last executing test programs: 5m25.675333945s ago: executing program 1 (id=590): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080), 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 5m25.646511898s ago: executing program 1 (id=592): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) dup(r0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m25.564227665s ago: executing program 1 (id=593): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) 5m25.501981907s ago: executing program 1 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x9], 0x0, 0xc, 0x1, 0x1}}, 0x40) 5m25.363655262s ago: executing program 1 (id=597): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) 5m25.16820892s ago: executing program 1 (id=599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) r1 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ffffffffffffffe}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000200)=[{&(0x7f00000004c0)="c7", 0x7fec}], 0x1, 0x8, 0x9, 0x17) 5m9.765326707s ago: executing program 32 (id=599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) r1 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ffffffffffffffe}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000200)=[{&(0x7f00000004c0)="c7", 0x7fec}], 0x1, 0x8, 0x9, 0x17) 2m33.277888721s ago: executing program 0 (id=1492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xd85, &(0x7f0000000780)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0xd4f, 0x3a, 0xff, @local, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xb, 0x5, "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"}}}}}}, 0x0) 2m32.559115244s ago: executing program 0 (id=1494): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad04, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x9, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000400000000001400000000000000290000000b00000000000013000000001400000000000000290000000b0000000000ffff00000002200000000000000029000000370000006c0000000000000005020010000000001400000000000000290000000b000000fffffffd00000000480000000000000029000000390000001d06010000000000001f000000000000000000000000000100000000000000000000000000000001fc01000000"], 0xf0}}], 0x2, 0x0) 2m32.435392961s ago: executing program 0 (id=1497): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$vbi(0x0, 0x0, 0x2) getrlimit(0x1, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioperm(0x0, 0x25a, 0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m30.735952177s ago: executing program 0 (id=1504): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_unix(&(0x7f00000000c0)='\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4044, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=unix']) 2m30.498264202s ago: executing program 0 (id=1505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xd85, &(0x7f0000000780)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0xd4f, 0x3a, 0xff, @local, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xb, 0x5, "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"}}}}}}, 0x0) 2m30.402250903s ago: executing program 0 (id=1506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) msgget(0x1, 0x2b0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='svc_process\x00', r6, 0x0, 0x101}, 0x18) sync() 2m15.336037305s ago: executing program 33 (id=1506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) msgget(0x1, 0x2b0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='svc_process\x00', r6, 0x0, 0x101}, 0x18) sync() 14.214025959s ago: executing program 5 (id=1999): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x230080, 0x0) connect$nfc_raw(r0, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @empty}, &(0x7f0000000300)=0xc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x40000c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='%\x00', &(0x7f00000004c0)="e09742c70a83", 0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 13.230997344s ago: executing program 5 (id=2002): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x140) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)={[{@size={'size', 0x3d, [0x25]}}]}) 8.675932237s ago: executing program 5 (id=2014): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x5}, 0x40000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000001bc0)={0x1, 0x2}) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3f000000010000", 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000001840)='./file0\x00', 0x21) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0xff) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @loopback={0xff00000000000000}, 0x400}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT=r3, @ANYRES8=r4, @ANYRES8=r1], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x57, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, 0x0, 0x0) listen(r7, 0xa) 8.473973799s ago: executing program 2 (id=2015): syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="038cc2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f000001ac1414aa00186371ae9b1c032dd5e026741c080b01c8fdc414a02cf8b02d265cc013f776a3f1a6b7f8c1bad2ab0581ce0e722e934f22961f0551186e1ee5020e8ad8e6cb61f4b5f7fa7e16e81681ab97890c69"], 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) sendfile(r0, r2, &(0x7f00000001c0)=0x2, 0x0) time(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x7, 0x3}) r6 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x7fff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x78, 0x0, &(0x7f0000000540)=[@free_buffer={0x40086303, r6}, @exit_looper, @enter_looper, @increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000003c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x76a]}, 0x8) ppoll(&(0x7f0000000700)=[{r7, 0xa202}], 0x1, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) close$binfmt(r7) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xbed0) fcntl$getflags(r7, 0xb) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) lseek(r8, 0x1000, 0x1) 7.203210438s ago: executing program 3 (id=2017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x4c02, &(0x7f0000000240)={0x0, 0x417d, 0x40, 0x8001002, 0x3d5}) r2 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x43, 0x32344d59, 0x0, 0xfffffffd, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="050027bd700000a668bc25ef288195c062ae860000000600000008000300", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x6004855) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x9, 0xff, 0x9, 0x7}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 6.660211957s ago: executing program 5 (id=2018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e23, 0x6, @local}}}, &(0x7f00000002c0)=0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x1f, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r6, 0x3841b273) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe2$9p(&(0x7f0000000000), 0x80000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000080000000100000001380400", @ANYRES32, @ANYBLOB="000000ecff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000009c5fd827ef257a397a", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000630000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_tgsigqueueinfo(0x0, 0x0, 0x36, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 6.571962776s ago: executing program 6 (id=2019): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000800)="ad76ce7c11976b59315952ccedbd23e49ef8ffbb1f39fb00ae77600c1ec0e988944663f06c8890d6851933c633b9114eb2a191aeb95fb76967c9a8e0d99b13cadcae771ecca7c6304ebf05e36b20b01d828c02c22e80a2f18855d3e02107c6e0044f09ea1338e614a71ae5cce36f9d9e8d413f78cd7a6426a05178c18a1be27227df5a075c6e6365109996d64a10a6f72bd44d6dcd99a4ded72c6954722caa23263b5d2259cb7ad89b521b8b6f00c6789905f2851a49cf98f6bd65255c990f77e2f9bf7d", &(0x7f00000011c0)=""/4096, &(0x7f0000000900)="45c2452d6f8ba31386dca30325f207b4013096e87a322284f6f24d5714589b4045a4e7f3eb55afb1091f723dd12aa2bd730f50fddb8bacb3776c501ac0ebd79aff35c18eb979d3af4ae3bd11d132a9065512ef0c53abf5458cd4f012fc468100f0e642c3493f8cc76d0fb28659b4642c04837f3648a142e3dd383864082ec45461e9b570e87e8d12816c833cd2a577cac8e8e6e51227423ba35af89b42d1e74874a66f3e085bc670", 0x0, 0x40, r1, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x4000000}}, 0x1c) 6.006886226s ago: executing program 3 (id=2020): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f0000001940)) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$usbfs(0x0, 0x723, 0x1b3442) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) socket$kcm(0x29, 0x5, 0x0) read$watch_queue(r3, 0x0, 0x0) 5.348251467s ago: executing program 6 (id=2021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x2, 0x3, 0x6) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x10, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0xb277, 0x2000000800000000, 0x0, 0x0) 4.642260783s ago: executing program 5 (id=2022): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000e00"], 0x10b8}, 0x8000) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {0x100}, 0x0, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], [0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r2 = dup(r0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x6) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x7, 0x7, 0x2b, 0x180, 0x4, 0x10, 0xf1, 0x4f, 0x7fffffffffffe, 0x2, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6erspan0\x00'}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0xffffffffffffffa4, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x4, 0x3, 0x0, 0xfffffffffffffc00], 0x2000, 0x101302}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xfd, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0xa, 0xe, 0x5a, 0x81, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x2}, {0x6, 0x1005, 0x9, 0xa, 0x6, 0x1, 0xf8, 0x53, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x2442}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001680)=""/228, 0xe4}], 0x1}, 0x6}], 0x1, 0x10120, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x84, 0x61, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26}, 0x28) 4.632354619s ago: executing program 3 (id=2023): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), 0x0}, 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, 