=""/134, 0x86}, 0x1}, {{&(0x7f0000001640)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/249, 0xf9}, {&(0x7f0000000a80)=""/194, 0xc2}, {&(0x7f0000000b80)=""/216, 0xd8}], 0x3, &(0x7f0000000c80)=""/51, 0x33}, 0x9}, {{&(0x7f0000000cc0)=@l2tp, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d40)=""/103, 0x67}], 0x1, &(0x7f0000000e00)=""/194, 0xc2}, 0x401}, {{&(0x7f0000000f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f80)=""/186, 0xba}, {&(0x7f0000001040)=""/204, 0xcc}, {&(0x7f0000001140)=""/182, 0xb6}], 0x3, &(0x7f0000001240)=""/106, 0x6a}, 0x2}, {{&(0x7f00000012c0)=@pppol2tp, 0x80, &(0x7f0000001840)=[{&(0x7f0000001340)=""/12, 0xc}, {&(0x7f0000001380)=""/29, 0x1d}, {&(0x7f0000001480)=""/185, 0xb9}, {&(0x7f0000003b00)=""/237, 0xed}, {&(0x7f00000013c0)=""/33, 0x21}, {&(0x7f0000003940)=""/241, 0xf1}, {&(0x7f0000001740)=""/189, 0xbd}, {&(0x7f0000000240)}, {&(0x7f0000001800)=""/40, 0x28}], 0x9, &(0x7f0000001900)=""/186, 0xba}, 0x3}, {{&(0x7f00000019c0)=@tipc=@id, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a40)=""/170, 0xaa}, {&(0x7f0000001b00)=""/27, 0x1b}, {&(0x7f0000001b40)=""/204, 0xcc}], 0x3}, 0xf31d}, {{&(0x7f0000001c80)=@can, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001d00)=""/1, 0x1}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/113, 0x71}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f0000002e40)=""/60, 0x3c}], 0x5, &(0x7f0000002f00)=""/110, 0x6e}, 0x10000}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002f80)=""/1, 0x1}, {&(0x7f0000002fc0)=""/4, 0x4}, {&(0x7f0000000900)}, {&(0x7f0000003040)=""/70, 0x46}, {&(0x7f0000000240)=""/136, 0x88}], 0x5, &(0x7f00000031c0)=""/208, 0xd0}, 0x2}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000032c0)=""/222, 0xde}, {&(0x7f00000033c0)=""/78, 0x4e}, {&(0x7f0000003440)=""/88, 0x58}, {&(0x7f00000034c0)=""/122, 0x7a}, {&(0x7f0000003540)=""/229, 0xe5}, {&(0x7f0000003640)=""/40, 0x28}], 0x6}, 0x6}], 0x9, 0x2020, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) (async) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000380)=0x14) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000000c0)=0x32) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0xbb8b4346) ioctl$sock_netdev_private(r7, 0x8924, &(0x7f0000000000)) 232.252667ms ago: executing program 4 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x4, 0x1}]}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="2e000400010002", 0x7) keyctl$clear(0x3, 0xfffffffffffffffd) 179.286814ms ago: executing program 1 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 7) 0s ago: executing program 0 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x7, 0x0) read$msr(r1, &(0x7f0000000180)=""/30, 0x1e) (async) close(r0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x101, 0x208000) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x3, 0x5, &(0x7f0000000080)={0x6, "0c608f22169e45e6efb83af3c6e8ebc045934c4b1555643b03d22239fdc918ea7d"}}) kernel console output (not intermixed with test programs): _partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 232.050865][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz.4.418 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 232.050886][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.050892][ T7891] Call Trace: [ 232.050896][ T7891] [ 232.050900][ T7891] dump_stack_lvl+0x16c/0x1f0 [ 232.050922][ T7891] should_fail_ex+0x512/0x640 [ 232.050941][ T7891] _copy_to_user+0x32/0xd0 [ 232.050953][ T7891] simple_read_from_buffer+0xcb/0x170 [ 232.050972][ T7891] proc_fail_nth_read+0x197/0x270 [ 232.050989][ T7891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.051006][ T7891] ? rw_verify_area+0xcf/0x680 [ 232.051021][ T7891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.051036][ T7891] vfs_read+0x1e1/0xc60 [ 232.051053][ T7891] ? __pfx___mutex_lock+0x10/0x10 [ 232.051065][ T7891] ? __pfx_vfs_read+0x10/0x10 [ 232.051084][ T7891] ? __fget_files+0x20e/0x3c0 [ 232.051097][ T7891] ksys_read+0x12a/0x250 [ 232.051112][ T7891] ? __pfx_ksys_read+0x10/0x10 [ 232.051132][ T7891] do_syscall_64+0xcd/0x4c0 [ 232.051143][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.051155][ T7891] RIP: 0033:0x7fb52898d3bc [ 232.051164][ T7891] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 232.051175][ T7891] RSP: 002b:00007fb529856030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.051186][ T7891] RAX: ffffffffffffffda RBX: 00007fb528bb5fa0 RCX: 00007fb52898d3bc [ 232.051192][ T7891] RDX: 000000000000000f RSI: 00007fb5298560a0 RDI: 0000000000000004 [ 232.051199][ T7891] RBP: 00007fb529856090 R08: 0000000000000000 R09: 0000000000000000 [ 232.051205][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.051211][ T7891] R13: 0000000000000000 R14: 00007fb528bb5fa0 R15: 00007ffc89967d68 [ 232.051239][ T7891] [ 232.431004][ T5827] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 232.500246][ T30] audit: type=1400 audit(1753225940.824:355): avc: denied { shutdown } for pid=7897 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.566364][ T7894] xt_socket: unknown flags 0x58 [ 232.622392][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 233.301436][ T5827] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 233.423806][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.699861][ T5827] usb 4-1: config 0 descriptor?? [ 233.739943][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 233.749121][ T7903] fuse: Bad value for 'fd' [ 233.759117][ T5827] usb 4-1: can't set config #0, error -32 [ 233.836252][ T5827] usb 4-1: USB disconnect, device number 4 [ 234.376254][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 234.406118][ T7920] netlink: 'syz.0.428': attribute type 11 has an invalid length. [ 234.425986][ T7920] process 'syz.0.428' launched './file0' with NULL argv: empty string added [ 234.529990][ T30] audit: type=1400 audit(1753225942.814:356): avc: denied { execute_no_trans } for pid=7917 comm="syz.0.428" path="/85/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.614290][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.626705][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.637314][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.651847][ T5913] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.690770][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.732321][ T5913] usb 3-1: config 0 descriptor?? [ 234.806619][ T30] audit: type=1400 audit(1753225943.124:357): avc: denied { ioctl } for pid=7923 comm="syz.3.430" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.659550][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 235.689816][ T5913] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xe [ 235.992019][ T7934] netlink: 48 bytes leftover after parsing attributes in process `syz.1.432'. [ 236.004598][ T5913] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 236.032206][ T5913] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 236.082924][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 236.083095][ T5913] usb 3-1: USB disconnect, device number 9 [ 236.107617][ T24] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 236.119377][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.193804][ T24] usb 1-1: config 0 descriptor?? [ 236.207498][ T7935] fido_id[7935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 236.352947][ T7937] : entered promiscuous mode [ 236.447838][ T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 236.500984][ T30] audit: type=1400 audit(1753225944.824:358): avc: denied { mount } for pid=7940 comm="syz.4.434" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 236.508530][ T7941] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 236.548447][ T7941] evm: overlay not supported [ 236.633538][ T30] audit: type=1400 audit(1753225944.964:359): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 237.390695][ T7956] fuse: Unknown parameter 'user_i00000000000000000000' [ 237.866021][ T30] audit: type=1400 audit(1753225946.194:360): avc: denied { setattr } for pid=7957 comm="syz.2.439" name="" dev="pipefs" ino=15404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 238.580520][ T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 238.594163][ T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 238.614122][ T24] asix 1-1:0.0: probe with driver asix failed with error -71 [ 238.645653][ T24] usb 1-1: USB disconnect, device number 12 [ 239.687228][ T7975] netlink: 148 bytes leftover after parsing attributes in process `syz.2.443'. [ 239.811484][ T30] audit: type=1400 audit(1753225948.134:361): avc: denied { listen } for pid=7976 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 239.861026][ T30] audit: type=1400 audit(1753225948.134:362): avc: denied { accept } for pid=7976 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 240.134909][ T30] audit: type=1400 audit(1753225948.444:363): avc: denied { listen } for pid=7976 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 240.342334][ T30] audit: type=1400 audit(1753225948.664:364): avc: denied { read } for pid=7981 comm="syz.0.446" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 240.344289][ T7983] FAULT_INJECTION: forcing a failure. [ 240.344289][ T7983] name failslab, interval 1, probability 0, space 0, times 0 [ 240.443554][ T30] audit: type=1400 audit(1753225948.664:365): avc: denied { open } for pid=7981 comm="syz.0.446" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 240.601556][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.0.446 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 240.601584][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.601595][ T7983] Call Trace: [ 240.601601][ T7983] [ 240.601608][ T7983] dump_stack_lvl+0x16c/0x1f0 [ 240.601643][ T7983] should_fail_ex+0x512/0x640 [ 240.601674][ T7983] should_failslab+0xc2/0x120 [ 240.601693][ T7983] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 240.601723][ T7983] ? sidtab_sid2str_get+0x17a/0x680 [ 240.601745][ T7983] kmemdup_noprof+0x29/0x60 [ 240.601773][ T7983] sidtab_sid2str_get+0x17a/0x680 [ 240.601793][ T7983] sidtab_entry_to_string+0x33/0x110 [ 240.601823][ T7983] security_sid_to_context_core+0x35c/0x640 [ 240.601854][ T7983] avc_audit_post_callback+0x109/0x8f0 [ 240.601877][ T7983] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 240.601895][ T7983] ? skb_put+0x138/0x1b0 [ 240.601918][ T7983] ? audit_log_n_string+0x253/0x540 [ 240.601943][ T7983] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 240.601962][ T7983] common_lsm_audit+0x24b/0x300 [ 240.601980][ T7983] ? __pfx_common_lsm_audit+0x10/0x10 [ 240.602004][ T7983] slow_avc_audit+0x186/0x210 [ 240.602026][ T7983] ? __pfx_slow_avc_audit+0x10/0x10 [ 240.602053][ T7983] ? find_held_lock+0x2b/0x80 [ 240.602076][ T7983] ? avc_has_extended_perms+0x33a/0x1090 [ 240.602100][ T7983] avc_has_extended_perms+0xa40/0x1090 [ 240.602129][ T7983] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 240.602152][ T7983] ? kasan_quarantine_put+0x10a/0x240 [ 240.602176][ T7983] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.602206][ T7983] ? find_held_lock+0x2b/0x80 [ 240.602233][ T7983] ? tomoyo_path_number_perm+0x18d/0x580 [ 240.602273][ T7983] ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 240.602293][ T7983] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 240.602316][ T7983] ? hook_file_ioctl_common+0x145/0x410 [ 240.602343][ T7983] ? selinux_file_ioctl+0x180/0x270 [ 240.602358][ T7983] selinux_file_ioctl+0x180/0x270 [ 240.602377][ T7983] security_file_ioctl+0xc6/0x240 [ 240.602395][ T7983] __x64_sys_ioctl+0xb7/0x210 [ 240.602421][ T7983] do_syscall_64+0xcd/0x4c0 [ 240.602439][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.602457][ T7983] RIP: 0033:0x7f1b84b8e9a9 [ 240.602471][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.602488][ T7983] RSP: 002b:00007f1b85936038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.602513][ T7983] RAX: ffffffffffffffda RBX: 00007f1b84db5fa0 RCX: 00007f1b84b8e9a9 [ 240.602524][ T7983] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 240.602534][ T7983] RBP: 00007f1b85936090 R08: 0000000000000000 R09: 0000000000000000 [ 240.602545][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.602555][ T7983] R13: 0000000000000000 R14: 00007f1b84db5fa0 R15: 00007ffc43572088 [ 240.602586][ T7983] [ 240.934522][ T30] audit: type=1400 audit(1753225948.674:366): avc: denied { ioctl } for pid=7981 comm="syz.0.446" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 ssid=148 tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 240.958560][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.122925][ T30] audit: type=1400 audit(1753225949.834:367): avc: denied { write } for pid=7991 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.142243][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.195205][ T30] audit: type=1400 audit(1753225950.424:368): avc: denied { mount } for pid=7993 comm="syz.3.451" name="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 242.219880][ T30] audit: type=1400 audit(1753225950.424:369): avc: denied { search } for pid=7993 comm="syz.3.451" name="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.262224][ T30] audit: type=1400 audit(1753225950.424:370): avc: denied { search } for pid=7993 comm="syz.3.451" name="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.315614][ T30] audit: type=1400 audit(1753225950.424:371): avc: denied { search } for pid=7993 comm="syz.3.451" name="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.339298][ T30] audit: type=1400 audit(1753225950.424:372): avc: denied { search } for pid=7993 comm="syz.3.451" name="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.362765][ T30] audit: type=1400 audit(1753225950.424:373): avc: denied { add_name } for pid=7993 comm="syz.3.451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.684139][ T30] audit: type=1400 audit(1753225950.424:374): avc: denied { create } for pid=7993 comm="syz.3.451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 244.206673][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 244.318637][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 244.674856][ T8035] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 245.002154][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 245.273928][ T8043] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4 [ 246.143017][ T5912] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 246.295675][ T5912] usb 3-1: device descriptor read/64, error -71 [ 247.057681][ T5912] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 247.570258][ T8064] 9pnet_fd: Insufficient options for proto=fd [ 248.668139][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 249.364596][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 249.564605][ T30] audit: type=1400 audit(1753225957.744:375): avc: denied { listen } for pid=8086 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.655717][ T30] audit: type=1400 audit(1753225957.894:376): avc: denied { link } for pid=8075 comm="syz.1.472" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 250.828914][ T8092] xt_socket: unknown flags 0x58 [ 251.342005][ T5844] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 251.351852][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: kworker/u9:8 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 251.351868][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.351877][ T5844] Workqueue: hci4 hci_rx_work [ 251.351893][ T5844] Call Trace: [ 251.351897][ T5844] [ 251.351902][ T5844] dump_stack_lvl+0x16c/0x1f0 [ 251.351922][ T5844] sysfs_warn_dup+0x7f/0xa0 [ 251.351940][ T5844] sysfs_create_dir_ns+0x24b/0x2b0 [ 251.351958][ T5844] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 251.351975][ T5844] ? find_held_lock+0x2b/0x80 [ 251.351992][ T5844] ? do_raw_spin_unlock+0x172/0x230 [ 251.352006][ T5844] kobject_add_internal+0x2c4/0x9b0 [ 251.352020][ T5844] kobject_add+0x16e/0x240 [ 251.352031][ T5844] ? __pfx_kobject_add+0x10/0x10 [ 251.352043][ T5844] ? do_raw_spin_unlock+0x172/0x230 [ 251.352056][ T5844] ? kobject_put+0xab/0x5a0 [ 251.352071][ T5844] device_add+0x288/0x1a70 [ 251.352084][ T5844] ? __pfx_dev_set_name+0x10/0x10 [ 251.352099][ T5844] ? __pfx_device_add+0x10/0x10 [ 251.352112][ T5844] ? mgmt_send_event_skb+0x2fb/0x460 [ 251.352132][ T5844] hci_conn_add_sysfs+0x17e/0x230 [ 251.352144][ T5844] le_conn_complete_evt+0x1075/0x1d70 [ 251.352165][ T5844] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 251.352181][ T5844] ? hci_event_packet+0x459/0x11c0 [ 251.352201][ T5844] hci_le_conn_complete_evt+0x23c/0x370 [ 251.352230][ T5844] hci_le_meta_evt+0x357/0x5e0 [ 251.352242][ T5844] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 251.352262][ T5844] hci_event_packet+0x685/0x11c0 [ 251.352280][ T5844] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 251.352293][ T5844] ? __pfx_hci_event_packet+0x10/0x10 [ 251.352311][ T5844] ? kcov_remote_start+0x3c9/0x6d0 [ 251.352325][ T5844] ? lockdep_hardirqs_on+0x7c/0x110 [ 251.352346][ T5844] hci_rx_work+0x2c5/0x16b0 [ 251.352361][ T5844] process_one_work+0x9cf/0x1b70 [ 251.352380][ T5844] ? __pfx_process_one_work+0x10/0x10 [ 251.352395][ T5844] ? assign_work+0x1a0/0x250 [ 251.352407][ T5844] worker_thread+0x6c8/0xf10 [ 251.352422][ T5844] ? __kthread_parkme+0x19e/0x250 [ 251.352439][ T5844] ? __pfx_worker_thread+0x10/0x10 [ 251.352450][ T5844] kthread+0x3c5/0x780 [ 251.352461][ T5844] ? __pfx_kthread+0x10/0x10 [ 251.352471][ T5844] ? rcu_is_watching+0x12/0xc0 [ 251.352485][ T5844] ? __pfx_kthread+0x10/0x10 [ 251.352496][ T5844] ret_from_fork+0x5d4/0x6f0 [ 251.352512][ T5844] ? __pfx_kthread+0x10/0x10 [ 251.352522][ T5844] ret_from_fork_asm+0x1a/0x30 [ 251.352541][ T5844] [ 251.352556][ T5844] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 251.613975][ T5844] Bluetooth: hci4: failed to register connection device [ 251.733215][ T8104] input: syz0 as /devices/virtual/input/input11 [ 253.652957][ T5913] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 253.873243][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.951718][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 254.964298][ T5913] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 254.980744][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 254.989272][ T5913] usb 5-1: SerialNumber: syz [ 255.092671][ T8111] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.136682][ T5913] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 255.176258][ T5913] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 255.227091][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.237388][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.264895][ T30] audit: type=1400 audit(1753225963.724:377): avc: denied { write } for pid=8129 comm="syz.0.486" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 256.373324][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 256.433642][ T30] audit: type=1400 audit(1753225964.744:378): avc: denied { connect } for pid=8125 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.660656][ T5899] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.680664][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.765566][ T5941] kernel write not supported for file /sg0 (pid: 5941 comm: kworker/1:7) [ 256.785528][ T5899] usb 4-1: Product: syz [ 259.070067][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'. [ 259.241985][ T30] audit: type=1400 audit(1753225967.564:379): avc: denied { read append } for pid=8151 comm="syz.3.490" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 259.305208][ T30] audit: type=1400 audit(1753225967.564:380): avc: denied { open } for pid=8151 comm="syz.3.490" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 259.748591][ T5913] usb 5-1: USB disconnect, device number 7 [ 259.755961][ T5899] usb 4-1: Manufacturer: syz [ 259.756072][ T5899] usb 4-1: SerialNumber: syz [ 259.804530][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 260.162961][ T5899] usb 4-1: can't set config #1, error -71 [ 260.174593][ T5899] usb 4-1: USB disconnect, device number 5 [ 261.023328][ T8170] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.063112][ T5941] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 261.147244][ T8170] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.197606][ T30] audit: type=1326 audit(1753225969.524:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec998e9a9 code=0x7ffc0000 [ 261.318238][ T30] audit: type=1326 audit(1753225969.554:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ec998e9a9 code=0x7ffc0000 [ 261.344032][ T30] audit: type=1400 audit(1753225969.554:383): avc: denied { ioctl } for pid=8167 comm="syz.3.497" path="socket:[15919]" dev="sockfs" ino=15919 ioctlcmd=0x6618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 261.354618][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 261.372313][ T30] audit: type=1326 audit(1753225969.554:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec998e9a9 code=0x7ffc0000 [ 261.416865][ T30] audit: type=1326 audit(1753225969.554:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f6ec998e9a9 code=0x7ffc0000 [ 261.460331][ T30] audit: type=1326 audit(1753225969.554:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec998e9a9 code=0x7ffc0000 [ 261.501435][ T30] audit: type=1326 audit(1753225969.554:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec998e9a9 code=0x7ffc0000 [ 261.544848][ T30] audit: type=1400 audit(1753225969.644:388): avc: denied { append } for pid=8175 comm="syz.4.498" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 261.555516][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.586968][ T30] audit: type=1400 audit(1753225969.784:389): avc: denied { shutdown } for pid=8167 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.598577][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.686927][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 261.728309][ T5941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 261.752907][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.813293][ T5941] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 261.822356][ T5941] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 261.861118][ T5941] usb 1-1: Manufacturer: syz [ 261.893786][ T5941] usb 1-1: config 0 descriptor?? [ 263.043305][ T5941] rc_core: IR keymap rc-hauppauge not found [ 263.057794][ T5941] Registered IR keymap rc-empty [ 263.074713][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.103026][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.144328][ T5941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 263.177786][ T5941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 263.210695][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.274209][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.294320][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.323760][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.343016][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.373133][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.452977][ T5827] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 263.475238][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.522969][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.563014][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.574195][ T8209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.506'. [ 263.593070][ T5941] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.624008][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 263.632973][ T5941] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 263.641151][ T5827] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 263.654675][ T5941] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 263.662499][ T5827] usb 4-1: config 0 has no interface number 0 [ 263.673743][ T5827] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 263.686808][ T5941] usb 1-1: USB disconnect, device number 13 [ 263.691957][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.706794][ T5827] usb 4-1: Product: syz [ 263.711112][ T5827] usb 4-1: Manufacturer: syz [ 263.717618][ T5827] usb 4-1: SerialNumber: syz [ 263.726272][ T30] audit: type=1400 audit(1753225972.054:390): avc: denied { mount } for pid=8212 comm="syz.2.508" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 263.775894][ T5827] usb 4-1: config 0 descriptor?? [ 264.218894][ T5827] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 264.226172][ T5827] usb 4-1: No streaming interface found for terminal 6. [ 264.275820][ T5827] usb 4-1: Failed to initialize entity for entity 5 [ 264.305186][ T5827] usb 4-1: Failed to register entities (-22). [ 264.445443][ T5827] usb 4-1: USB disconnect, device number 6 [ 266.360215][ T8235] SELinux: policydb magic number 0x6b736174 does not match expected magic number 0xf97cff8c [ 266.370576][ T8235] SELinux: failed to load policy [ 266.846968][ T30] audit: type=1400 audit(1753225975.174:391): avc: denied { map } for pid=8236 comm="syz.4.513" path="socket:[16054]" dev="sockfs" ino=16054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.017682][ T30] audit: type=1400 audit(1753225975.214:392): avc: denied { read accept } for pid=8236 comm="syz.4.513" path="socket:[16054]" dev="sockfs" ino=16054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.522035][ T30] audit: type=1400 audit(1753225975.844:393): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 269.180391][ T30] audit: type=1400 audit(1753225977.444:394): avc: granted { setsecparam } for pid=8253 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 269.739084][ T30] audit: type=1400 audit(1753225977.924:395): avc: denied { setopt } for pid=8258 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.822971][ T5894] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 270.014311][ T5894] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.050461][ T5894] usb 4-1: config 0 has no interface number 0 [ 270.071427][ T5894] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.116519][ T5894] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.560074][ T5894] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 270.604408][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.826811][ T5894] usb 4-1: config 0 descriptor?? [ 270.976295][ T30] audit: type=1400 audit(1753225979.304:396): avc: denied { execute } for pid=8274 comm="syz.0.525" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 271.004227][ T8279] FAULT_INJECTION: forcing a failure. [ 271.004227][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 271.024999][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.0.525 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 271.025027][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.025038][ T8279] Call Trace: [ 271.025045][ T8279] [ 271.025052][ T8279] dump_stack_lvl+0x16c/0x1f0 [ 271.025088][ T8279] should_fail_ex+0x512/0x640 [ 271.025115][ T8279] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 271.025142][ T8279] should_failslab+0xc2/0x120 [ 271.025159][ T8279] __kmalloc_cache_noprof+0x6a/0x3e0 [ 271.025183][ T8279] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 271.025210][ T8279] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 271.025232][ T8279] ? __might_resched+0x7/0x5e0 [ 271.025258][ T8279] ? trace_contention_end+0xdd/0x130 [ 271.025276][ T8279] ? __mutex_lock+0x1ca/0xb90 [ 271.025292][ T8279] ? rcu_is_watching+0x12/0xc0 [ 271.025317][ T8279] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 271.025340][ T8279] ? __pfx___mutex_lock+0x10/0x10 [ 271.025364][ T8279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.025390][ T8279] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 271.025415][ T8279] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 271.025438][ T8279] ? hook_file_ioctl_common+0x145/0x410 [ 271.025461][ T8279] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 271.025486][ T8279] ? selinux_file_ioctl+0x180/0x270 [ 271.025502][ T8279] ? selinux_file_ioctl+0xb4/0x270 [ 271.025519][ T8279] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 271.025542][ T8279] __x64_sys_ioctl+0x18e/0x210 [ 271.025568][ T8279] do_syscall_64+0xcd/0x4c0 [ 271.025587][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.025605][ T8279] RIP: 0033:0x7f1b84b8e9a9 [ 271.025620][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.025637][ T8279] RSP: 002b:00007f1b85915038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.025655][ T8279] RAX: ffffffffffffffda RBX: 00007f1b84db6080 RCX: 00007f1b84b8e9a9 [ 271.025667][ T8279] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 271.025677][ T8279] RBP: 00007f1b85915090 R08: 0000000000000000 R09: 0000000000000000 [ 271.025687][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.025698][ T8279] R13: 0000000000000000 R14: 00007f1b84db6080 R15: 00007ffc43572088 [ 271.025722][ T8279] [ 271.621722][ T8264] QAT: Stopping all acceleration devices. [ 271.674731][ T5894] prodikeys 0003:041E:2801.0004: item fetching failed at offset 4/7 [ 271.683455][ T5894] prodikeys 0003:041E:2801.0004: hid parse failed [ 271.689958][ T5894] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 272.196427][ T30] audit: type=1400 audit(1753225980.524:397): avc: denied { getopt } for pid=8262 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.207400][ T5894] usb 4-1: USB disconnect, device number 7 [ 272.859313][ T30] audit: type=1400 audit(1753225981.174:398): avc: denied { read } for pid=8301 comm="syz.3.533" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 272.890870][ T30] audit: type=1400 audit(1753225981.174:399): avc: denied { open } for pid=8301 comm="syz.3.533" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 272.920260][ T30] audit: type=1400 audit(1753225981.184:400): avc: denied { setopt } for pid=8301 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.970886][ T30] audit: type=1400 audit(1753225981.294:401): avc: denied { read } for pid=8301 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.763285][ T5894] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 273.902984][ T5894] usb 4-1: device descriptor read/64, error -71 [ 274.213015][ T5894] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 274.584538][ T5894] usb 4-1: device descriptor read/64, error -71 [ 274.661114][ T8329] 9pnet_fd: Insufficient options for proto=fd [ 274.704971][ T5894] usb usb4-port1: attempt power cycle [ 275.141381][ T5894] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 275.250979][ T5894] usb 4-1: device descriptor read/8, error -71 [ 275.645822][ T5894] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 275.697917][ T5894] usb 4-1: device descriptor read/8, error -71 [ 275.813528][ T5894] usb usb4-port1: unable to enumerate USB device [ 276.387514][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 276.415612][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 280.715840][ T5899] kernel write not supported for file /sg0 (pid: 5899 comm: kworker/1:5) [ 280.723134][ T30] audit: type=1400 audit(1753225988.934:402): avc: denied { read write } for pid=8377 comm="syz.4.549" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 280.932956][ T30] audit: type=1400 audit(1753225988.934:403): avc: denied { ioctl open } for pid=8377 comm="syz.4.549" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 281.204847][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 281.505266][ T8413] xt_socket: unknown flags 0x58 [ 281.738447][ T8415] netlink: 68 bytes leftover after parsing attributes in process `syz.4.557'. [ 283.618313][ T30] audit: type=1326 audit(1753225991.944:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.4.561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb52898e9a9 code=0x0 [ 283.943018][ T5894] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 284.154010][ T5894] usb 5-1: device descriptor read/64, error -71 [ 284.395585][ T5894] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 284.552979][ T5894] usb 5-1: device