0x0, 0x4081) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) read$watch_queue(r4, 0x0, 0x0) 4.534182147s ago: executing program 2 (id=2024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e23, 0x6, @local}}}, &(0x7f00000002c0)=0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x1f, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r6, 0x3841b273) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008000000000039c5", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe2$9p(&(0x7f0000000000), 0x80000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000080000000100000001380400", @ANYRES32, @ANYBLOB="000000ecff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000009c5fd827ef257a397a", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000630000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_tgsigqueueinfo(0x0, 0x0, 0x36, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 4.444045208s ago: executing program 6 (id=2025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r5, 0x8004af70, &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xb0000000, 0x6, 0x6, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x1e, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.77957844s ago: executing program 3 (id=2026): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_qrtr_TIOCINQ(r0, 0x8905, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @empty}], 0xffffffffffffff45) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r3, 0x0, 0x0, 0x4040880) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r6) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x47, 0x0, 0x0, 0x8, 0x400000000009, 0x8, 0x0, 0x3}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000029000b0027bd72000008000005000004f8f362d0f0f4e97098b58296bf8a62a43cd9c4d7041e7f8d620c59e6a34c3a394c5b82d9daf65dc664b43bada99fcabe26f1472a067cc5771b04"], 0x14}}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r8, 0x0, 0x0, 0x9) 3.281105709s ago: executing program 2 (id=2027): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x80, 0x8, 0x8, 0xa, 0x2, 0x81}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000500)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) creat(&(0x7f0000000000)='./file0\x00', 0x41) syz_genetlink_get_family_id$l2tp(0x0, r1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) 2.855946798s ago: executing program 6 (id=2028): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x10000, 0x2002) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x1000000}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x2000c000) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8041000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="ad33", 0x2}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000000002800400120008000a00", @ANYRES32=0x0, @ANYBLOB="140035007665746831000000000000000000000044002b8008000800", @ANYRES32, @ANYBLOB="180008"], 0x98}, 0x1, 0x0, 0x0, 0x24000804}, 0x10) 2.585488914s ago: executing program 4 (id=2029): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x15000000, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) 2.433512477s ago: executing program 2 (id=2030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a010400000000000000000a0000010900010073797a3100000000200004801c0001800b0001007470726f787902000c00028008000140000000000900020073797a3200000000140000001100010000000000000000000100000a50bc4cef5261338e32901b1ff79b9afeed8bdc51f89003f705c8af27575a48ef6aeb998cbd90112faf4c8645f11a27016eed6861a3cbc50cf9d69f557e88b8edc3d7fae973a8470799f4ea278f14272343888415aab2603de8ae390a6c043c64816ec922eb6d876e6a7a43778c7bd9e9f39d76de1e83017dcc342c185993ab22d5c4adaf8c72a695ee435009d9c944bb4dc96652693bbce417586a38ad8ffcfa0259d5c88aac2deea444cb7bee8d176ad9f56a2137a499317510dbba7b267ba8a63f309885af7a949b0bf457a0adf8cecc43ee070903229b4d17dd0ff1728b001cfee1ca5de45608098fba3a58b261359d460c294f20af3c0d94"], 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRES32=0x0], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x40) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) close_range(r2, r0, 0x0) 1.996225062s ago: executing program 4 (id=2031): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.879421285s ago: executing program 4 (id=2032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e23, 0x6, @local}}}, &(0x7f00000002c0)=0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x1f, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r6, 0x3841b273) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe2$9p(&(0x7f0000000000), 0x80000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000080000000100000001380400", @ANYRES32, @ANYBLOB="000000ecff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000009c5fd827ef257a397a", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000630000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_tgsigqueueinfo(0x0, 0x0, 0x36, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 1.590630504s ago: executing program 4 (id=2033): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, r0, 0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socket(0x10, 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) personality(0x4000000) r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$kcm(0x2, 0x1, 0x0) 1.348111063s ago: executing program 2 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f0000001940)) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$usbfs(0x0, 0x723, 0x1b3442) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) read$watch_queue(r3, 0x0, 0x0) 430.580542ms ago: executing program 5 (id=2035): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x98f, 0x2, 0x1, 0x7f, r5}, &(0x7f00000000c0)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f00000002c0)="6a754ff09d24710d7af5843e0127d16c2613447622adf56725710ecb240ce0d51b53f17548a2afbae4fda4d8518010fab691ebe758dd957618b325d3a71ed21c8ee821b77b472408404951385a45672c9dbe01513244bb71f44e33a1f07056d0ecccaaf7c392f1dd5f9c8a7f2863d16fa22f8a059ffaa9fd63429d6f1af4a02d59f81228a4dad43e83a1982300db2ac4ce8c3cd058adf10056ebd728e6e56d6b9641c546caf766746e2eb3625b084116e0b44baa4f79f173c35fc0daf822052b0fb220db35d090e860133bf273bef52a", 0xd0}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}, 0x840) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000540)) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) timer_create(0x3, &(0x7f00000006c0)={0x0, 0x25, 0x2, @thr={&(0x7f0000000580)="c889cc0b353458a52abe0d16f9824b8e2be0297c1b595fdcf5b90a50dc4a44d7b67d560d9ef75e6b1d93acf8b10f8c1c8a8f83629c2a6d4eb9647319797293df8a6cc4c594f3ded1af744bf0c67cabf5d08104c505482225e635ce10d4394fa776a3dd2c8a9371b5477446af018cc8d36c12daa68e4b1d451852a84c8a515bd0052ab87816938ab27f50c2ed", &(0x7f0000000640)="96a3a7ca6fc016b8766cc54437f2b86ec45cb877674b485c31844a161d9517237fd80a97ca5b646a08f82781269691f6b808b8ee4c9e691ae0f07f570a7c822e454a8467b1aa28c9df9fa965c3c5"}}, &(0x7f0000000700)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 430.016913ms ago: executing program 2 (id=2036): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) open(&(0x7f0000000140)='./file0\x00', 0x900, 0x8c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = dup(r3) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 429.862777ms ago: executing program 4 (id=2037): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000200180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 236.151915ms ago: executing program 3 (id=2038): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000380)={@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, 0x28f5c28f5c28f5c, 0x6, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 180.062487ms ago: executing program 6 (id=2039): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_TIOCINQ(r0, 0x8905, 0x0) 147.085603ms ago: executing program 3 (id=2040): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x200000000) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000004) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x41, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r8, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004940)=@delchain={0x1e88, 0x64, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6}, {0xe, 0xffff}, {0x0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1e5c, 0x2, [@TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_ACT={0x1de8, 0x1, [@m_police={0x56c, 0x15, 0x0, 0x0, {{0xb}, {0x470, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x6, 0x6, 0xefffffff, {0xf6, 0x1, 0x44ab, 0xb6, 0x400, 0x2}, {0x0, 0x2, 0x4a54, 0x800, 0x401, 0x8}, 0x1, 0x4, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0xe1, 0x77c, 0xffffff00, 0x9, 0x7, 0xe1d, 0x8f, 0x7, 0x4d11, 0xc8, 0x7, 0xd, 0x5, 0x4, 0xad, 0xcd3, 0xfff, 0x24000000, 0x5, 0x656, 0x8, 0x9, 0xb, 0x8, 0x1, 0x400, 0xc11, 0x8, 0x3, 0x3, 0xfffffffe, 0xfffffff7, 0x7, 0x3, 0x7, 0x4, 0x4, 0xd8, 0x80000001, 0x74f6, 0x8, 0x0, 0x0, 0x5, 0x2, 0x2, 0x9, 0xffff824a, 0x1, 0xe, 0xffffffff, 0xfffffff9, 0x3, 0x8, 0x3, 0xfffffff9, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd5d8, 0x2df, 0xffffffff, 0x4, 0xfffffff8, 0x8, 0x8, 0x4, 0x3, 0x200, 0x1, 0x1, 0x80000000, 0x7ff, 0x3, 0x2, 0x0, 0x80000000, 0x7e, 0xfab6, 0x5, 0x6, 0xfebf, 0x3, 0x45400000, 0xf5, 0x3, 0x3, 0x40, 0x3, 0xd97, 0x4, 0x10001, 0x7ff, 0x0, 0xe, 0xffffffff, 0x8, 0x401, 0x1, 0xfffffffe, 0xfffffffe, 0x80000001, 0x1, 0xfffffff9, 0x80, 0xffffffff, 0x5, 0x8, 0x9, 0xffffff80, 0x5, 0xfffffffa, 0x7, 0xfffffee8, 0x8, 0x4, 0xc, 0x9, 0x6, 0x7, 0x7ff, 0x0, 0x2, 0x4, 0x6, 0x5, 0x7, 0xc9, 0x4, 0x7, 0x1, 0x2, 0xfffffff8, 0x4, 0x200, 0xb, 0xbc57, 0x1, 0x5, 0x3, 0x10000, 0x36dc, 0x2, 0x0, 0x3, 0xfffffc01, 0x4, 0x5, 0xfffffa33, 0x8, 0x4, 0x7fff, 0x3, 0x7, 0x9, 0x5, 0x10000, 0x4957, 0x6, 0x8, 0xffffffff, 0x2, 0xc886, 0x7, 0x8, 0x9, 0x0, 0x10001, 0x2, 0x6, 0x5, 0x3, 0x1, 0x2, 0x1, 0xc6f, 0x5, 0x1, 0x9e1820bf, 0x2, 0xffff, 0x1c191755, 0x6, 0x8, 0x4, 0x7ff, 0x5, 0x5, 0x0, 0x0, 0x46, 0x9, 0x10001, 0x7fffffff, 0x4, 0x0, 0x4, 0x1, 0x8, 0x1, 0x8000000, 0x2, 0x401, 0x2, 0x4, 0x7fffffff, 0x7, 0x7f4, 0x1, 0x4, 0x3, 0x2, 0x0, 0x3, 0xe89, 0x41c, 0xffff0000, 0x9bf, 0xffff, 0x401, 0x1, 0x9, 0x2, 0x6, 0x1, 0xfffffffd, 0x2, 0xd, 0x0, 0x3, 0x8, 0x0, 0x2, 0x9, 0x2, 0x3, 0x7, 0x6, 0x7, 0x9, 0x3, 0x200, 0x4, 0x8, 0x3, 0x2, 0x8, 0x2, 0x3, 0x7, 0x400, 0x0, 0x0, 0x9]}]]}, {0xd4, 0x6, "607c956f7cef93d7a3cd2a054d59954e545e9a99e95c6a73487c4f49ccc4eeaa0e27028241f60e933bc21318be70431b3ee08b907b2d0a224bff7c8cc5958443764529507c0547f2336f1ccd0f67fb33f2f730566ce745254a6cba7bf0b6eec68513cf94748f7f02f6f925b0b488e30405491cb38861d6da855cadb9f280042a8aaf31a0862a21fd2db1dd90f553983758c51bcd60cd0e31ae089b93f728f100da9f845c69a7f77de0bad6699b5467d09f2e27d1fa118cba9eae92ef390c0cecc4b42fd5bb1ee745439c156ce7b5fd2a"}, {0xc, 0x7, {0x6dfb7ae9731b9c9c, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x74, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}]}, {0x3f, 0x6, "1d1536a8642168d40b42742f86f130d91d891d818f6464c1e922bcfefaf2c6020a683fb365d291cddc1a8c38f7237d2ba676297ac22a9a25a9112e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x19c, 0x19, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x660}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffc00, 0x3, 0x2, 0x4, 0xf4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1bab, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe61, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7f, 0x8000, 0x7, 0x7, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x197f, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0xaf26a8821264bbd6, 0x0, 0x34d16929}}]}, {0xe9, 0x6, "0ebab4e07802ea50ade010b2574b76873b16707efabf6f5547ec4ce081d4ec6ce03c93033bf0f12a92fdec3475bf21f1e5ce175e95ba9f726e4b9ef5c40682e7df66928eb57bd53c2eaa9d6347640102902fc73018aee0661b80adcbd452023bbd852c806f084d82eeb02c9d8f27990dfdcd13f4adb590ecff4c6f56e322b7e059810df0abaf63a9a203bf967b913c79b3b16fd3bae31a8bac5c6e79fcefa581bb15ecc9160a05e3415f38b75ace42fb807322a53a2865e9c760e746b78f421f4707c62f1b268382caddbdaa95c33524f5d86e7012637d44eaf21ab6e46eb7df5fe24bc08d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x110, 0x12, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0xdd, 0x6, "66c67a4cdffadeb75e59c99e607704ac97e8c843c20da6309b8bffb2d62bca9ca79228528af6c9560636eb6ad82ecef8607b77124d24047644ca5477d738d3362070a06eb0a4b56762c1950c333a185d3ffdd8724b7b7cfde720522a8137a1e77efb2a8ac6d9d053fbe63824a43447b352424bd47da8882492d8ef2bfd81a3d4beced44eb15d7d96d5a31b31df088ca53d6ead63793ce792fda469861dcbabee94f0e3c4a2358bcbfedbaee5aa236a65ebd3ed308880c8f945bb453c58e2411b16ec946b1ebff8ce438082f6298059b06cf6e4aab1a1eac823"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0x1fc, 0x1e, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7f, 0x20000000, 0x80000001, 0x4}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x7, 0x2, 0x401}, 0x0, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0xffffffffffffffff, 0x4fa2}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x0, 0x6, 0x2}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x4, 0x9, 0x8}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6f7, 0x0, 0x3, 0x9, 0xff}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x3, 0x5, 0x9, 0x80000000}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x8, 0x4, 0x7fff}, 0x3, r6}}]}, {0xd0, 0x6, "803419ed726441ba04e8f744909e336ee5487130fc05fae0750ec5d657c55421920f020ec95b54765bdacdba0b9865a3d570d0be1190c7dd051b506ef312ef032aa3640a2b7a8e7ce2b2e28d12a795a97488385745bc46e32f032e3f18172e97be4a75f9201634b8708d6c21f661637643d64313affb1883262e474e58471a6e9d5b6a24cb496c1036c55aa41e72e30fc2bb49620fe70099109890877a889e9cbd3e5dd1ce404a89821f99d9ba5cb3850a171834832e2c219ae32227b9b7b3a00ef455a2d90e266f6b396d06"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xf8, 0x8, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x85f, 0x10000006}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb58}}, @TCA_GACT_PARMS={0x18, 0x2, {0x18, 0x100, 0x5, 0x34, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x8, 0xffffffffffffffff, 0x3, 0x401}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1, 0x1, 0x9, 0x7}}]}, {0x69, 0x6, "2ae94bcb71d38c4d0a22596093aaae7367ccae200aa385d7b8904683c91ed67be21946afcc69788411defe35c074139f88dd28b363cb26cf40b0fcb50b4ff2c49ba9d7c493442038621fc868cdc4123a95ad5d58cc6aee5acc20c0018291ee51542a47181e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x1078, 0x14, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x10}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x86, 0x1, 0x3, 0x1}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x20000000, 0x6, 0x40}}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfaddc}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xdc, 0x14, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "37182095ac78ba0291971cce435304f7"}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x40}}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x41}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010100}, @TCA_CT_LABELS_MASK={0x14, 0x8, "56ed4f114d4d1a61a5f50c440000c478"}]}, {0x2e, 0x6, "ba3bc965ba9d4d5ae4e543d7c987ab8033091d351fb3d1e5d5cdafb65a790be069b2fa0286ebdbd440af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x110, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x100, 0x5, 0xc29c, 0x40}, 0x71e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x639, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcb, 0x3, 0x8, 0x1, 0xfffff7b5}, 0xff}}]}, {0x8a, 0x6, "7305b83c5173e7dc7aafe35f558c076d7a2d71b03bd16aa318291593ef8bd9f3f9b90c05f7e4860afdda44dd0359b58a458e6583fbdef95834c0ddb2ca64f335e0e9fa219196ea82a05470f41a6e6efe71eb6517531579c993ef1a67c95e34310097f113c8acdd38472aea5a939327e74c19c9be612008b0cdf6309793c9a5dc13f8064e247a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xdf54, 0x6, 0x9, 0x80000000}]}}, @TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xf4, 0x1, 0x6, 0x3}, {0x2, 0x7, 0x20, 0x7f}, {0x7fff, 0x7, 0xff, 0x2}, {0x95, 0xf, 0x7, 0x6}, {0xe9, 0x2b, 0x1, 0x9}]}}]}}]}, 0x1e88}}, 0x1000000) write$vhost_msg(r1, &(0x7f0000000340)={0x1, {&(0x7f0000003900)=""/4103, 0x1007, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f00000007c0)=""/175, 0xaf, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 138.944725ms ago: executing program 4 (id=2041): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000001d80)={0x12}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_vlan\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0xd4041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340)=r7, 0x12) timer_create(0x0, 0x0, 0x0) sched_getattr(r7, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r8, r8) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) 0s ago: executing program 6 (id=2042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) kernel console output (not intermixed with test programs): 6][T11075] dump_stack_lvl+0x16c/0x1f0 [ 320.251060][T11075] should_fail_ex+0x512/0x640 [ 320.251082][T11075] _copy_from_user+0x2e/0xd0 [ 320.251105][T11075] copy_msghdr_from_user+0x98/0x160 [ 320.251125][T11075] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 320.251148][T11075] ? __pfx__kstrtoull+0x10/0x10 [ 320.251180][T11075] ___sys_sendmsg+0xfe/0x1d0 [ 320.251200][T11075] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.251229][T11075] ? find_held_lock+0x2b/0x80 [ 320.251265][T11075] __sys_sendmmsg+0x200/0x420 [ 320.251286][T11075] ? __pfx___sys_sendmmsg+0x10/0x10 [ 320.251319][T11075] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 320.251348][T11075] ? fput+0x9b/0xd0 [ 320.251369][T11075] ? ksys_write+0x1ac/0x250 [ 320.251385][T11075] ? __pfx_ksys_write+0x10/0x10 [ 320.251405][T11075] __x64_sys_sendmmsg+0x9c/0x100 [ 320.251421][T11075] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.251440][T11075] do_syscall_64+0xcd/0x4c0 [ 320.251461][T11075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.251478][T11075] RIP: 0033:0x7f2b6598ebe9 [ 320.251492][T11075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.251509][T11075] RSP: 002b:00007f2b667cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 320.251526][T11075] RAX: ffffffffffffffda RBX: 00007f2b65bc6090 RCX: 00007f2b6598ebe9 [ 320.251537][T11075] RDX: 000000000000003b RSI: 0000200000001840 RDI: 0000000000000004 [ 320.251546][T11075] RBP: 00007f2b667cb090 R08: 0000000000000000 R09: 0000000000000000 [ 320.251557][T11075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.251567][T11075] R13: 00007f2b65bc6128 R14: 00007f2b65bc6090 R15: 00007fffa19497f8 [ 320.251590][T11075] [ 320.633930][T11082] netlink: 'syz.4.1627': attribute type 39 has an invalid length. [ 320.688222][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.711857][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.820386][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 320.900516][ T5929] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 321.030572][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 321.325269][ T5852] Bluetooth: hci6: command tx timeout [ 321.332136][ T10] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 321.358266][ T10] usb 4-1: config 0 has no interface number 0 [ 321.366755][ T10] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 321.380956][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 321.395181][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.417370][ T10] usb 4-1: Product: syz [ 321.437560][ T10] usb 4-1: Manufacturer: syz [ 321.469855][ T10] usb 4-1: SerialNumber: syz [ 321.477546][ T10] usb 4-1: config 0 descriptor?? [ 321.514497][ T10] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 322.120203][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 322.534088][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 322.558905][ T30] audit: type=1400 audit(1757064333.306:412): avc: denied { create } for pid=11093 comm="syz.5.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 322.579760][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 322.604837][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.617978][T11096] overlay: Unknown parameter 'dont_appraise' [ 322.632855][ T30] audit: type=1400 audit(1757064333.346:413): avc: denied { ioctl } for pid=11093 comm="syz.5.1632" path="socket:[35870]" dev="sockfs" ino=35870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.672648][ T24] usb 3-1: config 0 descriptor?? [ 322.705213][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 322.805940][ T30] audit: type=1400 audit(1757064333.556:414): avc: denied { bind } for pid=11098 comm="syz.6.