descriptor read/64, error -71 [ 284.678133][ T5894] usb usb5-port1: attempt power cycle [ 285.062945][ T5894] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 285.089814][ T8435] random: crng reseeded on system resumption [ 285.101148][ T30] audit: type=1400 audit(1753225993.414:405): avc: denied { append } for pid=8431 comm="syz.1.562" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 285.157613][ T8436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.562'. [ 285.291420][ T8436] FAULT_INJECTION: forcing a failure. [ 285.291420][ T8436] name failslab, interval 1, probability 0, space 0, times 0 [ 285.304609][ T8436] CPU: 0 UID: 0 PID: 8436 Comm: syz.1.562 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 285.304633][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.304644][ T8436] Call Trace: [ 285.304650][ T8436] [ 285.304656][ T8436] dump_stack_lvl+0x16c/0x1f0 [ 285.304691][ T8436] should_fail_ex+0x512/0x640 [ 285.304719][ T8436] ? fs_reclaim_acquire+0xae/0x150 [ 285.304744][ T8436] should_failslab+0xc2/0x120 [ 285.304763][ T8436] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 285.304792][ T8436] ? security_inode_alloc+0x3b/0x2b0 [ 285.304822][ T8436] security_inode_alloc+0x3b/0x2b0 [ 285.304854][ T8436] inode_init_always_gfp+0xce4/0x1030 [ 285.304887][ T8436] alloc_inode+0x86/0x240 [ 285.304909][ T8436] new_inode+0x22/0x1c0 [ 285.304933][ T8436] hugetlbfs_get_inode+0x354/0x730 [ 285.304956][ T8436] ? security_capable+0x7e/0x260 [ 285.304983][ T8436] hugetlb_file_setup+0x38c/0x620 [ 285.305010][ T8436] newseg+0xa74/0xe60 [ 285.305032][ T8436] ? __pfx_newseg+0x10/0x10 [ 285.305052][ T8436] ? ksys_write+0x190/0x250 [ 285.305081][ T8436] ipcget+0xef/0xda0 [ 285.305105][ T8436] ? __pfx___schedule+0x10/0x10 [ 285.305131][ T8436] ? __pfx_ipcget+0x10/0x10 [ 285.305157][ T8436] __x64_sys_shmget+0x13b/0x1b0 [ 285.305176][ T8436] ? __pfx___x64_sys_shmget+0x10/0x10 [ 285.305198][ T8436] ? rcu_is_watching+0x12/0xc0 [ 285.305224][ T8436] do_syscall_64+0xcd/0x4c0 [ 285.305243][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.305261][ T8436] RIP: 0033:0x7f249d98e9a9 [ 285.305276][ T8436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.305293][ T8436] RSP: 002b:00007f249e844038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 285.305310][ T8436] RAX: ffffffffffffffda RBX: 00007f249dbb6160 RCX: 00007f249d98e9a9 [ 285.305322][ T8436] RDX: 0000000000004800 RSI: fffffffffeffffff RDI: 0000000000000000 [ 285.305333][ T8436] RBP: 00007f249e844090 R08: 0000000000000000 R09: 0000000000000000 [ 285.305344][ T8436] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 285.305354][ T8436] R13: 0000000000000000 R14: 00007f249dbb6160 R15: 00007ffca062e098 [ 285.305379][ T8436] [ 285.822277][ T30] audit: type=1400 audit(1753225993.414:406): avc: denied { open } for pid=8431 comm="syz.1.562" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 286.015587][ T5894] usb 5-1: device descriptor read/8, error -71 [ 286.253122][ T5894] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 286.393288][ T5894] usb 5-1: device descriptor read/8, error -71 [ 287.062942][ T5894] usb usb5-port1: unable to enumerate USB device [ 288.607746][ T8458] FAULT_INJECTION: forcing a failure. [ 288.607746][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 288.620572][ T8458] CPU: 0 UID: 0 PID: 8458 Comm: syz.3.568 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 288.620597][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.620606][ T8458] Call Trace: [ 288.620611][ T8458] [ 288.620615][ T8458] dump_stack_lvl+0x16c/0x1f0 [ 288.620639][ T8458] should_fail_ex+0x512/0x640 [ 288.620659][ T8458] ? tomoyo_encode2+0x100/0x3e0 [ 288.620670][ T8458] should_failslab+0xc2/0x120 [ 288.620681][ T8458] __kmalloc_noprof+0xd2/0x510 [ 288.620701][ T8458] tomoyo_encode2+0x100/0x3e0 [ 288.620713][ T8458] tomoyo_encode+0x29/0x50 [ 288.620723][ T8458] tomoyo_mount_acl+0x144/0x850 [ 288.620739][ T8458] ? kernel_text_address+0x8d/0x100 [ 288.620752][ T8458] ? __kernel_text_address+0xd/0x40 [ 288.620764][ T8458] ? unwind_get_return_address+0x59/0xa0 [ 288.620775][ T8458] ? arch_stack_walk+0xa6/0x100 [ 288.620788][ T8458] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 288.620813][ T8458] ? stack_trace_save+0x8e/0xc0 [ 288.620839][ T8458] ? tomoyo_domain+0xbb/0x150 [ 288.620850][ T8458] ? tomoyo_profile+0x47/0x60 [ 288.620863][ T8458] tomoyo_mount_permission+0x16d/0x420 [ 288.620879][ T8458] ? tomoyo_mount_permission+0x14f/0x420 [ 288.620897][ T8458] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 288.620922][ T8458] security_sb_mount+0x9b/0x260 [ 288.620940][ T8458] path_mount+0x128/0x2020 [ 288.620953][ T8458] ? kmem_cache_free+0x2d1/0x4d0 [ 288.620968][ T8458] ? __pfx_path_mount+0x10/0x10 [ 288.620981][ T8458] ? putname+0x154/0x1a0 [ 288.620995][ T8458] __x64_sys_mount+0x28d/0x310 [ 288.621007][ T8458] ? __pfx___x64_sys_mount+0x10/0x10 [ 288.621023][ T8458] do_syscall_64+0xcd/0x4c0 [ 288.621035][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.621046][ T8458] RIP: 0033:0x7f6ec998e9a9 [ 288.621056][ T8458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.621067][ T8458] RSP: 002b:00007f6ec77d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 288.621078][ T8458] RAX: ffffffffffffffda RBX: 00007f6ec9bb6160 RCX: 00007f6ec998e9a9 [ 288.621085][ T8458] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000200000000100 [ 288.621091][ T8458] RBP: 00007f6ec77d5090 R08: 0000000000000000 R09: 0000000000000000 [ 288.621097][ T8458] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 288.621103][ T8458] R13: 0000000000000000 R14: 00007f6ec9bb6160 R15: 00007ffe64bd9978 [ 288.621117][ T8458] [ 289.320512][ T30] audit: type=1400 audit(1753225997.614:407): avc: denied { mount } for pid=8463 comm="syz.0.571" name="/" dev="ramfs" ino=17436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 289.324128][ T5894] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 289.460137][ T8470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.571'. [ 289.653044][ T8472] syz.3.572: attempt to access beyond end of device [ 289.653044][ T8472] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 289.739360][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 289.756730][ T8472] syz.3.572: attempt to access beyond end of device [ 289.756730][ T8472] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 289.756766][ T8474] netlink: 'syz.1.570': attribute type 30 has an invalid length. [ 289.907844][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.100669][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.125978][ T8472] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 290.150802][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 290.160204][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.171544][ T5894] usb 5-1: SerialNumber: syz [ 290.187570][ T5894] cdc_ether 5-1:1.0: skipping garbage [ 290.193473][ T5894] usb 5-1: bad CDC descriptors [ 290.198587][ T5894] usb-storage 5-1:1.0: USB Mass Storage device detected [ 290.207740][ T8472] syz.3.572: attempt to access beyond end of device [ 290.207740][ T8472] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 290.248662][ T8484] input: syz0 as /devices/virtual/input/input14 [ 290.273424][ T5894] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 290.275666][ T8472] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 290.360968][ T8472] syz.3.572: attempt to access beyond end of device [ 290.360968][ T8472] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 290.374655][ T8472] syz.3.572: attempt to access beyond end of device [ 290.374655][ T8472] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 290.394870][ T8484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.570'. [ 290.404222][ T8472] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 290.421366][ T8472] syz.3.572: attempt to access beyond end of device [ 290.421366][ T8472] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 290.434882][ T8472] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 290.458512][ T8472] syz.3.572: attempt to access beyond end of device [ 290.458512][ T8472] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 290.479900][ T8472] syz.3.572: attempt to access beyond end of device [ 290.479900][ T8472] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 290.495441][ T8472] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 290.506415][ T8472] syz.3.572: attempt to access beyond end of device [ 290.506415][ T8472] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 290.520759][ T8472] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 290.533119][ T8472] syz.3.572: attempt to access beyond end of device [ 290.533119][ T8472] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 290.547030][ T8472] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 290.557209][ T8472] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 290.566814][ T8472] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 290.632639][ T8474] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.641505][ T8474] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.650267][ T8474] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.658960][ T8474] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.712155][ T8474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8474 comm=syz.1.570 [ 290.953427][ T30] audit: type=1400 audit(1753225999.284:408): avc: denied { write } for pid=8490 comm="syz.0.574" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 291.034563][ T8492] netlink: 64 bytes leftover after parsing attributes in process `syz.0.574'. [ 291.540898][ T8456] can0: slcan on ptm0. [ 292.653591][ T8453] can0 (unregistered): slcan off ptm0. [ 292.663597][ T5899] usb 5-1: USB disconnect, device number 12 [ 293.384577][ T8516] 9pnet_fd: Insufficient options for proto=fd [ 293.405605][ T30] audit: type=1400 audit(1753226001.734:409): avc: denied { mount } for pid=8511 comm="syz.4.579" name="/" dev="autofs" ino=16674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 293.427905][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.088486][ T30] audit: type=1400 audit(1753226003.414:410): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 295.108412][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.342379][ T30] audit: type=1400 audit(1753226003.664:411): avc: denied { bind } for pid=8548 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.510893][ T30] audit: type=1400 audit(1753226003.744:412): avc: denied { setopt } for pid=8548 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.516064][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 296.017973][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 296.026805][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.051942][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 296.072726][ T5894] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 296.099609][ T5894] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 296.136283][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.164212][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 296.181190][ T5894] usb 2-1: SerialNumber: syz [ 296.201267][ T5894] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 296.748871][ T8571] xt_socket: unknown flags 0x58 [ 296.903322][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 297.011800][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 297.350507][ T8544] netlink: 'syz.1.585': attribute type 10 has an invalid length. [ 297.433767][ T8544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.585'. [ 297.471336][ T8578] vlan3: entered allmulticast mode [ 297.483059][ T8578] veth1: entered allmulticast mode [ 297.501863][ T8578] bridge1: port 1(vlan3) entered blocking state [ 297.525964][ T8578] bridge1: port 1(vlan3) entered disabled state [ 297.788003][ T8578] vlan3: entered promiscuous mode [ 297.795707][ T8578] veth1: entered promiscuous mode [ 297.809374][ T8544] dummy0: entered promiscuous mode [ 297.821280][ T8544] bridge0: port 3(dummy0) entered blocking state [ 297.860477][ T8544] bridge0: port 3(dummy0) entered disabled state [ 297.885300][ T8544] dummy0: entered allmulticast mode [ 297.924157][ T8544] bridge0: port 3(dummy0) entered blocking state [ 297.930623][ T8544] bridge0: port 3(dummy0) entered forwarding state [ 297.998478][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 298.021085][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 298.036131][ T8587] xt_socket: unknown flags 0x58 [ 298.407775][ T30] audit: type=1400 audit(1753226006.734:413): avc: denied { bind } for pid=8599 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 298.457380][ T8601] netlink: 44 bytes leftover after parsing attributes in process `syz.3.595'. [ 298.466883][ T8601] netlink: 59 bytes leftover after parsing attributes in process `syz.3.595'. [ 298.476141][ T8601] netlink: 59 bytes leftover after parsing attributes in process `syz.3.595'. [ 298.707563][ T30] audit: type=1400 audit(1753226007.014:414): avc: denied { append } for pid=8604 comm="syz.2.597" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 298.797942][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 298.875808][ T8611] veth0_to_bond: left allmulticast mode [ 299.092994][ T8611] veth0_to_bond: left promiscuous mode [ 299.174536][ T8611] bridge3: port 1(veth0_to_bond) entered disabled state [ 299.229844][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 299.564893][ T5827] usb 2-1: USB disconnect, device number 7 [ 299.630592][ T8609] vlan3: entered allmulticast mode [ 299.636223][ T8609] bridge5: port 1(vlan3) entered blocking state [ 299.663269][ T8609] bridge5: port 1(vlan3) entered disabled state [ 299.681446][ T8609] vlan3: entered promiscuous mode [ 299.699864][ T8609] veth1: entered promiscuous mode [ 299.844362][ T8614] xt_socket: unknown flags 0x58 [ 299.869143][ T8613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.601'. [ 300.898141][ T30] audit: type=1400 audit(1753226009.224:415): avc: denied { write } for pid=8606 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 300.920043][ T30] audit: type=1400 audit(1753226009.224:416): avc: denied { read } for pid=8606 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.010813][ T5894] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 302.418608][ T8636] xt_socket: unknown flags 0x58 [ 303.114065][ T8653] FAULT_INJECTION: forcing a failure. [ 303.114065][ T8653] name failslab, interval 1, probability 0, space 0, times 0 [ 303.645805][ T8653] CPU: 1 UID: 0 PID: 8653 Comm: syz.3.607 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 303.645833][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.645843][ T8653] Call Trace: [ 303.645849][ T8653] [ 303.645862][ T8653] dump_stack_lvl+0x16c/0x1f0 [ 303.645895][ T8653] should_fail_ex+0x512/0x640 [ 303.645922][ T8653] ? fs_reclaim_acquire+0xae/0x150 [ 303.645945][ T8653] ? tomoyo_encode2+0x100/0x3e0 [ 303.645961][ T8653] should_failslab+0xc2/0x120 [ 303.645978][ T8653] __kmalloc_noprof+0xd2/0x510 [ 303.646003][ T8653] ? d_absolute_path+0x136/0x1a0 [ 303.646029][ T8653] tomoyo_encode2+0x100/0x3e0 [ 303.646047][ T8653] tomoyo_encode+0x29/0x50 [ 303.646061][ T8653] tomoyo_realpath_from_path+0x18f/0x6e0 [ 303.646085][ T8653] tomoyo_path_number_perm+0x245/0x580 [ 303.646108][ T8653] ? tomoyo_path_number_perm+0x237/0x580 [ 303.646133][ T8653] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.646158][ T8653] ? find_held_lock+0x2b/0x80 [ 303.646203][ T8653] ? find_held_lock+0x2b/0x80 [ 303.646224][ T8653] ? hook_file_ioctl_common+0x145/0x410 [ 303.646250][ T8653] ? __fget_files+0x20e/0x3c0 [ 303.646272][ T8653] security_file_ioctl+0x9b/0x240 [ 303.646291][ T8653] __x64_sys_ioctl+0xb7/0x210 [ 303.646315][ T8653] do_syscall_64+0xcd/0x4c0 [ 303.646334][ T8653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.646351][ T8653] RIP: 0033:0x7f6ec998e9a9 [ 303.646365][ T8653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.646382][ T8653] RSP: 002b:00007f6eca711038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.646399][ T8653] RAX: ffffffffffffffda RBX: 00007f6ec9bb5fa0 RCX: 00007f6ec998e9a9 [ 303.646410][ T8653] RDX: 0000200000000300 RSI: 00000000c054561d RDI: 0000000000000003 [ 303.646421][ T8653] RBP: 00007f6eca711090 R08: 0000000000000000 R09: 0000000000000000 [ 303.646431][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.646441][ T8653] R13: 0000000000000000 R14: 00007f6ec9bb5fa0 R15: 00007ffe64bd9978 [ 303.646465][ T8653] [ 303.646482][ T8653] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.044375][ T8657] FAULT_INJECTION: forcing a failure. [ 304.044375][ T8657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.058072][ T8657] CPU: 0 UID: 0 PID: 8657 Comm: syz.0.608 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 304.058094][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.058102][ T8657] Call Trace: [ 304.058108][ T8657] [ 304.058113][ T8657] dump_stack_lvl+0x16c/0x1f0 [ 304.058136][ T8657] should_fail_ex+0x512/0x640 [ 304.058156][ T8657] _copy_from_user+0x2e/0xd0 [ 304.058168][ T8657] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 304.058182][ T8657] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 304.058198][ T8657] alg_setsockopt+0x3bb/0xdd0 [ 304.058209][ T8657] ? __pfx_alg_setsockopt+0x10/0x10 [ 304.058220][ T8657] ? selinux_socket_setsockopt+0x6a/0x80 [ 304.058237][ T8657] ? __pfx_alg_setsockopt+0x10/0x10 [ 304.058248][ T8657] do_sock_setsockopt+0xf3/0x1d0 [ 304.058263][ T8657] __sys_setsockopt+0x1a0/0x230 [ 304.058282][ T8657] __x64_sys_setsockopt+0xbd/0x160 [ 304.058298][ T8657] ? do_syscall_64+0x91/0x4c0 [ 304.058308][ T8657] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.058324][ T8657] do_syscall_64+0xcd/0x4c0 [ 304.058336][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.058348][ T8657] RIP: 0033:0x7f1b84b8e9a9 [ 304.058357][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.058369][ T8657] RSP: 002b:00007f1b85915038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.058379][ T8657] RAX: ffffffffffffffda RBX: 00007f1b84db6080 RCX: 00007f1b84b8e9a9 [ 304.058385][ T8657] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 000000000000000b [ 304.058392][ T8657] RBP: 00007f1b85915090 R08: 0000000000000010 R09: 0000000000000000 [ 304.058398][ T8657] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 304.058404][ T8657] R13: 0000000000000000 R14: 00007f1b84db6080 R15: 00007ffc43572088 [ 304.058418][ T8657] [ 304.247416][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.714451][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 304.749281][ T8666] Bluetooth: MGMT ver 1.23 [ 304.752610][ T30] audit: type=1400 audit(1753226013.074:417): avc: denied { setopt } for pid=8664 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.786139][ T8667] __nla_validate_parse: 1 callbacks suppressed [ 304.786158][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 304.802059][ T8667] netlink: 'syz.1.610': attribute type 30 has an invalid length. [ 304.902717][ T8661] input: syz0 as /devices/virtual/input/input15 [ 304.912763][ T5913] usb 5-1: config 0 has an invalid interface number: 142 but max is 1 [ 304.928763][ T5913] usb 5-1: config 0 has no interface number 0 [ 304.944014][ T5913] usb 5-1: config 0 interface 1 has no altsetting 0 [ 304.956269][ T8673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8673 comm=syz.3.614 [ 304.963552][ T8661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.610'. [ 304.972289][ T8673] netlink: 'syz.3.614': attribute type 10 has an invalid length. [ 304.988118][ T5913] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 304.997587][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.005916][ T5913] usb 5-1: Product: syz [ 305.006410][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.017247][ T5913] usb 5-1: Manufacturer: syz [ 305.018434][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.024252][ T5913] usb 5-1: SerialNumber: syz [ 305.064837][ T5913] usb 5-1: config 0 descriptor?? [ 305.076069][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.083273][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.090768][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.097958][ T8673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.132270][ T8673] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 305.286943][ T8659] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.609'. [ 305.290568][ T8675] netlink: 260 bytes leftover after parsing attributes in process `syz.3.616'. [ 305.309051][ T8659] openvswitch: netlink: Missing valid actions attribute. [ 305.348772][ T8659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.435738][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 306.154049][ T8680] bridge6: port 1(veth0_to_bond) entered blocking state [ 306.192890][ T8680] bridge6: port 1(veth0_to_bond) entered disabled state [ 306.201411][ T8680] veth0_to_bond: entered allmulticast mode [ 306.270732][ T8680] veth0_to_bond: entered promiscuous mode [ 306.453935][ T5913] msi2500 5-1:0.1: Registered as swradio24 [ 306.465941][ T5913] msi2500 5-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 306.493214][ T8690] fuse: Bad value for 'rootmode' [ 306.620532][ T5913] videodev: could not get a free minor [ 306.654966][ T5913] msi2500 5-1:0.142: Failed to register as video device (-23) [ 306.688717][ T5913] msi2500 5-1:0.142: probe with driver msi2500 failed with error -23 [ 306.701539][ T5913] usb 5-1: USB disconnect, device number 14 [ 306.816588][ T8698] FAULT_INJECTION: forcing a failure. [ 306.816588][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 306.835453][ T5899] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 306.911389][ T8698] CPU: 0 UID: 0 PID: 8698 Comm: syz.1.621 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 306.911417][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.911428][ T8698] Call Trace: [ 306.911433][ T8698] [ 306.911440][ T8698] dump_stack_lvl+0x16c/0x1f0 [ 306.911472][ T8698] should_fail_ex+0x512/0x640 [ 306.911506][ T8698] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 306.911537][ T8698] should_failslab+0xc2/0x120 [ 306.911553][ T8698] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 306.911577][ T8698] ? __alloc_skb+0x2b2/0x380 [ 306.911606][ T8698] __alloc_skb+0x2b2/0x380 [ 306.911630][ T8698] ? __pfx___alloc_skb+0x10/0x10 [ 306.911654][ T8698] ? genl_rcv_msg+0x540/0x800 [ 306.911675][ T8698] ? genl_rcv_msg+0x4bb/0x800 [ 306.911703][ T8698] netlink_ack+0x15d/0xb80 [ 306.911730][ T8698] netlink_rcv_skb+0x332/0x420 [ 306.911748][ T8698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.911771][ T8698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.911801][ T8698] ? netlink_deliver_tap+0x1ae/0xd30 [ 306.911822][ T8698] genl_rcv+0x28/0x40 [ 306.911848][ T8698] netlink_unicast+0x58d/0x850 [ 306.911869][ T8698] ? __pfx_netlink_unicast+0x10/0x10 [ 306.911894][ T8698] netlink_sendmsg+0x8d1/0xdd0 [ 306.911916][ T8698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.911944][ T8698] ____sys_sendmsg+0xa95/0xc70 [ 306.911964][ T8698] ? copy_msghdr_from_user+0x10a/0x160 [ 306.911989][ T8698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.912019][ T8698] ___sys_sendmsg+0x134/0x1d0 [ 306.912046][ T8698] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.912069][ T8698] ? __lock_acquire+0x622/0x1c90 [ 306.912115][ T8698] __sys_sendmsg+0x16d/0x220 [ 306.912141][ T8698] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.912175][ T8698] do_syscall_64+0xcd/0x4c0 [ 306.912195][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.912212][ T8698] RIP: 0033:0x7f249d98e9a9 [ 306.912225][ T8698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.912241][ T8698] RSP: 002b:00007f249e886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.912259][ T8698] RAX: ffffffffffffffda RBX: 00007f249dbb5fa0 RCX: 00007f249d98e9a9 [ 306.912270][ T8698] RDX: 0000000020000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 306.912280][ T8698] RBP: 00007f249e886090 R08: 0000000000000000 R09: 0000000000000000 [ 306.912290][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.912299][ T8698] R13: 0000000000000000 R14: 00007f249dbb5fa0 R15: 00007ffca062e098 [ 306.912319][ T8698] [ 307.002894][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 307.007440][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.172721][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.178695][ C0] hrtimer: interrupt took 265871700 ns [ 307.213190][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 307.251324][ T5899] usb 1-1: config 4 interface 0 has no altsetting 0 [ 307.278725][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.289305][ T5899] usb 1-1: string descriptor 0 read error: -22 [ 307.329233][ T5899] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 307.450746][ T5899] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 307.748403][ T30] audit: type=1400 audit(1753226016.074:418): avc: denied { write } for pid=8703 comm="syz.1.623" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 307.772618][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.988392][ T8706] FAULT_INJECTION: forcing a failure. [ 307.988392][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 308.001340][ T8706] CPU: 0 UID: 0 PID: 8706 Comm: syz.1.623 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 308.001365][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.001376][ T8706] Call Trace: [ 308.001385][ T8706] [ 308.001393][ T8706] dump_stack_lvl+0x16c/0x1f0 [ 308.001437][ T8706] should_fail_ex+0x512/0x640 [ 308.001465][ T8706] ? fs_reclaim_acquire+0xae/0x150 [ 308.001490][ T8706] ? tomoyo_encode2+0x100/0x3e0 [ 308.001512][ T8706] should_failslab+0xc2/0x120 [ 308.001530][ T8706] __kmalloc_noprof+0xd2/0x510 [ 308.001563][ T8706] tomoyo_encode2+0x100/0x3e0 [ 308.001585][ T8706] tomoyo_encode+0x29/0x50 [ 308.001601][ T8706] tomoyo_realpath_from_path+0x18f/0x6e0 [ 308.001622][ T8706] ? tomoyo_profile+0x47/0x60 [ 308.001645][ T8706] tomoyo_path_number_perm+0x245/0x580 [ 308.001669][ T8706] ? tomoyo_path_number_perm+0x237/0x580 [ 308.001693][ T8706] ? warn_bogus_irq_restore+0x27/0x30 [ 308.001721][ T8706] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.001755][ T8706] ? __pfx_mark_held_locks+0x1/0x10 [ 308.001799][ T8706] ? kmem_cache_free+0x271/0x4d0 [ 308.001827][ T8706] ? from_kgid+0x8f/0xd0 [ 308.001847][ T8706] ? __pfx_from_kgid+0x10/0x10 [ 308.001868][ T8706] ? irqentry_exit+0x3b/0x90 [ 308.001886][ T8706] tomoyo_path_chown+0x14b/0x1b0 [ 308.001907][ T8706] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 308.001930][ T8706] ? security_path_chown+0x9e/0x2e0 [ 308.001956][ T8706] ? security_path_chown+0xa7/0x2e0 [ 308.001981][ T8706] ? security_path_chown+0x117/0x2e0 [ 308.002008][ T8706] security_path_chown+0x12a/0x2e0 [ 308.002035][ T8706] chown_common+0x3d3/0x680 [ 308.002060][ T8706] ? __pfx_chown_common+0x10/0x10 [ 308.002078][ T8706] ? find_held_lock+0x2b/0x80 [ 308.002107][ T8706] ? mnt_get_write_access+0x20c/0x300 [ 308.002136][ T8706] do_fchownat+0x1a7/0x200 [ 308.002156][ T8706] ? __pfx_do_fchownat+0x10/0x10 [ 308.002173][ T8706] ? ksys_write+0x1ac/0x250 [ 308.002198][ T8706] ? __pfx_ksys_write+0x10/0x10 [ 308.002229][ T8706] __x64_sys_chown+0x7b/0xc0 [ 308.002246][ T8706] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.002273][ T8706] do_syscall_64+0xcd/0x4c0 [ 308.002292][ T8706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.002310][ T8706] RIP: 0033:0x7f249d98e9a9 [ 308.002326][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.002343][ T8706] RSP: 002b:00007f249e844038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 308.002361][ T8706] RAX: ffffffffffffffda RBX: 00007f249dbb6160 RCX: 00007f249d98e9a9 [ 308.002373][ T8706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 308.002383][ T8706] RBP: 00007f249e844090 R08: 0000000000000000 R09: 0000000000000000 [ 308.002394][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.002404][ T8706] R13: 0000000000000000 R14: 00007f249dbb6160 R15: 00007ffca062e098 [ 308.002429][ T8706] [ 308.002529][ T8706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.173964][ T8694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.323139][ T5899] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 308.339607][ T5899] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 308.355055][ T5899] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 308.364173][ T5899] usb 1-1: media controller created [ 308.442124][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 308.484704][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.530092][ T5899] zl10353_read_register: readreg error (reg=127, ret==0) [ 308.709935][ T5899] usb 1-1: USB disconnect, device number 14 [ 308.916520][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 308.933883][ T8718] netlink: 'syz.3.625': attribute type 30 has an invalid length. [ 308.946104][ T8718] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.954995][ T8718] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.963768][ T8718] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.972550][ T8718] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.987138][ T8717] 9pnet_fd: Insufficient options for proto=fd [ 308.996412][ T8711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.625'. [ 310.697809][ T8729] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 310.811787][ T8732] macvtap1: entered promiscuous mode [ 310.826368][ T8732] macvtap1: entered allmulticast mode [ 310.853009][ T30] audit: type=1400 audit(1753226019.174:419): avc: denied { setopt } for pid=8733 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 311.355686][ T5959] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 311.567246][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 311.613818][ T5959] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 311.623118][ T5959] usb 3-1: config 0 has no interface number 0 [ 311.641066][ T5959] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.676401][ T5959] usb 3-1: config 0 interface 85 has no altsetting 0 [ 311.704197][ T5959] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 311.718535][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.750346][ T5959] usb 3-1: Product: syz [ 311.758867][ T5959] usb 3-1: Manufacturer: syz [ 311.790555][ T5959] usb 3-1: SerialNumber: syz [ 311.820536][ T5959] usb 3-1: config 0 descriptor?? [ 311.867272][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 311.879044][ T8753] openvswitch: netlink: nsh attribute has 5116 unknown bytes. [ 311.887270][ T8753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.311520][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'. [ 312.756097][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.802374][ T5959] appletouch 3-1:0.85: Failed to read mode from device. [ 312.809726][ T5959] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 312.846878][ T30] audit: type=1400 audit(1753226021.174:420): avc: denied { mounton } for pid=8770 comm="syz.3.640" path="/131" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 312.871420][ T8771] 9pnet_fd: Insufficient options for proto=fd [ 312.913410][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.934066][ T8768] kvm: emulating exchange as write [ 312.961434][ T30] audit: type=1400 audit(1753226021.204:421): avc: denied { read write } for pid=5841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.033213][ T30] audit: type=1400 audit(1753226021.204:422): avc: denied { open } for pid=5841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.057220][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.104404][ T30] audit: type=1400 audit(1753226021.204:423): avc: denied { ioctl } for pid=5841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.182918][ T30] audit: type=1400 audit(1753226021.244:424): avc: denied { read write } for pid=8765 