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 322.869537][ T30] audit: type=1400 audit(1757064333.586:415): avc: denied { listen } for pid=11098 comm="syz.6.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 322.904122][ T10] usb 3-1: USB disconnect, device number 35 [ 322.924443][ T30] audit: type=1400 audit(1757064333.616:416): avc: denied { accept } for pid=11098 comm="syz.6.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 323.157113][ T30] audit: type=1400 audit(1757064333.906:417): avc: denied { ioctl } for pid=11102 comm="syz.6.1635" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 323.350263][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 323.500198][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 323.527693][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.572863][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 323.598109][ T24] usb 4-1: USB disconnect, device number 42 [ 323.642346][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.774470][ T10] usb 3-1: config 0 descriptor?? [ 323.794918][ T10] ldusb 3-1:0.0: Interrupt in endpoint not found [ 323.808858][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 323.927029][ T30] audit: type=1326 audit(1757064334.676:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.341369][ T10] usb 3-1: USB disconnect, device number 36 [ 324.363396][ T30] audit: type=1326 audit(1757064334.676:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.387642][ T30] audit: type=1326 audit(1757064334.676:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.412570][ T30] audit: type=1326 audit(1757064334.676:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.442510][ T30] audit: type=1326 audit(1757064334.676:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.473616][ T30] audit: type=1326 audit(1757064334.676:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.569296][ T30] audit: type=1326 audit(1757064334.676:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.600261][ T30] audit: type=1326 audit(1757064334.676:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.624613][ T30] audit: type=1326 audit(1757064334.676:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.649982][ T30] audit: type=1326 audit(1757064334.676:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 324.689012][ T30] audit: type=1326 audit(1757064334.676:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2298ebe9 code=0x7ffc0000 [ 325.269095][T11133] lo speed is unknown, defaulting to 1000 [ 325.646961][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 325.855339][T11136] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1645'. [ 325.914126][ T10] usb 6-1: config 0 has no interfaces? [ 326.012942][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 326.144625][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.327908][ T10] usb 6-1: config 0 descriptor?? [ 326.373410][T11149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1649'. [ 326.523120][T11149] bond1 (unregistering): Released all slaves [ 326.585779][ T5958] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 326.827875][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 326.846342][ T5958] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 326.864148][ T5958] usb 4-1: config 0 has no interface number 0 [ 326.915693][ T5958] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.022414][ T5958] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 327.076644][ T5958] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 327.147590][ T5958] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.244054][ T5958] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 327.297986][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.545056][ T5958] usb 4-1: Product: syz [ 327.566353][ T5958] usb 4-1: Manufacturer: syz [ 327.586784][ T5958] usb 4-1: SerialNumber: syz [ 327.623615][ T5958] usb 4-1: config 0 descriptor?? [ 327.635681][ T5958] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 327.990308][ T5958] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 328.142228][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.155243][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.165035][ T5958] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 328.174232][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.184342][ T5958] usb 5-1: config 0 descriptor?? [ 328.395302][ T5958] usbhid 5-1:0.0: can't add hid device: -71 [ 328.402732][ T5958] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 328.413559][ T5958] usb 5-1: USB disconnect, device number 28 [ 329.295905][ T10] usb 4-1: USB disconnect, device number 43 [ 329.302142][ T5983] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 329.355991][ T5958] usb 6-1: USB disconnect, device number 17 [ 329.520203][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 329.561202][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.598104][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.707087][ T5983] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 329.776848][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.847126][ T5983] usb 5-1: config 0 descriptor?? [ 329.862585][ T5983] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 330.176725][ T5983] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 330.280351][ T5983] usb 5-1: USB disconnect, device number 29 [ 330.300889][ T5983] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 331.300085][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 331.329183][ T30] audit: type=1400 audit(1757064342.046:436): avc: denied { create } for pid=11201 comm="syz.3.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 332.404892][T11214] Mount JFS Failure: -22 [ 332.411187][T11214] jfs_mount failed w/return code = -22 [ 332.434080][T11214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1668'. [ 333.703903][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1672'. [ 334.304866][T11236] bond3 (unregistering): Released all slaves [ 334.430171][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 334.578393][T11251] can0: slcan on ttyS3. [ 334.603035][T11257] input: syz1 as /devices/virtual/input/input16 [ 334.644999][T11260] FAULT_INJECTION: forcing a failure. [ 334.644999][T11260] name failslab, interval 1, probability 0, space 0, times 0 [ 334.678491][T11260] CPU: 1 UID: 0 PID: 11260 Comm: syz.2.1676 Not tainted syzkaller #0 PREEMPT(full) [ 334.678515][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.678525][T11260] Call Trace: [ 334.678531][T11260] [ 334.678539][T11260] dump_stack_lvl+0x16c/0x1f0 [ 334.678563][T11260] should_fail_ex+0x512/0x640 [ 334.678582][T11260] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 334.678603][T11260] should_failslab+0xc2/0x120 [ 334.678624][T11260] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 334.678642][T11260] ? __alloc_skb+0x2b2/0x380 [ 334.678663][T11260] __alloc_skb+0x2b2/0x380 [ 334.678680][T11260] ? __pfx___alloc_skb+0x10/0x10 [ 334.678699][T11260] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 334.678724][T11260] netlink_alloc_large_skb+0x69/0x130 [ 334.678746][T11260] netlink_sendmsg+0x6a1/0xdd0 [ 334.678771][T11260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.678800][T11260] ____sys_sendmsg+0xa95/0xc70 [ 334.678825][T11260] ? copy_msghdr_from_user+0x10a/0x160 [ 334.678844][T11260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.678878][T11260] ___sys_sendmsg+0x134/0x1d0 [ 334.678899][T11260] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.678949][T11260] __sys_sendmsg+0x16d/0x220 [ 334.678968][T11260] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.679003][T11260] do_syscall_64+0xcd/0x4c0 [ 334.679026][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.679043][T11260] RIP: 0033:0x7f794d18ebe9 [ 334.679057][T11260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.679075][T11260] RSP: 002b:00007f794df79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.679092][T11260] RAX: ffffffffffffffda RBX: 00007f794d3c5fa0 RCX: 00007f794d18ebe9 [ 334.679102][T11260] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 334.679112][T11260] RBP: 00007f794df79090 R08: 0000000000000000 R09: 0000000000000000 [ 334.679122][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.679135][T11260] R13: 00007f794d3c6038 R14: 00007f794d3c5fa0 R15: 00007ffdc24c2e98 [ 334.679157][T11260] [ 334.964699][ T30] audit: type=1400 audit(1757064345.706:437): avc: denied { create } for pid=11264 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 335.038939][ T10] usb 7-1: config 0 has no interfaces? [ 335.056509][ T30] audit: type=1400 audit(1757064345.706:438): avc: denied { read } for pid=11264 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 335.077187][ T30] audit: type=1400 audit(1757064345.776:439): avc: denied { ioctl } for pid=11264 comm="syz.2.1678" path="socket:[36155]" dev="sockfs" ino=36155 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 335.102173][ T30] audit: type=1400 audit(1757064345.786:440): avc: denied { create } for pid=11256 comm="syz.3.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 335.123582][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 335.151243][T11253] can0 (unregistered): slcan off ttyS3. [ 335.206919][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.234175][ T10] usb 7-1: config 0 descriptor?? [ 335.865403][T11283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1679'. [ 336.344822][T11286] Bluetooth: MGMT ver 1.23 [ 337.927029][T11312] FAULT_INJECTION: forcing a failure. [ 337.927029][T11312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.938513][ T913] usb 7-1: USB disconnect, device number 2 [ 337.986399][T11312] CPU: 0 UID: 0 PID: 11312 Comm: syz.2.1686 Not tainted syzkaller #0 PREEMPT(full) [ 337.986423][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.986434][T11312] Call Trace: [ 337.986440][T11312] [ 337.986447][T11312] dump_stack_lvl+0x16c/0x1f0 [ 337.986471][T11312] should_fail_ex+0x512/0x640 [ 337.986495][T11312] _copy_from_user+0x2e/0xd0 [ 337.986519][T11312] sctp_getsockopt+0x1547/0x6a40 [ 337.986545][T11312] ? find_held_lock+0x2b/0x80 [ 337.986566][T11312] ? __pfx_sctp_getsockopt+0x10/0x10 [ 337.986582][T11312] ? __up_read+0x1f8/0x750 [ 337.986594][T11312] ? __pfx___up_read+0x10/0x10 [ 337.986605][T11312] ? do_user_addr_fault+0x829/0x1370 [ 337.986620][T11312] ? do_user_addr_fault+0x843/0x1370 [ 337.986633][T11312] ? rcu_is_watching+0x12/0xc0 [ 337.986647][T11312] ? irqentry_exit+0x3b/0x90 [ 337.986659][T11312] ? lockdep_hardirqs_on+0x7c/0x110 [ 337.986676][T11312] ? rep_movs_alternative+0xf/0x90 [ 337.986694][T11312] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 337.986709][T11312] do_sock_getsockopt+0x34a/0x440 [ 337.986724][T11312] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 337.986738][T11312] ? __fget_files+0x204/0x3c0 [ 337.986757][T11312] __sys_getsockopt+0x12f/0x260 [ 337.986771][T11312] __x64_sys_getsockopt+0xbd/0x160 [ 337.986782][T11312] ? do_syscall_64+0x91/0x4c0 [ 337.986799][T11312] ? lockdep_hardirqs_on+0x7c/0x110 [ 337.986817][T11312] do_syscall_64+0xcd/0x4c0 [ 337.986838][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.986854][T11312] RIP: 0033:0x7f794d18ebe9 [ 337.986867][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.986884][T11312] RSP: 002b:00007f794df79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 337.986900][T11312] RAX: ffffffffffffffda RBX: 00007f794d3c5fa0 RCX: 00007f794d18ebe9 [ 337.986910][T11312] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000004 [ 337.986920][T11312] RBP: 00007f794df79090 R08: 0000200000000180 R09: 0000000000000000 [ 337.986930][T11312] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 337.986940][T11312] R13: 00007f794d3c6038 R14: 00007f794d3c5fa0 R15: 00007ffdc24c2e98 [ 337.986962][T11312] [ 338.515440][T11325] Mount JFS Failure: -22 [ 338.519791][T11325] jfs_mount failed w/return code = -22 [ 338.892206][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1687'. [ 338.901388][T11325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1690'. [ 339.108949][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1692'. [ 339.119722][T11335] bond1 (unregistering): Released all slaves [ 339.307513][T11343] bond2 (unregistering): Released all slaves [ 339.463155][T11359] FAULT_INJECTION: forcing a failure. [ 339.463155][T11359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.497943][T11359] CPU: 0 UID: 0 PID: 11359 Comm: syz.6.1695 Not tainted syzkaller #0 PREEMPT(full) [ 339.497968][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.497978][T11359] Call Trace: [ 339.497983][T11359] [ 339.497989][T11359] dump_stack_lvl+0x16c/0x1f0 [ 339.498012][T11359] should_fail_ex+0x512/0x640 [ 339.498034][T11359] _copy_from_iter+0x29f/0x1720 [ 339.498060][T11359] ? __pfx__copy_from_iter+0x10/0x10 [ 339.498081][T11359] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 339.498110][T11359] copy_page_from_iter+0xde/0x180 [ 339.498141][T11359] tun_build_skb.constprop.0+0x2e8/0x1500 [ 339.498174][T11359] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 339.498197][T11359] ? unwind_get_return_address+0x59/0xa0 [ 339.498216][T11359] ? arch_stack_walk+0xa6/0x100 [ 339.498250][T11359] ? _kstrtoull+0x145/0x200 [ 339.498266][T11359] ? __pfx__kstrtoull+0x10/0x10 [ 339.498283][T11359] tun_get_user+0x14ae/0x3ce0 [ 339.498318][T11359] ? __pfx_tun_get_user+0x10/0x10 [ 339.498343][T11359] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 339.498371][T11359] ? find_held_lock+0x2b/0x80 [ 339.498392][T11359] ? tun_get+0x191/0x370 [ 339.498418][T11359] tun_chr_write_iter+0xdc/0x210 [ 339.498443][T11359] vfs_write+0x7d3/0x11d0 [ 339.498462][T11359] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 339.498487][T11359] ? __pfx_vfs_write+0x10/0x10 [ 339.498502][T11359] ? find_held_lock+0x2b/0x80 [ 339.498539][T11359] ksys_write+0x12a/0x250 [ 339.498555][T11359] ? __pfx_ksys_write+0x10/0x10 [ 339.498580][T11359] do_syscall_64+0xcd/0x4c0 [ 339.498603][T11359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.498620][T11359] RIP: 0033:0x7f2e2298d69f [ 339.498634][T11359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 339.498649][T11359] RSP: 002b:00007f2e23815000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 339.498665][T11359] RAX: ffffffffffffffda RBX: 00007f2e22bc5fa0 RCX: 00007f2e2298d69f [ 339.498676][T11359] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 00000000000000c8 [ 339.498686][T11359] RBP: 00007f2e23815090 R08: 0000000000000000 R09: 0000000000000000 [ 339.498696][T11359] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 339.498705][T11359] R13: 00007f2e22bc6038 R14: 00007f2e22bc5fa0 R15: 00007fffa3babe38 [ 339.498729][T11359] [ 339.863452][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1697'. [ 339.875523][T11364] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.883674][T11364] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.595798][T11376] netlink: 'syz.5.1699': attribute type 39 has an invalid length. [ 340.740890][T11379] Mount JFS Failure: -22 [ 340.799692][T11379] jfs_mount failed w/return code = -22 [ 341.111417][T11379] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1700'. [ 341.160436][T11382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1701'. [ 341.263038][ T30] audit: type=1400 audit(1757064351.976:441): avc: denied { write } for pid=11389 comm="syz.3.1703" name="if_inet6" dev="proc" ino=4026532881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 341.310890][ T36] syzkaller0: tun_net_xmit 76 [ 341.320357][ T36] syzkaller0: tun_net_xmit 48 [ 341.340553][ T10] syzkaller0: tun_net_xmit 76 [ 343.347779][T11396] lo speed is unknown, defaulting to 1000 [ 343.663268][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 343.840683][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.337646][ T10] usb 6-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 344.346824][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.370958][ T10] usb 6-1: config 0 descriptor?? [ 344.671283][ T5915] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 344.689122][T11421] FAULT_INJECTION: forcing a failure. [ 344.689122][T11421] name failslab, interval 1, probability 0, space 0, times 0 [ 344.705648][T11421] CPU: 1 UID: 0 PID: 11421 Comm: syz.4.1712 Not tainted syzkaller #0 PREEMPT(full) [ 344.705673][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.705682][T11421] Call Trace: [ 344.705688][T11421] [ 344.705695][T11421] dump_stack_lvl+0x16c/0x1f0 [ 344.705718][T11421] should_fail_ex+0x512/0x640 [ 344.705736][T11421] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 344.705756][T11421] should_failslab+0xc2/0x120 [ 344.705775][T11421] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 344.705793][T11421] ? __alloc_skb+0x2b2/0x380 [ 344.705810][T11421] ? avc_has_perm+0x144/0x1f0 [ 344.705828][T11421] __alloc_skb+0x2b2/0x380 [ 344.705844][T11421] ? __pfx___alloc_skb+0x10/0x10 [ 344.705857][T11421] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 344.705877][T11421] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 344.705905][T11421] netlink_alloc_large_skb+0x69/0x130 [ 344.705925][T11421] netlink_sendmsg+0x6a1/0xdd0 [ 344.705949][T11421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.705978][T11421] ____sys_sendmsg+0xa95/0xc70 [ 344.706001][T11421] ? copy_msghdr_from_user+0x10a/0x160 [ 344.706020][T11421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.706054][T11421] ___sys_sendmsg+0x134/0x1d0 [ 344.706074][T11421] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.706122][T11421] __sys_sendmsg+0x16d/0x220 [ 344.706142][T11421] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.706176][T11421] do_syscall_64+0xcd/0x4c0 [ 344.706198][T11421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.706215][T11421] RIP: 0033:0x7f5db5d8ebe9 [ 344.706230][T11421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.706246][T11421] RSP: 002b:00007f5db3fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.706263][T11421] RAX: ffffffffffffffda RBX: 00007f5db5fc5fa0 RCX: 00007f5db5d8ebe9 [ 344.706274][T11421] RDX: 0000000000004000 RSI: 0000200000000dc0 RDI: 0000000000000004 [ 344.706284][T11421] RBP: 00007f5db3fee090 R08: 0000000000000000 R09: 0000000000000000 [ 344.706293][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.706303][T11421] R13: 00007f5db5fc6038 R14: 00007f5db5fc5fa0 R15: 00007ffe541fb398 [ 344.706325][T11421] [ 345.012815][ T10] smartjoyplus 0003:0925:0005.0007: hidraw0: USB HID v7f.ff Device [HID 0925:0005] on usb-dummy_hcd.5-1/input0 [ 345.033762][ T10] smartjoyplus 0003:0925:0005.0007: Force feedback for SmartJoy PLUS PS2/USB adapter [ 345.053481][ T30] audit: type=1400 audit(1757064355.756:442): avc: denied { setopt } for pid=11408 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 345.053594][ T5915] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 345.164784][T11431] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 345.178233][T11431] audit: out of memory in audit_log_start [ 345.180003][ T5915] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.313534][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 345.320950][ T5958] usb 6-1: USB disconnect, device number 18 [ 345.328662][ T5915] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 345.350083][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.659585][ T5915] usb 7-1: config 0 descriptor?? [ 346.103948][ T5915] lenovo 0003:17EF:60EE.0008: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.6-1/input0 [ 346.649479][ T5915] lenovo 0003:17EF:60EE.0008: Failed to switch middle button: -71 [ 346.666179][ T5915] lenovo 0003:17EF:60EE.0008: Fn-lock setting failed: -71 [ 346.697166][ T5915] lenovo 0003:17EF:60EE.0008: Sensitivity setting failed: -71 [ 346.764822][ T5915] usb 7-1: USB disconnect, device number 3 [ 346.929003][ T30] audit: type=1400 audit(1757064357.676:443): avc: denied { bind } for pid=11455 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.975822][ T30] audit: type=1400 audit(1757064357.706:444): avc: denied { write } for pid=11455 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 347.032587][ T12] syzkaller0: tun_net_xmit 76 [ 347.047501][ T12] syzkaller0: tun_net_xmit 48 [ 347.052861][T11461] Mount JFS Failure: -22 [ 347.060575][ T10] syzkaller0: tun_net_xmit 76 [ 347.065704][T11461] jfs_mount failed w/return code = -22 [ 347.072801][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1724'. [ 