comm="syz.1.639" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 313.205881][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.230450][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 313.256025][ T30] audit: type=1400 audit(1753226021.244:425): avc: denied { open } for pid=8765 comm="syz.1.639" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 313.279018][ T8784] netlink: 'syz.0.641': attribute type 30 has an invalid length. [ 313.341623][ T30] audit: type=1400 audit(1753226021.244:426): avc: denied { ioctl } for pid=8765 comm="syz.1.639" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 313.350709][ T8775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.641'. [ 313.521691][ T8784] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.530638][ T8784] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.539515][ T8784] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.548476][ T8784] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.604351][ T30] audit: type=1400 audit(1753226021.254:427): avc: denied { create } for pid=8774 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 313.677466][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 313.695516][ T30] audit: type=1400 audit(1753226021.254:428): avc: denied { create } for pid=8765 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 313.696783][ T8784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8784 comm=syz.0.641 [ 313.898673][ T8782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.643'. [ 314.182997][ T5899] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 314.466325][ T5959] usb 3-1: USB disconnect, device number 12 [ 314.475065][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 314.517248][ T5899] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 314.548574][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.601694][ T5899] pvrusb2: Hardware description: Terratec Grabster AV400 [ 314.636999][ T5899] pvrusb2: ********** [ 314.641020][ T5899] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 315.177484][ T5899] pvrusb2: Important functionality might not be entirely working. [ 315.188991][ T5899] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 315.207844][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.216641][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.251773][ T5899] pvrusb2: ********** [ 315.266222][ T2335] pvrusb2: Invalid write control endpoint [ 315.274117][ T5899] usb 5-1: USB disconnect, device number 15 [ 315.632950][ T2335] pvrusb2: Invalid write control endpoint [ 315.744455][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 315.773779][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 315.806332][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 315.859345][ T2335] pvrusb2: Device being rendered inoperable [ 315.878123][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 315.897227][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 315.913639][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 315.913656][ T30] audit: type=1400 audit(1753226024.234:476): avc: denied { create } for pid=8816 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 316.025315][ T2335] pvrusb2: Attached sub-driver cx25840 [ 316.288473][ T30] audit: type=1400 audit(1753226024.244:477): avc: denied { create } for pid=8819 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 316.313675][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 316.478855][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 316.728571][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.736047][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.015725][ T30] audit: type=1400 audit(1753226024.244:478): avc: denied { bind } for pid=8819 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 317.038137][ T30] audit: type=1400 audit(1753226024.244:479): avc: denied { accept } for pid=8819 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 317.140895][ T30] audit: type=1400 audit(1753226024.534:480): avc: denied { create } for pid=8818 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.241126][ T8832] xt_CONNSECMARK: invalid mode: 0 [ 317.243327][ T8830] FAULT_INJECTION: forcing a failure. [ 317.243327][ T8830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.288732][ T30] audit: type=1400 audit(1753226024.554:481): avc: denied { write } for pid=8818 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.332981][ T8830] CPU: 1 UID: 0 PID: 8830 Comm: syz.3.657 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 317.333007][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.333017][ T8830] Call Trace: [ 317.333023][ T8830] [ 317.333029][ T8830] dump_stack_lvl+0x16c/0x1f0 [ 317.333061][ T8830] should_fail_ex+0x512/0x640 [ 317.333092][ T8830] _copy_from_iter+0x29f/0x16f0 [ 317.333111][ T8830] ? _copy_from_iter+0x15d/0x16f0 [ 317.333127][ T8830] ? __pfx__copy_from_iter+0x10/0x10 [ 317.333147][ T8830] ? __pfx__copy_from_iter+0x10/0x10 [ 317.333164][ T8830] ? _copy_from_iter+0x15d/0x16f0 [ 317.333184][ T8830] copy_page_from_iter+0xde/0x180 [ 317.333205][ T8830] skb_copy_datagram_from_iter+0x2a0/0x740 [ 317.333240][ T8830] tun_get_user+0x17ac/0x3b80 [ 317.333271][ T8830] ? __pfx_tun_get_user+0x10/0x10 [ 317.333288][ T8830] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 317.333313][ T8830] ? find_held_lock+0x2b/0x80 [ 317.333337][ T8830] ? tun_get+0x191/0x370 [ 317.333360][ T8830] tun_chr_write_iter+0xdc/0x210 [ 317.333381][ T8830] vfs_write+0x6c4/0x1150 [ 317.333406][ T8830] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 317.333428][ T8830] ? __pfx_vfs_write+0x10/0x10 [ 317.333451][ T8830] ? find_held_lock+0x2b/0x80 [ 317.333488][ T8830] ksys_write+0x12a/0x250 [ 317.333513][ T8830] ? __pfx_ksys_write+0x10/0x10 [ 317.333545][ T8830] do_syscall_64+0xcd/0x4c0 [ 317.333563][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.333581][ T8830] RIP: 0033:0x7f6ec998e9a9 [ 317.333595][ T8830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.333612][ T8830] RSP: 002b:00007f6eca711038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.333635][ T8830] RAX: ffffffffffffffda RBX: 00007f6ec9bb5fa0 RCX: 00007f6ec998e9a9 [ 317.333647][ T8830] RDX: 0000000000000ffe RSI: 0000200000000040 RDI: 0000000000000003 [ 317.333657][ T8830] RBP: 00007f6eca711090 R08: 0000000000000000 R09: 0000000000000000 [ 317.333667][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.333677][ T8830] R13: 0000000000000000 R14: 00007f6ec9bb5fa0 R15: 00007ffe64bd9978 [ 317.333700][ T8830] [ 317.586364][ T30] audit: type=1400 audit(1753226024.564:482): avc: denied { setopt } for pid=8818 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.846085][ T30] audit: type=1400 audit(1753226024.584:483): avc: denied { shutdown } for pid=8818 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.873893][ T30] audit: type=1400 audit(1753226024.594:484): avc: denied { read } for pid=8818 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.930487][ T30] audit: type=1400 audit(1753226024.844:485): avc: denied { getopt } for pid=8816 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 320.803071][ T5940] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 321.273556][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 321.310527][ T5940] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 321.349967][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 321.349983][ T30] audit: type=1400 audit(1753226029.674:518): avc: denied { setopt } for pid=8873 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.386760][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.417746][ T5940] usb 2-1: Product: syz [ 321.506269][ T30] audit: type=1400 audit(1753226029.724:519): avc: denied { name_bind } for pid=8875 comm="syz.2.671" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 321.775813][ T30] audit: type=1400 audit(1753226030.054:520): avc: denied { map } for pid=8875 comm="syz.2.671" path="socket:[18312]" dev="sockfs" ino=18312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 321.809930][ T30] audit: type=1400 audit(1753226030.054:521): avc: denied { accept } for pid=8875 comm="syz.2.671" path="socket:[18312]" dev="sockfs" ino=18312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 322.202263][ T30] audit: type=1400 audit(1753226030.254:522): avc: denied { setopt } for pid=8878 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.274893][ T30] audit: type=1400 audit(1753226030.264:523): avc: denied { write } for pid=8878 comm="syz.3.672" path="socket:[17332]" dev="sockfs" ino=17332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.758234][ T30] audit: type=1400 audit(1753226031.084:524): avc: denied { read write } for pid=8883 comm="syz.0.673" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 322.886130][ T30] audit: type=1400 audit(1753226031.084:525): avc: denied { open } for pid=8883 comm="syz.0.673" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 322.999256][ T30] audit: type=1400 audit(1753226031.114:526): avc: denied { append } for pid=8883 comm="syz.0.673" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.170137][ T8892] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 323.308652][ T5959] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 323.324916][ T8893] fuse: Unknown parameter '' [ 323.422537][ T5940] usb 2-1: Manufacturer: syz [ 323.451278][ T5940] usb 2-1: SerialNumber: syz [ 323.469243][ T5940] usb 2-1: config 0 descriptor?? [ 323.483292][ T5940] usb 2-1: can't set config #0, error -71 [ 323.501894][ T5940] usb 2-1: USB disconnect, device number 8 [ 323.592909][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 323.612075][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.778740][ T8899] fuse: Bad value for 'group_id' [ 323.783947][ T8899] fuse: Bad value for 'group_id' [ 324.077839][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.087671][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 324.101201][ T30] audit: type=1400 audit(1753226032.014:527): avc: denied { read write } for pid=8895 comm="syz.3.677" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 324.126406][ T5959] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 324.138835][ T8892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.159433][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.170787][ T5959] usb 1-1: config 0 descriptor?? [ 324.228539][ T8893] unknown channel width for channel at 909000KHz? [ 324.237170][ T8893] unknown channel width for channel at 909000KHz? [ 324.248057][ T8893] unknown channel width for channel at 909000KHz? [ 324.447764][ T8889] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 324.682254][ T5959] microsoft 0003:045E:07DA.0005: unknown main item tag 0x7 [ 324.697449][ T5959] microsoft 0003:045E:07DA.0005: item fetching failed at offset 31/34 [ 324.735830][ T5959] microsoft 0003:045E:07DA.0005: parse failed [ 324.763029][ T5959] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 324.894074][ T5912] usb 1-1: USB disconnect, device number 15 [ 325.146713][ T5959] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 325.305559][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 325.484731][ T5959] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 325.497098][ T5959] usb 4-1: config 8 has no interface number 0 [ 325.505709][ T5959] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 325.519107][ T5959] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 325.542337][ T5959] usb 4-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 325.568461][ T5959] usb 4-1: config 8 interface 206 has no altsetting 0 [ 325.586978][ T5959] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 325.598135][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.609600][ T5959] usb 4-1: Product: syz [ 325.622348][ T5959] usb 4-1: Manufacturer: syz [ 325.632637][ T5959] usb 4-1: SerialNumber: syz [ 325.930472][ T5959] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 325.960876][ T5959] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 326.405735][ T5959] usb 4-1: USB disconnect, device number 12 [ 326.424903][ T5959] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 326.435496][ T5959] garmin_gps 4-1:8.206: device disconnected [ 326.653528][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 326.653545][ T30] audit: type=1400 audit(1753226034.984:542): avc: denied { nlmsg_write } for pid=8923 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.680652][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.704005][ T8924] netlink: 68 bytes leftover after parsing attributes in process `syz.1.685'. [ 326.714765][ T30] audit: type=1400 audit(1753226035.044:543): avc: denied { name_bind } for pid=8923 comm="syz.1.685" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 326.766986][ T30] audit: type=1400 audit(1753226035.094:544): avc: denied { ioctl } for pid=8923 comm="syz.1.685" path="/dev/sg0" dev="devtmpfs" ino=771 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 326.870770][ T30] audit: type=1400 audit(1753226035.184:545): avc: denied { mount } for pid=8920 comm="syz.4.684" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 327.374282][ T30] audit: type=1400 audit(1753226035.694:546): avc: denied { mount } for pid=8932 comm="syz.0.686" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 327.451605][ T30] audit: type=1400 audit(1753226035.774:547): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 327.536175][ T8939] FAULT_INJECTION: forcing a failure. [ 327.536175][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 327.556920][ T8939] CPU: 1 UID: 0 PID: 8939 Comm: syz.1.689 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 327.556983][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.556993][ T8939] Call Trace: [ 327.556999][ T8939] [ 327.557006][ T8939] dump_stack_lvl+0x16c/0x1f0 [ 327.557040][ T8939] should_fail_ex+0x512/0x640 [ 327.557066][ T8939] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 327.557097][ T8939] should_failslab+0xc2/0x120 [ 327.557115][ T8939] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 327.557141][ T8939] ? __alloc_skb+0x2b2/0x380 [ 327.557171][ T8939] __alloc_skb+0x2b2/0x380 [ 327.557196][ T8939] ? __pfx___alloc_skb+0x10/0x10 [ 327.557219][ T8939] ? __pfx_inet_rtm_deladdr+0x10/0x10 [ 327.557249][ T8939] netlink_ack+0x15d/0xb80 [ 327.557277][ T8939] netlink_rcv_skb+0x332/0x420 [ 327.557296][ T8939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.557316][ T8939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.557343][ T8939] ? netlink_deliver_tap+0x1ae/0xd30 [ 327.557366][ T8939] netlink_unicast+0x58d/0x850 [ 327.557389][ T8939] ? __pfx_netlink_unicast+0x10/0x10 [ 327.557415][ T8939] netlink_sendmsg+0x8d1/0xdd0 [ 327.557439][ T8939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.557466][ T8939] ____sys_sendmsg+0xa95/0xc70 [ 327.557488][ T8939] ? copy_msghdr_from_user+0x10a/0x160 [ 327.557513][ T8939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.557543][ T8939] ___sys_sendmsg+0x134/0x1d0 [ 327.557568][ T8939] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.557598][ T8939] ? __lock_acquire+0x622/0x1c90 [ 327.557635][ T8939] __sys_sendmsg+0x16d/0x220 [ 327.557650][ T8939] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.557679][ T8939] do_syscall_64+0xcd/0x4c0 [ 327.557696][ T8939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.557713][ T8939] RIP: 0033:0x7f249d98e9a9 [ 327.557727][ T8939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.557742][ T8939] RSP: 002b:00007f249e886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.557758][ T8939] RAX: ffffffffffffffda RBX: 00007f249dbb5fa0 RCX: 00007f249d98e9a9 [ 327.557768][ T8939] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 327.557777][ T8939] RBP: 00007f249e886090 R08: 0000000000000000 R09: 0000000000000000 [ 327.557786][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.557796][ T8939] R13: 0000000000000000 R14: 00007f249dbb5fa0 R15: 00007ffca062e098 [ 