347.528736][T11466] netlink: 'syz.6.1725': attribute type 10 has an invalid length. [ 347.873560][ T30] audit: type=1400 audit(1757064358.586:445): avc: denied { mount } for pid=11465 comm="syz.6.1725" name="/" dev="autofs" ino=36537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 348.358006][T11465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.479102][T11466] bond0: (slave wlan1): Opening slave failed [ 349.659475][T11488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11488 comm=syz.5.1730 [ 349.813889][ T30] audit: type=1400 audit(1757064360.556:446): avc: denied { map } for pid=11485 comm="syz.5.1730" path="socket:[36565]" dev="sockfs" ino=36565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 350.320203][ T5929] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 350.361704][T11499] FAULT_INJECTION: forcing a failure. [ 350.361704][T11499] name failslab, interval 1, probability 0, space 0, times 0 [ 350.379417][T11499] CPU: 1 UID: 0 PID: 11499 Comm: syz.3.1734 Not tainted syzkaller #0 PREEMPT(full) [ 350.379443][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.379453][T11499] Call Trace: [ 350.379459][T11499] [ 350.379467][T11499] dump_stack_lvl+0x16c/0x1f0 [ 350.379491][T11499] should_fail_ex+0x512/0x640 [ 350.379511][T11499] ? fs_reclaim_acquire+0xae/0x150 [ 350.379536][T11499] ? tomoyo_encode2+0x100/0x3e0 [ 350.379560][T11499] should_failslab+0xc2/0x120 [ 350.379584][T11499] __kmalloc_noprof+0xd2/0x510 [ 350.379609][T11499] tomoyo_encode2+0x100/0x3e0 [ 350.379638][T11499] tomoyo_encode+0x29/0x50 [ 350.379662][T11499] tomoyo_realpath_from_path+0x18f/0x6e0 [ 350.379691][T11499] ? tomoyo_profile+0x47/0x60 [ 350.379710][T11499] tomoyo_path_number_perm+0x245/0x580 [ 350.379732][T11499] ? tomoyo_path_number_perm+0x237/0x580 [ 350.379756][T11499] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 350.379807][T11499] ? find_held_lock+0x2b/0x80 [ 350.379828][T11499] ? hook_file_ioctl_common+0x145/0x410 [ 350.379851][T11499] ? __fget_files+0x20e/0x3c0 [ 350.379876][T11499] security_file_ioctl+0x9b/0x240 [ 350.379903][T11499] __x64_sys_ioctl+0xb7/0x210 [ 350.379931][T11499] do_syscall_64+0xcd/0x4c0 [ 350.379954][T11499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.379972][T11499] RIP: 0033:0x7f90ec78ebe9 [ 350.379986][T11499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.380003][T11499] RSP: 002b:00007f90ed693038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.380026][T11499] RAX: ffffffffffffffda RBX: 00007f90ec9c5fa0 RCX: 00007f90ec78ebe9 [ 350.380037][T11499] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 350.380048][T11499] RBP: 00007f90ed693090 R08: 0000000000000000 R09: 0000000000000000 [ 350.380059][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.380070][T11499] R13: 00007f90ec9c6038 R14: 00007f90ec9c5fa0 R15: 00007ffd22e06b28 [ 350.380094][T11499] [ 350.591780][T11499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 350.797492][T11507] FAULT_INJECTION: forcing a failure. [ 350.797492][T11507] name failslab, interval 1, probability 0, space 0, times 0 [ 350.800321][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 350.837858][ T5929] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 350.844763][T11507] CPU: 0 UID: 0 PID: 11507 Comm: syz.4.1737 Not tainted syzkaller #0 PREEMPT(full) [ 350.844786][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.844795][T11507] Call Trace: [ 350.844800][T11507] [ 350.844806][T11507] dump_stack_lvl+0x16c/0x1f0 [ 350.844829][T11507] should_fail_ex+0x512/0x640 [ 350.844846][T11507] ? __kmalloc_noprof+0xbf/0x510 [ 350.844864][T11507] ? bpf_test_init.isra.0+0x9e/0x140 [ 350.844887][T11507] should_failslab+0xc2/0x120 [ 350.844905][T11507] __kmalloc_noprof+0xd2/0x510 [ 350.844926][T11507] bpf_test_init.isra.0+0x9e/0x140 [ 350.844952][T11507] bpf_prog_test_run_skb+0x245/0x2280 [ 350.844970][T11507] ? __fget_files+0x204/0x3c0 [ 350.844991][T11507] ? __fget_files+0x20e/0x3c0 [ 350.845007][T11507] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 350.845027][T11507] ? fput+0x9b/0xd0 [ 350.845048][T11507] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 350.845066][T11507] __sys_bpf+0x1050/0x4de0 [ 350.845086][T11507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.845106][T11507] ? __pfx___sys_bpf+0x10/0x10 [ 350.845124][T11507] ? htab_map_delete_elem+0x57f/0x7d0 [ 350.845147][T11507] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.845162][T11507] ? htab_map_delete_elem+0x499/0x7d0 [ 350.845188][T11507] ? __lock_acquire+0xb97/0x1ce0 [ 350.845223][T11507] ? find_held_lock+0x2b/0x80 [ 350.845240][T11507] ? __might_fault+0xe3/0x190 [ 350.845254][T11507] ? __might_fault+0xe3/0x190 [ 350.845267][T11507] ? __might_fault+0x13b/0x190 [ 350.845294][T11507] __x64_sys_bpf+0x78/0xc0 [ 350.845315][T11507] do_syscall_64+0xcd/0x4c0 [ 350.845334][T11507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.845350][T11507] RIP: 0033:0x7f5db5d8ebe9 [ 350.845363][T11507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.845378][T11507] RSP: 002b:00007f5db3fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.845394][T11507] RAX: ffffffffffffffda RBX: 00007f5db5fc5fa0 RCX: 00007f5db5d8ebe9 [ 350.845404][T11507] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 350.845413][T11507] RBP: 00007f5db3fee090 R08: 0000000000000000 R09: 0000000000000000 [ 350.845422][T11507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.845431][T11507] R13: 00007f5db5fc6038 R14: 00007f5db5fc5fa0 R15: 00007ffe541fb398 [ 350.845452][T11507] [ 351.080310][ T5915] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 351.132885][ T5929] usb 7-1: config 179 has no interface number 0 [ 351.139182][ T5929] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 351.167384][ T5929] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 351.179420][ T5929] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 351.191003][ T5929] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 351.201326][ T5929] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 351.216705][ T5929] usb 7-1: config 179 interface 65 has no altsetting 0 [ 351.231360][ T5929] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 351.242341][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.341909][ T5929] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input17 [ 351.380170][ T5915] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.416128][ T5915] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.454873][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.518995][ T5915] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 351.544107][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.735013][ T5915] usb 4-1: config 0 descriptor?? [ 351.847859][ T5929] usb 7-1: USB disconnect, device number 4 [ 351.853836][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 352.063883][ T13] syzkaller0: tun_net_xmit 76 [ 352.068725][ T13] syzkaller0: tun_net_xmit 48 [ 352.090410][ T913] syzkaller0: tun_net_xmit 76 [ 352.203772][ T5915] zeroplus 0003:0C12:0005.0009: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 352.223738][ T5915] zeroplus 0003:0C12:0005.0009: no inputs found [ 352.604584][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.613227][ T30] audit: type=1400 audit(1757064363.356:447): avc: denied { read append } for pid=11508 comm="syz.3.1738" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 352.673587][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.681863][ T30] audit: type=1400 audit(1757064363.356:448): avc: denied { ioctl open } for pid=11508 comm="syz.3.1738" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 352.911849][ T5983] usb 4-1: USB disconnect, device number 44 [ 353.019927][ T30] audit: type=1400 audit(1757064363.766:449): avc: denied { write } for pid=11546 comm="syz.3.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 354.313320][T11564] FAULT_INJECTION: forcing a failure. [ 354.313320][T11564] name failslab, interval 1, probability 0, space 0, times 0 [ 354.340197][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.2.1749 Not tainted syzkaller #0 PREEMPT(full) [ 354.340230][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.340240][T11564] Call Trace: [ 354.340245][T11564] [ 354.340252][T11564] dump_stack_lvl+0x16c/0x1f0 [ 354.340276][T11564] should_fail_ex+0x512/0x640 [ 354.340294][T11564] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 354.340315][T11564] should_failslab+0xc2/0x120 [ 354.340335][T11564] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 354.340353][T11564] ? sock_alloc_inode+0x25/0x1c0 [ 354.340377][T11564] ? __pfx_sock_alloc_inode+0x10/0x10 [ 354.340396][T11564] sock_alloc_inode+0x25/0x1c0 [ 354.340416][T11564] alloc_inode+0x61/0x240 [ 354.340439][T11564] sock_alloc+0x40/0x280 [ 354.340459][T11564] __sock_create+0xc1/0x8d0 [ 354.340486][T11564] __sys_socket+0x14d/0x260 [ 354.340509][T11564] ? __pfx___sys_socket+0x10/0x10 [ 354.340531][T11564] ? ksys_write+0x1ac/0x250 [ 354.340548][T11564] ? __pfx_ksys_write+0x10/0x10 [ 354.340570][T11564] __x64_sys_socket+0x72/0xb0 [ 354.340591][T11564] ? lockdep_hardirqs_on+0x7c/0x110 [ 354.340609][T11564] do_syscall_64+0xcd/0x4c0 [ 354.340630][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.340647][T11564] RIP: 0033:0x7f794d18ebe9 [ 354.340661][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.340676][T11564] RSP: 002b:00007f794df79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 354.340693][T11564] RAX: ffffffffffffffda RBX: 00007f794d3c5fa0 RCX: 00007f794d18ebe9 [ 354.340704][T11564] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 354.340713][T11564] RBP: 00007f794df79090 R08: 0000000000000000 R09: 0000000000000000 [ 354.340723][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.340733][T11564] R13: 00007f794d3c6038 R14: 00007f794d3c5fa0 R15: 00007ffdc24c2e98 [ 354.340756][T11564] [ 354.340764][T11564] socket: no more sockets [ 355.497510][ T30] audit: type=1400 audit(1757064366.246:450): avc: denied { bind } for pid=11573 comm="syz.6.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 355.662748][ T30] audit: type=1400 audit(1757064366.406:451): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 355.805143][T11580] FAULT_INJECTION: forcing a failure. [ 355.805143][T11580] name failslab, interval 1, probability 0, space 0, times 0 [ 355.818024][T11580] CPU: 0 UID: 0 PID: 11580 Comm: syz.3.1754 Not tainted syzkaller #0 PREEMPT(full) [ 355.818049][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.818059][T11580] Call Trace: [ 355.818065][T11580] [ 355.818071][T11580] dump_stack_lvl+0x16c/0x1f0 [ 355.818095][T11580] should_fail_ex+0x512/0x640 [ 355.818113][T11580] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 355.818132][T11580] should_failslab+0xc2/0x120 [ 355.818149][T11580] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 355.818165][T11580] ? __alloc_skb+0x2b2/0x380 [ 355.818184][T11580] __alloc_skb+0x2b2/0x380 [ 355.818199][T11580] ? __pfx___alloc_skb+0x10/0x10 [ 355.818217][T11580] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 355.818239][T11580] netlink_alloc_large_skb+0x69/0x130 [ 355.818258][T11580] netlink_sendmsg+0x6a1/0xdd0 [ 355.818280][T11580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.818308][T11580] ____sys_sendmsg+0xa95/0xc70 [ 355.818330][T11580] ? copy_msghdr_from_user+0x10a/0x160 [ 355.818348][T11580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.818380][T11580] ___sys_sendmsg+0x134/0x1d0 [ 355.818398][T11580] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.818445][T11580] __sys_sendmsg+0x16d/0x220 [ 355.818462][T11580] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.818493][T11580] do_syscall_64+0xcd/0x4c0 [ 355.818514][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.818530][T11580] RIP: 0033:0x7f90ec78ebe9 [ 355.818544][T11580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.818559][T11580] RSP: 002b:00007f90ed693038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.818574][T11580] RAX: ffffffffffffffda RBX: 00007f90ec9c5fa0 RCX: 00007f90ec78ebe9 [ 355.818584][T11580] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 355.818593][T11580] RBP: 00007f90ed693090 R08: 0000000000000000 R09: 0000000000000000 [ 355.818603][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.818612][T11580] R13: 00007f90ec9c6038 R14: 00007f90ec9c5fa0 R15: 00007ffd22e06b28 [ 355.818633][T11580] [ 356.450175][ T30] audit: type=1400 audit(1757064367.196:452): avc: denied { create } for pid=11585 comm="syz.3.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 356.537342][ T30] audit: type=1400 audit(1757064367.286:453): avc: denied { ioctl } for pid=11588 comm="syz.6.1757" path="socket:[37106]" dev="sockfs" ino=37106 ioctlcmd=0x6180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 356.574616][T11592] lo speed is unknown, defaulting to 1000 [ 356.813703][T11586] lo speed is unknown, defaulting to 1000 [ 357.014236][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 357.035164][T11616] FAULT_INJECTION: forcing a failure. [ 357.035164][T11616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.361108][T11616] CPU: 0 UID: 0 PID: 11616 Comm: syz.6.1764 Not tainted syzkaller #0 PREEMPT(full) [ 357.361126][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.361133][T11616] Call Trace: [ 357.361136][T11616] [ 357.361141][T11616] dump_stack_lvl+0x16c/0x1f0 [ 357.361157][T11616] should_fail_ex+0x512/0x640 [ 357.361171][T11616] _copy_from_user+0x2e/0xd0 [ 357.361188][T11616] copy_msghdr_from_user+0x98/0x160 [ 357.361201][T11616] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 357.361219][T11616] ___sys_sendmsg+0xfe/0x1d0 [ 357.361231][T11616] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.361259][T11616] __sys_sendmsg+0x16d/0x220 [ 357.361271][T11616] ? __pfx___sys_sendmsg+0x10/0x10 [ 357.361292][T11616] do_syscall_64+0xcd/0x4c0 [ 357.361305][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.361316][T11616] RIP: 0033:0x7f2e2298ebe9 [ 357.361325][T11616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.361335][T11616] RSP: 002b:00007f2e23815038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.361346][T11616] RAX: ffffffffffffffda RBX: 00007f2e22bc5fa0 RCX: 00007f2e2298ebe9 [ 357.361353][T11616] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 357.361359][T11616] RBP: 00007f2e23815090 R08: 0000000000000000 R09: 0000000000000000 [ 357.361365][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.361372][T11616] R13: 00007f2e22bc6038 R14: 00007f2e22bc5fa0 R15: 00007fffa3babe38 [ 357.361385][T11616] [ 357.906666][T11625] program syz.6.1767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.000760][T11626] syzkaller0: entered promiscuous mode [ 358.006246][T11626] syzkaller0: entered allmulticast mode [ 359.246683][T11641] Mount JFS Failure: -22 [ 359.256858][T11641] jfs_mount failed w/return code = -22 [ 359.264185][T11641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1771'. [ 359.610199][ T5983] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 359.690121][ T3509] syzkaller0: tun_net_xmit 76 [ 359.697802][ T3509] syzkaller0: tun_net_xmit 48 [ 359.710583][ T10] syzkaller0: tun_net_xmit 76 [ 359.753953][ T30] audit: type=1400 audit(1757064370.506:454): avc: denied { map } for pid=11648 comm="syz.4.1773" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 359.786106][ T5983] usb 3-1: Using ep0 maxpacket: 16 [ 359.797926][ T30] audit: type=1400 audit(1757064370.506:455): avc: denied { execute } for pid=11648 comm="syz.4.1773" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 359.826009][ T5983] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 359.835241][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.851446][ T5983] usb 3-1: config 0 descriptor?? [ 359.866982][ T5983] usb 3-1: interface 1 not found [ 360.084614][ T5958] usb 3-1: USB disconnect, device number 37 [ 360.739727][T11656] FAULT_INJECTION: forcing a failure. [ 360.739727][T11656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.754254][T11656] CPU: 1 UID: 0 PID: 11656 Comm: syz.2.1775 Not tainted syzkaller #0 PREEMPT(full) [ 360.754278][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.754287][T11656] Call Trace: [ 360.754292][T11656] [ 360.754299][T11656] dump_stack_lvl+0x16c/0x1f0 [ 360.754323][T11656] should_fail_ex+0x512/0x640 [ 360.754345][T11656] _copy_from_iter+0x29f/0x1720 [ 360.754373][T11656] ? __pfx__copy_from_iter+0x10/0x10 [ 360.754394][T11656] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 360.754424][T11656] copy_page_from_iter+0xde/0x180 [ 360.754446][T11656] tun_build_skb.constprop.0+0x2e8/0x1500 [ 360.754476][T11656] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 360.754498][T11656] ? unwind_get_return_address+0x59/0xa0 [ 360.754517][T11656] ? arch_stack_walk+0xa6/0x100 [ 360.754549][T11656] ? _kstrtoull+0x145/0x200 [ 360.754563][T11656] ? __pfx__kstrtoull+0x10/0x10 [ 360.754579][T11656] tun_get_user+0x14ae/0x3ce0 [ 360.754612][T11656] ? __pfx_tun_get_user+0x10/0x10 [ 360.754636][T11656] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 360.754662][T11656] ? find_held_lock+0x2b/0x80 [ 360.754683][T11656] ? tun_get+0x191/0x370 [ 360.754708][T11656] tun_chr_write_iter+0xdc/0x210 [ 360.754732][T11656] vfs_write+0x7d3/0x11d0 [ 360.754749][T11656] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 360.754774][T11656] ? __pfx_vfs_write+0x10/0x10 [ 360.754788][T11656] ? find_held_lock+0x2b/0x80 [ 360.754819][T11656] ksys_write+0x12a/0x250 [ 360.754834][T11656] ? __pfx_ksys_write+0x10/0x10 [ 360.754856][T11656] do_syscall_64+0xcd/0x4c0 [ 360.754876][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.754892][T11656] RIP: 0033:0x7f794d18d69f [ 360.754905][T11656] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 360.754920][T11656] RSP: 002b:00007f794df58000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 360.754936][T11656] RAX: ffffffffffffffda RBX: 00007f794d3c6090 RCX: 00007f794d18d69f [ 360.754945][T11656] RDX: 0000000000000066 RSI: 0000200000000080 RDI: 00000000000000c8 [ 360.754955][T11656] RBP: 00007f794df58090 R08: 0000000000000000 R09: 0000000000000000 [ 360.754964][T11656] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 360.754973][T11656] R13: 00007f794d3c6128 R14: 00007f794d3c6090 R15: 00007ffdc24c2e98 [ 360.754995][T11656] [ 360.989303][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.141639][T11662] input: syz1 as /devices/virtual/input/input18 [ 361.188850][T11660] bond1: entered promiscuous mode [ 361.310773][T11660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.376227][T11666] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 362.649472][T11682] netlink: 'syz.6.1783': attribute type 1 has an invalid length. [ 365.068202][T11682] bond2: entered promiscuous mode [ 365.109008][T11682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.204761][T11692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.268996][T11685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.291046][T11685] bond2: (slave bond3): making interface the new active one [ 365.298486][T11685] bond3: entered promiscuous mode [ 365.306906][T11685] bond2: (slave bond3): Enslaving as an active interface with an up link [ 365.517002][T11703] lo speed is unknown, defaulting to 1000 [ 366.698494][T11738] ieee802154 phy0 wpan0: encryption failed: -90 [ 366.866804][ T5929] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 367.180456][ T30] audit: type=1400 audit(1757064377.746:456): avc: denied { read write } for pid=11736 comm="syz.4.1796" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 367.243792][ T30] audit: type=1400 audit(1757064377.746:457): avc: denied { open } for pid=11736 comm="syz.4.1796" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 367.277041][T11747] ceph: No mds server is up or the cluster is laggy [ 367.293558][ T24] libceph: connect (1)[c::]:6789 error -97 [ 367.300379][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 367.358080][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.378701][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 367.457552][ T5929] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 367.887431][ T24] libceph: connect (1)[c::]:6789 error -97 [ 367.897359][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.906082][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 367.981587][ T5929] usb 3-1: config 0 descriptor?? [ 368.155063][T11760] FAULT_INJECTION: forcing a