327.557817][ T8939] [ 327.804357][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.053937][ T5940] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 328.246652][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 328.271061][ T5940] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 328.282991][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.293280][ T5940] usb 4-1: Product: syz [ 328.298488][ T5940] usb 4-1: Manufacturer: syz [ 328.303455][ T5940] usb 4-1: SerialNumber: syz [ 328.310226][ T5940] usb 4-1: config 0 descriptor?? [ 328.319402][ T5940] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 328.415750][ T30] audit: type=1400 audit(1753226036.734:548): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 328.547875][ T30] audit: type=1400 audit(1753226036.764:549): avc: denied { create } for pid=8950 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 328.685372][ T30] audit: type=1400 audit(1753226036.764:550): avc: denied { ioctl } for pid=8950 comm="syz.2.692" path="socket:[19471]" dev="sockfs" ino=19471 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 328.727243][ T5940] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 328.782011][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 328.794162][ T30] audit: type=1400 audit(1753226037.044:551): avc: denied { listen } for pid=8960 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 328.815915][ T8965] openvswitch: netlink: nsh attribute has 5116 unknown bytes. [ 328.832398][ T8965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.261801][ T5912] usb 4-1: USB disconnect, device number 13 [ 329.420138][ T5912] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 329.463788][ T5912] visor 4-1:0.0: device disconnected [ 331.692250][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 331.692291][ T30] audit: type=1400 audit(1753226039.984:556): avc: denied { mount } for pid=8996 comm="syz.0.704" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 332.232919][ T30] audit: type=1400 audit(1753226039.994:557): avc: denied { mounton } for pid=8996 comm="syz.0.704" path="/145/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 332.589762][ T30] audit: type=1400 audit(1753226040.414:558): avc: denied { create } for pid=8998 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 332.611000][ T30] audit: type=1400 audit(1753226040.744:559): avc: denied { write } for pid=9000 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 333.295184][ T30] audit: type=1400 audit(1753226040.784:560): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 333.377780][ T30] audit: type=1400 audit(1753226041.674:561): avc: denied { create } for pid=9008 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 333.502190][ T30] audit: type=1400 audit(1753226041.684:562): avc: denied { connect } for pid=9008 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 333.731203][ T30] audit: type=1400 audit(1753226041.824:563): avc: denied { ioctl } for pid=9008 comm="syz.0.708" path="socket:[19612]" dev="sockfs" ino=19612 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.704054][ T30] audit: type=1400 audit(1753226041.994:564): avc: denied { mounton } for pid=9018 comm="syz.3.711" path="/146/file0" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 334.726532][ T5940] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 336.245003][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 336.476462][ T9039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 336.488089][ T9039] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 336.507591][ T9039] FAULT_INJECTION: forcing a failure. [ 336.507591][ T9039] name failslab, interval 1, probability 0, space 0, times 0 [ 336.520330][ T9039] CPU: 1 UID: 0 PID: 9039 Comm: syz.0.715 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 336.520356][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.520367][ T9039] Call Trace: [ 336.520374][ T9039] [ 336.520381][ T9039] dump_stack_lvl+0x16c/0x1f0 [ 336.520419][ T9039] should_fail_ex+0x512/0x640 [ 336.520447][ T9039] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 336.520478][ T9039] should_failslab+0xc2/0x120 [ 336.520496][ T9039] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 336.520522][ T9039] ? __pfx___might_resched+0x10/0x10 [ 336.520546][ T9039] ? alloc_vmap_area+0xdc8/0x29c0 [ 336.520569][ T9039] alloc_vmap_area+0xdc8/0x29c0 [ 336.520600][ T9039] ? __pfx_alloc_vmap_area+0x10/0x10 [ 336.520626][ T9039] __get_vm_area_node+0x1ca/0x330 [ 336.520652][ T9039] __vmalloc_node_range_noprof+0x271/0x14b0 [ 336.520675][ T9039] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 336.520704][ T9039] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 336.520727][ T9039] ? irqentry_exit+0x3b/0x90 [ 336.520744][ T9039] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 336.520767][ T9039] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 336.520789][ T9039] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 336.520810][ T9039] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 336.520830][ T9039] __vmalloc_node_noprof+0xad/0xf0 [ 336.520851][ T9039] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 336.520873][ T9039] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 336.520892][ T9039] ? security_capable+0x7e/0x260 [ 336.520919][ T9039] bpf_prog_alloc+0x3b/0x230 [ 336.520936][ T9039] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 336.520959][ T9039] bpf_prog_load+0x1a04/0x2490 [ 336.520990][ T9039] ? __pfx_bpf_prog_load+0x10/0x10 [ 336.521011][ T9039] ? avc_has_perm_noaudit+0x149/0x3b0 [ 336.521051][ T9039] ? __sys_bpf+0x284/0x4ea0 [ 336.521077][ T9039] __sys_bpf+0x4d1a/0x4ea0 [ 336.521104][ T9039] ? __pfx___sys_bpf+0x10/0x10 [ 336.521128][ T9039] ? ksys_write+0x190/0x250 [ 336.521156][ T9039] ? rcu_is_watching+0x12/0xc0 [ 336.521178][ T9039] ? irqentry_exit+0x3b/0x90 [ 336.521193][ T9039] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.521240][ T9039] ? fput+0x70/0xf0 [ 336.521258][ T9039] ? ksys_write+0x1ac/0x250 [ 336.521283][ T9039] ? __pfx_ksys_write+0x10/0x10 [ 336.521312][ T9039] __x64_sys_bpf+0x78/0xc0 [ 336.521336][ T9039] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.521361][ T9039] do_syscall_64+0xcd/0x4c0 [ 336.521380][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.521398][ T9039] RIP: 0033:0x7f1b84b8e9a9 [ 336.521413][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.521430][ T9039] RSP: 002b:00007f1b829f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.521447][ T9039] RAX: ffffffffffffffda RBX: 00007f1b84db6160 RCX: 00007f1b84b8e9a9 [ 336.521459][ T9039] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 336.521469][ T9039] RBP: 00007f1b829f6090 R08: 0000000000000000 R09: 0000000000000000 [ 336.521479][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.521489][ T9039] R13: 0000000000000000 R14: 00007f1b84db6160 R15: 00007ffc43572088 [ 336.521512][ T9039] [ 336.881050][ T5940] usb 3-1: unable to read config index 0 descriptor/all [ 336.888357][ T5940] usb 3-1: can't read configurations, error -71 [ 337.190608][ T30] audit: type=1400 audit(1753226045.364:565): avc: denied { connect } for pid=9028 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.334558][ T9043] syz_tun: entered allmulticast mode [ 337.378277][ T9042] syz_tun: left allmulticast mode [ 338.658226][ T5940] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 338.860284][ T5940] usb 3-1: config 203 has an invalid descriptor of length 232, skipping remainder of the config [ 338.927372][ T5940] usb 3-1: config 203 has 0 interfaces, different from the descriptor's value: 1 [ 338.949489][ T5940] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 338.958970][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.038711][ T5940] usb 3-1: Product: syz [ 339.058330][ T5940] usb 3-1: Manufacturer: syz [ 339.100164][ T5940] usb 3-1: SerialNumber: syz [ 339.241228][ T9098] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 339.252932][ T30] audit: type=1400 audit(1753226047.564:566): avc: denied { create } for pid=9064 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 339.314079][ T30] audit: type=1400 audit(1753226047.564:567): avc: denied { setopt } for pid=9064 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 339.345933][ T5940] usb 3-1: USB disconnect, device number 14 [ 339.634566][ T30] audit: type=1400 audit(1753226047.564:568): avc: denied { write } for pid=9064 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 339.683802][ T30] audit: type=1400 audit(1753226047.624:569): avc: denied { setopt } for pid=9064 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 339.714531][ T9100] netlink: zone id is out of range [ 339.764782][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 339.805647][ T9100] netlink: set zone limit has 4 unknown bytes [ 340.186464][ T30] audit: type=1400 audit(1753226048.514:570): avc: denied { read write } for pid=9109 comm="syz.1.727" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 341.481060][ T30] audit: type=1400 audit(1753226048.544:571): avc: denied { open } for pid=9109 comm="syz.1.727" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 341.576708][ T30] audit: type=1400 audit(1753226048.724:572): avc: denied { execute } for pid=9109 comm="syz.1.727" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 341.691763][ T30] audit: type=1400 audit(1753226048.934:573): avc: denied { write } for pid=9107 comm="syz.3.726" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 341.744507][ T5899] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 341.777860][ T30] audit: type=1400 audit(1753226048.934:574): avc: denied { open } for pid=9107 comm="syz.3.726" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 341.847393][ T9122] xt_socket: unknown flags 0x58 [ 342.317486][ T30] audit: type=1400 audit(1753226050.164:575): avc: denied { watch watch_reads } for pid=9118 comm="syz.2.728" path="/149" dev="tmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 342.982932][ T30] audit: type=1400 audit(1753226050.824:576): avc: denied { connect } for pid=9123 comm="syz.0.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 343.266691][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 343.306839][ T5899] usb 5-1: can't read configurations, error -71 [ 343.339401][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 343.963091][ T30] audit: type=1400 audit(1753226051.924:577): avc: denied { execute } for pid=9134 comm="syz.2.732" name="file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 344.258474][ T30] audit: type=1400 audit(1753226051.924:578): avc: denied { execute_no_trans } for pid=9134 comm="syz.2.732" path="/150/file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 344.748724][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 345.622892][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 345.996671][ T5899] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 346.057368][ T5899] usb 5-1: config 0 has no interface number 0 [ 346.070672][ T30] audit: type=1400 audit(1753226054.394:579): avc: denied { write } for pid=9153 comm="syz.1.738" path="socket:[18774]" dev="sockfs" ino=18774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 346.108811][ T5899] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 346.204625][ T5899] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 346.215243][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.247748][ T5899] usb 5-1: Product: syz [ 346.252476][ T5899] usb 5-1: Manufacturer: syz [ 346.272961][ T5899] usb 5-1: SerialNumber: syz [ 346.584661][ T5899] usb 5-1: config 0 descriptor?? [ 347.843066][ T5899] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 347.851990][ T5899] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 347.914654][ T5899] usb 5-1: USB disconnect, device number 17 [ 347.970701][ T9172] syz_tun: entered allmulticast mode [ 347.987726][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.313222][ T5912] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 348.336924][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.354723][ T9171] syz_tun: left allmulticast mode [ 348.361417][ T30] audit: type=1400 audit(1753226056.684:580): avc: denied { read write } for pid=9173 comm="syz.1.743" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 348.457300][ T30] audit: type=1400 audit(1753226056.684:581): avc: denied { open } for pid=9173 comm="syz.1.743" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 348.518456][ T30] audit: type=1400 audit(1753226056.844:582): avc: denied { create } for pid=9182 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 348.538421][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 348.568091][ T5912] usb 2-1: config 244 has an invalid interface number: 228 but max is 0 [ 348.585928][ T5912] usb 2-1: config 244 has no interface number 0 [ 348.595712][ T30] audit: type=1400 audit(1753226056.874:583): avc: denied { ioctl } for pid=9182 comm="syz.3.746" path="socket:[18840]" dev="sockfs" ino=18840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 348.630407][ T5912] usb 2-1: config 244 interface 228 altsetting 213 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 348.645178][ T5912] usb 2-1: config 244 interface 228 has no altsetting 0 [ 349.004546][ T5912] usb 2-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice=94.68 [ 349.016816][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.045121][ T5912] usb 2-1: Product: syz [ 349.065011][ T5912] usb 2-1: Manufacturer: syz [ 349.079024][ T5912] usb 2-1: SerialNumber: syz [ 349.124834][ T5912] usb 2-1: Interface #228 referenced by multiple IADs [ 349.163002][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 349.173669][ T9194] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 349.181692][ T9194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.218339][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 349.477903][ T5912] dm9601 2-1:244.228: probe with driver dm9601 failed with error -22 [ 349.509541][ T5912] usb 2-1: USB disconnect, device number 9 [ 349.576617][ T9197] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 349.703157][ T5913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 350.723114][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 350.867946][ T30] audit: type=1400 audit(1753226059.004:584): avc: denied { create } for pid=9196 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 351.397338][ T30] audit: type=1400 audit(1753226059.024:585): avc: denied { write } for pid=9196 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 351.530994][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 351.543641][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.607459][ T30] audit: type=1400 audit(1753226059.654:586): avc: denied { connect } for pid=9205 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 352.608781][ T5913] usb 4-1: can't set config #252, error -71 [ 352.622577][ T9216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=9216 comm=syz.2.757 [ 352.691702][ T9218] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 352.700567][ T5913] usb 4-1: USB disconnect, device number 14 [ 352.733423][ T9219] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 353.394715][ T9223] 9pnet_fd: p9_fd_create_tcp (9223): problem connecting socket to 127.0.0.1 [ 353.721751][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 354.935442][ T9258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.770'. [ 355.342151][ T5827] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 355.405742][ T30] audit: type=1400 audit(1753226063.724:587): avc: denied { create } for pid=9261 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 355.755733][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 356.012352][ T5827] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 356.025354][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.112331][ T30] audit: type=1400 audit(1753226064.394:588): avc: denied { connect } for pid=9269 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 356.134744][ T30] audit: type=1400 audit(1753226064.394:589): avc: denied { setopt } for pid=9269 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 356.154138][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.213791][ T5827] pvrusb2: Hardware description: Terratec Grabster AV400 [ 356.220885][ T5827] pvrusb2: ********** [ 356.225238][ T30] audit: type=1400 audit(1753226064.514:590): avc: denied { setopt } for pid=9261 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 356.229648][ T5827] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 356.262977][ T5827] pvrusb2: Important functionality might not be entirely working. [ 356.270865][ T5827] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 356.427667][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.436304][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.467216][ T30] audit: type=1400 audit(1753226064.514:591): avc: denied { bind } for pid=9261 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 356.486338][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.564143][ T5827] pvrusb2: ********** [ 356.588181][ T2335] pvrusb2: Invalid write control endpoint [ 356.594108][ T5827] usb 1-1: USB disconnect, device number 16 [ 357.038870][ T2335] pvrusb2: Invalid write control endpoint [ 357.061866][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 357.129604][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 357.160850][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 357.181186][ T2335] pvrusb2: Device being rendered inoperable [ 357.205328][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 357.298946][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 357.312116][ T2335] pvrusb2: Attached sub-driver cx25840 [ 357.338453][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 357.352878][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 358.008556][ T9287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9287 comm=syz.3.778 [ 358.024376][ T30] audit: type=1400 audit(1753226066.344:592): avc: denied { audit_write } for pid=9278 comm="syz.3.778" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 359.617356][ T9297] FAULT_INJECTION: forcing a failure. [ 359.617356][ T9297] name failslab, interval 1, probability 0, space 0, times 0 [ 359.630211][ T9297] CPU: 0 UID: 0 PID: 9297 Comm: syz.3.782 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 359.630227][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.630233][ T9297] Call Trace: [ 359.630237][ T9297] [ 359.630241][ T9297] dump_stack_lvl+0x16c/0x1f0 [ 359.630264][ T9297] should_fail_ex+0x512/0x640 [ 359.630284][ T9297] ? hash_netport4_add+0x13ef/0x3160 [ 359.630301][ T9297] should_failslab+0xc2/0x120 [ 359.630313][ T9297] __kmalloc_noprof+0xd2/0x510 [ 359.630334][ T9297] hash_netport4_add+0x13ef/0x3160 [ 359.630348][ T9297] ? do_raw_spin_lock+0x12c/0x2b0 [ 359.630364][ T9297] ? __nla_parse+0x40/0x60 [ 359.630377][ T9297] ? ip_set_get_extensions+0x330/0xbf0 [ 359.630394][ T9297] ? __pfx_hash_netport4_add+0x10/0x10 [ 359.630408][ T9297] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 359.630424][ T9297] ? ip_set_range_to_cidr+0xaf/0x110 [ 359.630436][ T9297] hash_netport4_uadt+0xa7b/0x12e0 [ 359.630452][ T9297] ? __pfx_hash_netport4_add+0x10/0x10 [ 359.630467][ T9297] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 359.630482][ T9297] ? lock_acquire+0x179/0x350 [ 359.630494][ T9297] ? is_bpf_text_address+0x8a/0x1a0 [ 359.630510][ T9297] ? bpf_ksym_find+0x127/0x1c0 [ 359.630524][ T9297] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 359.630542][ T9297] call_ad.constprop.0+0x16b/0x940 [ 359.630560][ T9297] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 359.630575][ T9297] ? __pfx___nla_validate_parse+0x10/0x10 [ 359.630592][ T9297] ? __nla_parse+0x40/0x60 [ 359.630605][ T9297] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 359.630624][ T9297] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 359.630640][ T9297] ? __pfx___might_resched+0x10/0x10 [ 359.630666][ T9297] ? find_held_lock+0x2b/0x80 [ 359.630683][ T9297] nfnetlink_rcv_msg+0x9fc/0x1200 [ 359.630703][ T9297] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 359.630719][ T9297] ? __lock_acquire+0x622/0x1c90 [ 359.630738][ T9297] ? avc_has_perm_noaudit+0x149/0x3b0 [ 359.630756][ T9297] netlink_rcv_skb+0x155/0x420 [ 359.630769][ T9297] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 359.630784][ T9297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.630802][ T9297] ? ns_capable+0xd7/0x110 [ 359.630816][ T9297] nfnetlink_rcv+0x1b3/0x430 [ 359.630830][ T9297] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 359.630844][ T9297] ? netlink_deliver_tap+0x1ae/0xd30 [ 359.630858][ T9297] netlink_unicast+0x58d/0x850 [ 359.630871][ T9297] ? __pfx_netlink_unicast+0x10/0x10 [ 359.630887][ T9297] netlink_sendmsg+0x8d1/0xdd0 [ 359.630901][ T9297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.630923][ T9297] ____sys_sendmsg+0xa95/0xc70 [ 359.630937][ T9297] ? copy_msghdr_from_user+0x10a/0x160 [ 359.630954][ T9297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.630973][ T9297] ___sys_sendmsg+0x134/0x1d0 [ 359.630990][ T9297] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.631006][ T9297] ? __lock_acquire+0x622/0x1c90 [ 359.631030][ T9297] __sys_sendmsg+0x16d/0x220 [ 359.631040][ T9297] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.631058][ T9297] do_syscall_64+0xcd/0x4c0 [ 359.631070][ T9297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.631081][ T9297] RIP: 0033:0x7f6ec998e9a9 [ 359.631091][ T9297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.631102][ T9297] RSP: 002b:00007f6eca711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.631114][ T9297] RAX: ffffffffffffffda RBX: 00007f6ec9bb5fa0 RCX: 00007f6ec998e9a9 [ 359.631121][ T9297] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000004 [ 359.631127][ T9297] RBP: 00007f6eca711090 R08: 0000000000000000 R09: 0000000000000000 [ 359.631133][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.631139][ T9297] R13: 0000000000000000 R14: 00007f6ec9bb5fa0 R15: 00007ffe64bd9978 [ 359.631152][ T9297] [ 360.240413][ T30] audit: type=1400 audit(1753226068.414:593): avc: denied { getopt } for pid=9295 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 364.264087][ T9319] syz2: rxe_newlink: already configured on bridge_slave_0 [ 364.473221][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 364.612918][ T9] usb 4-1: device descriptor read/64, error -71 [ 364.769403][ T30] audit: type=1400 audit(1753226073.084:594): avc: denied { connect } for pid=9324 comm="syz.0.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 364.794463][ T30] audit: type=1400 audit(1753226073.094:595): avc: denied { name_connect } for pid=9324 comm="syz.0.789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 364.942957][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 365.013123][ T5940] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 365.103127][ T9] usb 4-1: device descriptor read/64, error -71 [ 365.193712][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 365.199472][ T9336] 9pnet_fd: Insufficient options for proto=fd [ 365.208024][ T5940] usb 5-1: config 4 has an invalid interface number: 202 but max is 0 [ 365.224826][ T5940] usb 5-1: config 4 has no interface number 0 [ 365.231004][ T5940] usb 5-1: config 4 interface 202 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 365.258571][ T9] usb usb4-port1: attempt power cycle [ 365.274715][ T5940] usb 5-1: config 4 interface 202 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 365.292855][ T5940] usb 5-1: config 4 interface 202 altsetting 15 endpoint 0xE has invalid wMaxPacketSize 0 [ 365.345915][ T5940] usb 5-1: config 4 interface 202 altsetting 15 endpoint 0xB has invalid maxpacket 576, setting to 64 [ 365.383327][ T5940] usb 5-1: config 4 interface 202 altsetting 15 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 366.483389][ T5940] usb 5-1: config 4 interface 202 has no altsetting 0 [ 366.493432][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 366.503717][ T5940] usb 5-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=d6.a7 [ 366.512996][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.523595][ T5940] usb 5-1: Product: à°Œ [ 366.527850][ T5940] usb 5-1: Manufacturer: ÑŒ [ 366.532353][ T5940] usb 5-1: SerialNumber: syz [ 366.613968][ T9] usb 4-1: device descriptor read/8, error -71 [ 368.364086][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 369.464455][ T9] usb 4-1: device not accepting address 18, error -71 [ 369.474197][ T9] usb usb4-port1: unable to enumerate USB device [ 369.504526][ T9332] xt_cgroup: path and classid specified [ 369.583086][ T5940] usb 5-1: USB disconnect, device number 18 [ 370.008016][ T30] audit: type=1400 audit(1753226078.314:596): avc: denied { create } for pid=9362 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 370.833006][ T30] audit: type=1400 audit(1753226078.334:597): avc: denied { ioctl } for pid=9362 comm="syz.2.799" path="socket:[19167]" dev="sockfs" ino=19167 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 372.070473][ T9383] 9pnet_fd: Insufficient options for proto=fd [ 373.849802][ T5959] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 374.047242][ T5959] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.061298][ T5959] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 374.071108][ T9407] tipc: Started in network mode [ 374.081683][ T9407] tipc: Node identity 06710596b9cd, cluster identity 4711 [ 374.095269][ T9407] tipc: Enabled bearer , priority 0 [ 374.102058][ T5959] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.111382][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.129756][ T9405] tipc: Started in network mode [ 374.134762][ T9405] tipc: Node identity 2a4d60468d5b, cluster identity 4711 [ 374.141949][ T9405] tipc: Enabled bearer , priority 0 [ 374.151196][ T9405] syzkaller0: entered promiscuous mode [ 374.156721][ T9405] syzkaller0: entered allmulticast mode [ 374.309335][ T9407] syzkaller0: entered promiscuous mode [ 374.466110][ T9394] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.475352][ T5959] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.497456][ T9407] syzkaller0: entered allmulticast mode [ 374.585149][ T9407] syzkaller0: MTU too low for tipc bearer [ 374.605305][ T9407] tipc: Disabling bearer [ 374.788761][ T9401] tipc: Resetting bearer [ 374.804747][ T5959] usb 5-1: USB disconnect, device number 19 [ 374.856582][ T9401] tipc: Disabling bearer [ 374.901923][ T9420] pim6reg: entered allmulticast mode [ 374.973070][ T9399] pim6reg: left allmulticast mode [ 375.272029][ T30] audit: type=1400 audit(1753226083.594:598): avc: denied { connect } for pid=9423 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.491243][ T30] audit: type=1400 audit(1753226083.784:599): avc: denied { create } for pid=9432 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 375.883769][ T9447] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 376.542431][ T30] audit: type=1400 audit(1753226084.864:600): avc: denied { read } for pid=9448 comm="syz.4.823" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 376.733053][ T30] audit: type=1400 audit(1753226084.864:601): avc: denied { open } for pid=9448 comm="syz.4.823" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 377.271107][ T30] audit: type=1400 audit(1753226084.874:602): avc: denied { listen } for pid=9448 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.841908][ T30] audit: type=1400 audit(1753226086.164:603): avc: denied { map } for pid=9462 comm="syz.4.825" path="socket:[20465]" dev="sockfs" ino=20465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 378.002779][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 378.011819][ T9465] openvswitch: netlink: nsh attribute has 5116 unknown bytes. [ 378.019463][ T9465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.144019][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.152063][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.311702][ T30] audit: type=1400 audit(1753226086.634:604): avc: denied { ioctl } for pid=9467 comm="syz.3.828" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 378.364218][ T30] audit: type=1400 audit(1753226086.684:605): avc: denied { create } for pid=9466 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.438925][ T30] audit: type=1400 audit(1753226086.764:606): avc: denied { bind } for pid=9470 comm="syz.4.829" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 378.459834][ T30] audit: type=1400 audit(1753226086.764:607): avc: denied { node_bind } for pid=9470 comm="syz.4.829" saddr=fe88::5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 378.523374][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 378.890257][ T9474] bridge1: port 1(veth0_to_bond) entered blocking state [ 379.036774][ T9474] bridge1: port 1(veth0_to_bond) entered disabled state [ 379.453086][ T9474] veth0_to_bond: entered allmulticast mode [ 379.462134][ T9474] veth0_to_bond: entered promiscuous mode [ 379.981918][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.989687][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.271052][ T9484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.413882][ T9484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.459042][ T9506] FAULT_INJECTION: forcing a failure. [ 380.459042][ T9506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.460277][ T9506] [ 380.460284][ T9506] ====================================================== [ 380.460288][ T9506] WARNING: possible circular locking dependency detected [ 380.460292][ T9506] 6.16.0-rc7-syzkaller #0 Not tainted [ 380.460298][ T9506] ------------------------------------------------------ [ 380.460301][ T9506] syz.1.838/9506 is trying to acquire lock: [ 380.460306][ T9506] ffffffff8e4d2380 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 380.460338][ T9506] [ 380.460338][ T9506] but task is already holding lock: [ 380.460341][ T9506] ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 380.460365][ T9506] [ 380.460365][ T9506] which lock already depends on the new lock. [ 380.460365][ T9506] [ 380.460368][ T9506] [ 380.460368][ T9506] the existing dependency chain (in reverse order) is: [ 380.460371][ T9506] [ 380.460371][ T9506] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 380.460384][ T9506] _raw_spin_lock_nested+0x31/0x40 [ 380.460399][ T9506] raw_spin_rq_lock_nested+0x29/0x130 [ 380.460411][ T9506] task_rq_lock+0xcf/0x490 [ 380.460423][ T9506] cgroup_move_task+0x81/0x2a0 [ 380.460437][ T9506] css_set_move_task+0x288/0x5f0 [ 380.460447][ T9506] cgroup_post_fork+0x201/0x9e0 [ 380.460458][ T9506] copy_process+0x5c82/0x7650 [ 380.460472][ T9506] kernel_clone+0xfc/0x960 [ 380.460485][ T9506] user_mode_thread+0xc7/0x110 [ 380.460497][ T9506] rest_init+0x23/0x2b0 [ 380.460508][ T9506] start_kernel+0x3ee/0x4d0 [ 380.460524][ T9506] x86_64_start_reservations+0x18/0x30 [ 380.460540][ T9506] x86_64_start_kernel+0x130/0x190 [ 380.460555][ T9506] common_startup_64+0x13e/0x148 [ 380.460566][ T9506] [ 380.460566][ T9506] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 380.460578][ T9506] _raw_spin_lock_irqsave+0x3a/0x60 [ 380.460592][ T9506] try_to_wake_up+0xb2/0x1680 [ 380.460604][ T9506] __wake_up_common+0x135/0x1f0 [ 380.460612][ T9506] __wake_up+0x31/0x60 [ 380.460625][ T9506] tty_port_default_wakeup+0x2a/0x40 [ 380.460637][ T9506] serial8250_tx_chars+0x68e/0x860 [ 380.460648][ T9506] serial8250_handle_irq+0x761/0xcb0 [ 380.460659][ T9506] serial8250_default_handle_irq+0x9a/0x210 [ 380.460677][ T9506] serial8250_interrupt+0x103/0x210 [ 380.460690][ T9506] __handle_irq_event_percpu+0x229/0x7d0 [ 380.460702][ T9506] handle_irq_event+0xab/0x1e0 [ 380.460714][ T9506] handle_edge_irq+0x28e/0xab0 [ 380.460725][ T9506] __common_interrupt+0xe2/0x250 [ 380.460737][ T9506] common_interrupt+0xba/0xe0 [ 380.460749][ T9506] asm_common_interrupt+0x26/0x40 [ 380.460760][ T9506] lock_release+0x77/0x2f0 [ 380.460768][ T9506] unwind_next_frame+0x3f9/0x20a0 [ 380.460777][ T9506] arch_stack_walk+0x94/0x100 [ 380.460786][ T9506] stack_trace_save+0x8e/0xc0 [ 380.460800][ T9506] kasan_save_stack+0x33/0x60 [ 380.460816][ T9506] kasan_save_track+0x14/0x30 [ 380.460830][ T9506] __kasan_slab_alloc+0x89/0x90 [ 380.460845][ T9506] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 380.460861][ T9506] getname_flags.part.0+0x4c/0x550 [ 380.460873][ T9506] getname_flags+0x93/0xf0 [ 380.460887][ T9506] __x64_sys_symlinkat+0x79/0xc0 [ 380.460896][ T9506] do_syscall_64+0xcd/0x4c0 [ 380.460905][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.460914][ T9506] [ 380.460914][ T9506] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 380.460927][ T9506] _raw_spin_lock_irqsave+0x3a/0x60 [ 380.460940][ T9506] __wake_up+0x1c/0x60 [ 380.460953][ T9506] tty_port_default_wakeup+0x2a/0x40 [ 380.460963][ T9506] serial8250_tx_chars+0x68e/0x860 [ 380.460973][ T9506] serial8250_handle_irq+0x761/0xcb0 [ 380.460984][ T9506] serial8250_default_handle_irq+0x9a/0x210 [ 380.460996][ T9506] serial8250_interrupt+0x103/0x210 [ 380.461008][ T9506] __handle_irq_event_percpu+0x229/0x7d0 [ 380.461020][ T9506] handle_irq_event+0xab/0x1e0 [ 380.461032][ T9506] handle_edge_irq+0x28e/0xab0 [ 380.461042][ T9506] __common_interrupt+0xe2/0x250 [ 380.461054][ T9506] common_interrupt+0xba/0xe0 [ 380.461065][ T9506] asm_common_interrupt+0x26/0x40 [ 380.461074][ T9506] _raw_spin_unlock_irqrestore+0x31/0x80 [ 380.461088][ T9506] uart_write+0x2a4/0xb30 [ 380.461097][ T9506] n_tty_write+0x412/0x1160 [ 380.461108][ T9506] file_tty_write.constprop.0+0x501/0x9b0 [ 380.461118][ T9506] redirected_tty_write+0xd4/0x150 [ 380.461127][ T9506] vfs_write+0x6c4/0x1150 [ 380.461140][ T9506] ksys_write+0x12a/0x250 [ 380.461154][ T9506] do_syscall_64+0xcd/0x4c0 [ 380.461162][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.461171][ T9506] [ 380.461171][ T9506] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 380.461184][ T9506] _raw_spin_lock_irqsave+0x3a/0x60 [ 380.461197][ T9506] serial8250_console_write+0x181/0x1890 [ 380.461210][ T9506] console_flush_all+0x801/0xc60 [ 380.461221][ T9506] console_unlock+0xd8/0x210 [ 380.461232][ T9506] vprintk_emit+0x418/0x6d0 [ 380.461243][ T9506] _printk+0xc7/0x100 [ 380.461251][ T9506] register_console+0xc2d/0x11b0 [ 380.461264][ T9506] univ8250_console_init+0x5f/0x90 [ 380.461280][ T9506] console_init+0x14f/0x680 [ 380.461288][ T9506] start_kernel+0x29f/0x4d0 [ 380.461302][ T9506] x86_64_start_reservations+0x18/0x30 [ 380.461318][ T9506] x86_64_start_kernel+0x130/0x190 [ 380.461333][ T9506] common_startup_64+0x13e/0x148 [ 380.461342][ T9506] [ 380.461342][ T9506] -> #0 (console_owner){-.-.}-{0:0}: [ 380.461354][ T9506] __lock_acquire+0x126f/0x1c90 [ 380.461362][ T9506] lock_acquire+0x179/0x350 [ 380.461369][ T9506] console_lock_spinning_enable+0xb0/0xd0 [ 380.461381][ T9506] console_flush_all+0x7aa/0xc60 [ 380.461392][ T9506] console_unlock+0xd8/0x210 [ 380.461403][ T9506] vprintk_emit+0x418/0x6d0 [ 380.461414][ T9506] _printk+0xc7/0x100 [ 380.461422][ T9506] should_fail_ex+0x4e7/0x640 [ 380.461437][ T9506] copy_to_user_nofault+0xac/0x1c0 [ 380.461446][ T9506] bpf_probe_write_user+0xaf/0xf0 [ 380.461461][ T9506] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 380.461468][ T9506] bpf_trace_run4+0x249/0x5a0 [ 380.461477][ T9506] __bpf_trace_sched_switch+0x145/0x190 [ 380.461490][ T9506] __traceiter_sched_switch+0x6c/0xc0 [ 380.461500][ T9506] __schedule+0x1bee/0x5dd0 [ 380.461514][ T9506] schedule+0xe7/0x3a0 [ 380.461527][ T9506] schedule_preempt_disabled+0x13/0x30 [ 380.461541][ T9506] __mutex_lock+0x6c7/0xb90 [ 380.461550][ T9506] nl80211_pre_doit+0xb4/0xb10 [ 380.461566][ T9506] genl_family_rcv_msg_doit+0x1c3/0x2f0 [ 380.461580][ T9506] genl_rcv_msg+0x55c/0x800 [ 380.461592][ T9506] netlink_rcv_skb+0x155/0x420 [ 380.461602][ T9506] genl_rcv+0x28/0x40 [ 380.461613][ T9506] netlink_unicast+0x58d/0x850 [ 380.461623][ T9506] netlink_sendmsg+0x8d1/0xdd0 [ 380.461633][ T9506] ____sys_sendmsg+0xa95/0xc70 [ 380.461645][ T9506] ___sys_sendmsg+0x134/0x1d0 [ 380.461660][ T9506] __sys_sendmsg+0x16d/0x220 [ 380.461671][ T9506] do_syscall_64+0xcd/0x4c0 [ 380.461679][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.461689][ T9506] [ 380.461689][ T9506] other info that might help us debug this: [ 380.461689][ T9506] [ 380.461692][ T9506] Chain exists of: [ 380.461692][ T9506] console_owner --> &p->pi_lock --> &rq->__lock [ 380.461692][ T9506] [ 380.461705][ T9506] Possible unsafe locking scenario: [ 380.461705][ T9506] [ 380.461708][ T9506] CPU0 CPU1 [ 380.461711][ T9506] ---- ---- [ 380.461713][ T9506] lock(&rq->__lock); [ 380.461719][ T9506] lock(&p->pi_lock); [ 380.461725][ T9506] lock(&rq->__lock); [ 380.461732][ T9506] lock(console_owner); [ 380.461738][ T9506] [ 380.461738][ T9506] *** DEADLOCK *** [ 380.461738][ T9506] [ 380.461740][ T9506] 6 locks held by syz.1.838/9506: [ 380.461745][ T9506] #0: ffffffff90403010 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 380.461769][ T9506] #1: ffffffff9035e7e8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xb10 [ 380.461797][ T9506] #2: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 380.461822][ T9506] #3: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0 [ 380.461845][ T9506] #4: ffffffff8e5b27c0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 380.461866][ T9506] #5: ffffffff8e5b2830 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 380.461890][ T9506] [ 380.461890][ T9506] stack backtrace: [ 380.461896][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.1.838 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 380.461908][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.461915][ T9506] Call Trace: [ 380.461919][ T9506] [ 380.461922][ T9506] dump_stack_lvl+0x116/0x1f0 [ 380.461940][ T9506] print_circular_bug+0x275/0x350 [ 380.461957][ T9506] check_noncircular+0x14c/0x170 [ 380.461974][ T9506] __lock_acquire+0x126f/0x1c90 [ 380.461985][ T9506] lock_acquire+0x179/0x350 [ 380.461994][ T9506] ? console_lock_spinning_enable+0x9f/0xd0 [ 380.462007][ T9506] ? console_lock_spinning_enable+0x88/0xd0 [ 380.462020][ T9506] console_lock_spinning_enable+0xb0/0xd0 [ 380.462032][ T9506] ? console_lock_spinning_enable+0x9f/0xd0 [ 380.462045][ T9506] console_flush_all+0x7aa/0xc60 [ 380.462058][ T9506] ? __pfx_console_flush_all+0x10/0x10 [ 380.462073][ T9506] ? is_printk_cpu_sync_owner+0x32/0x40 [ 380.462088][ T9506] console_unlock+0xd8/0x210 [ 380.462100][ T9506] ? __pfx_console_unlock+0x10/0x10 [ 380.462112][ T9506] ? do_raw_spin_unlock+0xf0/0x230 [ 380.462124][ T9506] ? _printk+0xc7/0x100 [ 380.462132][ T9506] ? __down_trylock_console_sem+0xb0/0x140 [ 380.462144][ T9506] vprintk_emit+0x418/0x6d0 [ 380.462157][ T9506] ? __pfx_vprintk_emit+0x10/0x10 [ 380.462170][ T9506] ? __bad_area_nosemaphore+0x38b/0x690 [ 380.462186][ T9506] _printk+0xc7/0x100 [ 380.462195][ T9506] ? __pfx__printk+0x10/0x10 [ 380.462205][ T9506] ? __lock_acquire+0x622/0x1c90 [ 380.462214][ T9506] ? __pfx____ratelimit+0x10/0x10 [ 380.462230][ T9506] should_fail_ex+0x4e7/0x640 [ 380.462246][ T9506] copy_to_user_nofault+0xac/0x1c0 [ 380.462257][ T9506] bpf_probe_write_user+0xaf/0xf0 [ 380.462272][ T9506] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 380.462280][ T9506] bpf_trace_run4+0x249/0x5a0 [ 380.462290][ T9506] ? __pfx_bpf_trace_run4+0x10/0x10 [ 380.462302][ T9506] ? sched_clock_cpu+0x6c/0x530 [ 380.462317][ T9506] ? lock_acquire+0x179/0x350 [ 380.462326][ T9506] __bpf_trace_sched_switch+0x145/0x190 [ 380.462339][ T9506] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 380.462354][ T9506] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 380.462368][ T9506] __traceiter_sched_switch+0x6c/0xc0 [ 380.462379][ T9506] __schedule+0x1bee/0x5dd0 [ 380.462393][ T9506] ? __pfx_stack_trace_save+0x10/0x10 [ 380.462410][ T9506] ? __pfx___schedule+0x10/0x10 [ 380.462426][ T9506] ? find_held_lock+0x2b/0x80 [ 380.462438][ T9506] ? schedule+0x2d7/0x3a0 [ 380.462453][ T9506] schedule+0xe7/0x3a0 [ 380.462467][ T9506] schedule_preempt_disabled+0x13/0x30 [ 380.462483][ T9506] __mutex_lock+0x6c7/0xb90 [ 380.462493][ T9506] ? nl80211_pre_doit+0xb4/0xb10 [ 380.462509][ T9506] ? __pfx___mutex_lock+0x10/0x10 [ 380.462521][ T9506] ? __nla_parse+0x40/0x60 [ 380.462532][ T9506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 380.462548][ T9506] ? nl80211_pre_doit+0xb4/0xb10 [ 380.462563][ T9506] ? rtnl_lock+0x9/0x20 [ 380.462576][ T9506] nl80211_pre_doit+0xb4/0xb10 [ 380.462592][ T9506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 380.462608][ T9506] genl_family_rcv_msg_doit+0x1c3/0x2f0 [ 380.462622][ T9506] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 380.462638][ T9506] ? bpf_lsm_capable+0x9/0x10 [ 380.462651][ T9506] ? security_capable+0x7e/0x260 [ 380.462670][ T9506] ? ns_capable+0xd7/0x110 [ 380.462683][ T9506] genl_rcv_msg+0x55c/0x800 [ 380.462696][ T9506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.462710][ T9506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 380.462726][ T9506] ? __pfx_nl80211_authenticate+0x10/0x10 [ 380.462737][ T9506] ? __pfx_nl80211_post_doit+0x10/0x10 [ 380.462756][ T9506] netlink_rcv_skb+0x155/0x420 [ 380.462767][ T9506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.462781][ T9506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.462798][ T9506] ? netlink_deliver_tap+0x1ae/0xd30 [ 380.462810][ T9506] genl_rcv+0x28/0x40 [ 380.462822][ T9506] netlink_unicast+0x58d/0x850 [ 380.462834][ T9506] ? __pfx_netlink_unicast+0x10/0x10 [ 380.462847][ T9506] netlink_sendmsg+0x8d1/0xdd0 [ 380.462859][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.462873][ T9506] ____sys_sendmsg+0xa95/0xc70 [ 380.462885][ T9506] ? copy_msghdr_from_user+0x10a/0x160 [ 380.462902][ T9506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.462917][ T9506] ___sys_sendmsg+0x134/0x1d0 [ 380.462933][ T9506] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.462948][ T9506] ? __lock_acquire+0x622/0x1c90 [ 380.462964][ T9506] __sys_sendmsg+0x16d/0x220 [ 380.462973][ T9506] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.462986][ T9506] do_syscall_64+0xcd/0x4c0 [ 380.462996][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.463006][ T9506] RIP: 0033:0x7f249d98e9a9 [ 380.463015][ T9506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.463025][ T9506] RSP: 002b:00007f249e886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.463035][ T9506] RAX: ffffffffffffffda RBX: 00007f249dbb5fa0 RCX: 00007f249d98e9a9 [ 380.463042][ T9506] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 380.463048][ T9506] RBP: 00007f249e886090 R08: 0000000000000000 R09: 0000000000000000 [ 380.463054][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.463060][ T9506] R13: 0000000000000000 R14: 00007f249dbb5fa0 R15: 00007ffca062e098 [ 380.463069][ T9506] [ 381.813412][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.1.838 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 381.813428][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.813435][ T9506] Call Trace: [ 381.813441][ T9506] [ 381.813446][ T9506] dump_stack_lvl+0x116/0x1f0 [ 381.813469][ T9506] should_fail_ex+0x512/0x640 [ 381.813488][ T9506] copy_to_user_nofault+0xac/0x1c0 [ 381.813500][ T9506] bpf_probe_write_user+0xaf/0xf0 [ 381.813518][ T9506] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 381.813527][ T9506] bpf_trace_run4+0x249/0x5a0 [ 381.813538][ T9506] ? __pfx_bpf_trace_run4+0x10/0x10 [ 381.813549][ T9506] ? sched_clock_cpu+0x6c/0x530 [ 381.813565][ T9506] ? lock_acquire+0x179/0x350 [ 381.813575][ T9506] __bpf_trace_sched_switch+0x145/0x190 [ 381.813590][ T9506] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 381.813604][ T9506] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 381.813618][ T9506] __traceiter_sched_switch+0x6c/0xc0 [ 381.813631][ T9506] __schedule+0x1bee/0x5dd0 [ 381.813646][ T9506] ? __pfx_stack_trace_save+0x10/0x10 [ 381.813664][ T9506] ? __pfx___schedule+0x10/0x10 [ 381.813680][ T9506] ? find_held_lock+0x2b/0x80 [ 381.813696][ T9506] ? schedule+0x2d7/0x3a0 [ 381.813711][ T9506] schedule+0xe7/0x3a0 [ 381.813725][ T9506] schedule_preempt_disabled+0x13/0x30 [ 381.813741][ T9506] __mutex_lock+0x6c7/0xb90 [ 381.813751][ T9506] ? nl80211_pre_doit+0xb4/0xb10 [ 381.813769][ T9506] ? __pfx___mutex_lock+0x10/0x10 [ 381.813781][ T9506] ? __nla_parse+0x40/0x60 [ 381.813793][ T9506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 381.813808][ T9506] ? nl80211_pre_doit+0xb4/0xb10 [ 381.813824][ T9506] ? rtnl_lock+0x9/0x20 [ 381.813836][ T9506] nl80211_pre_doit+0xb4/0xb10 [ 381.813853][ T9506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 381.813869][ T9506] genl_family_rcv_msg_doit+0x1c3/0x2f0 [ 381.813884][ T9506] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 381.813900][ T9506] ? bpf_lsm_capable+0x9/0x10 [ 381.813913][ T9506] ? security_capable+0x7e/0x260 [ 381.813928][ T9506] ? ns_capable+0xd7/0x110 [ 381.813940][ T9506] genl_rcv_msg+0x55c/0x800 [ 381.813954][ T9506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.813967][ T9506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 381.813983][ T9506] ? __pfx_nl80211_authenticate+0x10/0x10 [ 381.813995][ T9506] ? __pfx_nl80211_post_doit+0x10/0x10 [ 381.814013][ T9506] netlink_rcv_skb+0x155/0x420 [ 381.814026][ T9506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.814039][ T9506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.814053][ T9506] ? netlink_deliver_tap+0x1ae/0xd30 [ 381.814064][ T9506] genl_rcv+0x28/0x40 [ 381.814076][ T9506] netlink_unicast+0x58d/0x850 [ 381.814088][ T9506] ? __pfx_netlink_unicast+0x10/0x10 [ 381.814101][ T9506] netlink_sendmsg+0x8d1/0xdd0 [ 381.814114][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.814128][ T9506] ____sys_sendmsg+0xa95/0xc70 [ 381.814142][ T9506] ? copy_msghdr_from_user+0x10a/0x160 [ 381.814158][ T9506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.814173][ T9506] ___sys_sendmsg+0x134/0x1d0 [ 381.814189][ T9506] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.814205][ T9506] ? __lock_acquire+0x622/0x1c90 [ 381.814220][ T9506] __sys_sendmsg+0x16d/0x220 [ 381.814230][ T9506] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.814242][ T9506] do_syscall_64+0xcd/0x4c0 [ 381.814254][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.814266][ T9506] RIP: 0033:0x7f249d98e9a9 [ 381.814275][ T9506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.814286][ T9506] RSP: 002b:00007f249e886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.814297][ T9506] RAX: ffffffffffffffda RBX: 00007f249dbb5fa0 RCX: 00007f249d98e9a9 [ 381.814303][ T9506] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 381.814309][ T9506] RBP: 00007f249e886090 R08: 0000000000000000 R09: 0000000000000000 [ 381.814315][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.814321][ T9506] R13: 0000000000000000 R14: 00007f249dbb5fa0 R15: 00007ffca062e098 [ 381.814330][ T9506] [ 382.289071][ T9484] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.300830][ T9484] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.311932][ T9484] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.321465][ T9484] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.341076][ T9484] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.350067][ T9484] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.358919][ T9484] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.367947][ T9484] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.414953][ T9474] vlan3: entered allmulticast mode [ 382.420515][ T9474] bridge1: port 2(vlan3) entered blocking state [ 382.427130][ T9474] bridge1: port 2(vlan3) entered disabled state [ 382.435636][ T9474] vlan3: entered promiscuous mode [ 382.440712][ T9474] veth1: entered promiscuous mode