failure. [ 368.155063][T11760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.168864][T11760] CPU: 0 UID: 0 PID: 11760 Comm: syz.6.1800 Not tainted syzkaller #0 PREEMPT(full) [ 368.168889][T11760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.168899][T11760] Call Trace: [ 368.168904][T11760] [ 368.168911][T11760] dump_stack_lvl+0x16c/0x1f0 [ 368.168935][T11760] should_fail_ex+0x512/0x640 [ 368.168958][T11760] _copy_from_user+0x2e/0xd0 [ 368.168981][T11760] move_addr_to_kernel+0x65/0x170 [ 368.169009][T11760] __copy_msghdr+0x386/0x470 [ 368.169027][T11760] copy_msghdr_from_user+0xc1/0x160 [ 368.169045][T11760] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 368.169069][T11760] ? __pfx__kstrtoull+0x10/0x10 [ 368.169089][T11760] ___sys_sendmsg+0xfe/0x1d0 [ 368.169108][T11760] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.169139][T11760] ? find_held_lock+0x2b/0x80 [ 368.169177][T11760] __sys_sendmmsg+0x200/0x420 [ 368.169200][T11760] ? __pfx___sys_sendmmsg+0x10/0x10 [ 368.169227][T11760] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 368.169257][T11760] ? fput+0x9b/0xd0 [ 368.169280][T11760] ? ksys_write+0x1ac/0x250 [ 368.169297][T11760] ? __pfx_ksys_write+0x10/0x10 [ 368.169320][T11760] __x64_sys_sendmmsg+0x9c/0x100 [ 368.169338][T11760] ? lockdep_hardirqs_on+0x7c/0x110 [ 368.169356][T11760] do_syscall_64+0xcd/0x4c0 [ 368.169377][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.169395][T11760] RIP: 0033:0x7f2e2298ebe9 [ 368.169409][T11760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.169426][T11760] RSP: 002b:00007f2e23815038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 368.169443][T11760] RAX: ffffffffffffffda RBX: 00007f2e22bc5fa0 RCX: 00007f2e2298ebe9 [ 368.169454][T11760] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 368.169464][T11760] RBP: 00007f2e23815090 R08: 0000000000000000 R09: 0000000000000000 [ 368.169474][T11760] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 368.169484][T11760] R13: 00007f2e22bc6038 R14: 00007f2e22bc5fa0 R15: 00007fffa3babe38 [ 368.169508][T11760] [ 368.444542][ T30] audit: type=1400 audit(1757064379.186:458): avc: denied { connect } for pid=11729 comm="syz.2.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 369.239267][ T30] audit: type=1400 audit(1757064379.986:459): avc: denied { getopt } for pid=11765 comm="syz.3.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.820842][T11779] lo speed is unknown, defaulting to 1000 [ 372.601308][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 372.607299][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 372.810187][T11794] lo speed is unknown, defaulting to 1000 [ 373.008518][ T5929] usb 3-1: USB disconnect, device number 38 [ 373.087305][ T30] audit: type=1400 audit(1757064383.836:460): avc: denied { bind } for pid=11796 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.290338][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 373.490313][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 373.497037][ T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 373.515662][ T24] usb 7-1: config 179 has no interface number 0 [ 373.528295][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 373.552451][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 373.573242][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 373.592498][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 373.616391][ T24] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 373.658963][ T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 373.682082][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.698695][T11803] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 373.914927][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input19 [ 374.354880][ T24] usb 7-1: USB disconnect, device number 5 [ 374.360968][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 374.361015][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 374.969943][T11828] syzkaller0: entered promiscuous mode [ 374.988688][T11828] syzkaller0: entered allmulticast mode [ 375.030231][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 376.112705][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 376.125166][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.141615][ T24] usb 5-1: Product: syz [ 376.150125][ T24] usb 5-1: Manufacturer: syz [ 376.155276][ T24] usb 5-1: SerialNumber: syz [ 376.400234][ T30] audit: type=1400 audit(1757064387.146:461): avc: denied { write } for pid=11844 comm="syz.5.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.212989][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 377.439930][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 377.441937][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.460573][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 377.490133][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.490995][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 377.518005][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 377.530784][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.550026][ T9] usb 3-1: config 0 descriptor?? [ 377.556732][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 377.989187][ T9] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 378.008561][ T9] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 378.088131][ T9] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 378.136271][ T9] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted - nothing to read [ 378.159371][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.165951][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.372631][ T9] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 378.413118][T11853] 9pnet_virtio: no channels available for device [ 378.445416][ T9] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 378.491203][ T5983] usb 5-1: USB disconnect, device number 30 [ 378.498889][ T9] usb 3-1: USB disconnect, device number 39 [ 378.543453][T11868] fido_id[11868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 378.546345][ T9] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 379.589417][T11883] FAULT_INJECTION: forcing a failure. [ 379.589417][T11883] name failslab, interval 1, probability 0, space 0, times 0 [ 379.619571][T11883] CPU: 1 UID: 0 PID: 11883 Comm: syz.2.1835 Not tainted syzkaller #0 PREEMPT(full) [ 379.619597][T11883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.619607][T11883] Call Trace: [ 379.619612][T11883] [ 379.619618][T11883] dump_stack_lvl+0x16c/0x1f0 [ 379.619640][T11883] should_fail_ex+0x512/0x640 [ 379.619657][T11883] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 379.619678][T11883] should_failslab+0xc2/0x120 [ 379.619696][T11883] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 379.619712][T11883] ? __alloc_skb+0x2b2/0x380 [ 379.619731][T11883] __alloc_skb+0x2b2/0x380 [ 379.619746][T11883] ? __pfx___alloc_skb+0x10/0x10 [ 379.619764][T11883] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 379.619787][T11883] netlink_alloc_large_skb+0x69/0x130 [ 379.619808][T11883] netlink_sendmsg+0x6a1/0xdd0 [ 379.619830][T11883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.619858][T11883] ____sys_sendmsg+0xa95/0xc70 [ 379.619880][T11883] ? copy_msghdr_from_user+0x10a/0x160 [ 379.619897][T11883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.619930][T11883] ___sys_sendmsg+0x134/0x1d0 [ 379.619948][T11883] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.620002][T11883] __sys_sendmsg+0x16d/0x220 [ 379.620020][T11883] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.620053][T11883] do_syscall_64+0xcd/0x4c0 [ 379.620077][T11883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.620094][T11883] RIP: 0033:0x7f794d18ebe9 [ 379.620109][T11883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.620125][T11883] RSP: 002b:00007f794df79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.620140][T11883] RAX: ffffffffffffffda RBX: 00007f794d3c5fa0 RCX: 00007f794d18ebe9 [ 379.620151][T11883] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 379.620161][T11883] RBP: 00007f794df79090 R08: 0000000000000000 R09: 0000000000000000 [ 379.620170][T11883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.620180][T11883] R13: 00007f794d3c6038 R14: 00007f794d3c5fa0 R15: 00007ffdc24c2e98 [ 379.620202][T11883] [ 379.833823][T11885] Mount JFS Failure: -22 [ 379.838094][T11885] jfs_mount failed w/return code = -22 [ 379.845408][T11885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1836'. [ 380.104089][ T30] audit: type=1400 audit(1757064390.856:462): avc: denied { bind } for pid=11888 comm="syz.2.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 380.355816][T11856] lo speed is unknown, defaulting to 1000 [ 383.074768][T11919] syzkaller0: entered promiscuous mode [ 383.130281][T11919] syzkaller0: entered allmulticast mode [ 383.797006][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 383.824906][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 383.881152][T11935] vxfs: WRONG superblock magic 00000000 at 1 [ 383.887546][T11935] vxfs: WRONG superblock magic 00000000 at 8 [ 383.893649][T11935] vxfs: can't find superblock. [ 384.371750][T11927] ceph: No mds server is up or the cluster is laggy [ 384.385563][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 384.430424][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 384.769216][T11943] Mount JFS Failure: -22 [ 384.807588][T11943] jfs_mount failed w/return code = -22 [ 384.862739][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1853'. [ 384.872400][T11943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1854'. [ 384.892721][T11945] Mount JFS Failure: -22 [ 384.896979][T11945] jfs_mount failed w/return code = -22 [ 386.091209][T11955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.117312][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 387.807211][ T9] usb 6-1: config 0 has no interfaces? [ 387.832096][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 387.870356][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.919885][ T9] usb 6-1: config 0 descriptor?? [ 391.874931][ T5929] usb 6-1: USB disconnect, device number 19 [ 392.049987][T11994] Mount JFS Failure: -22 [ 392.054656][T11994] jfs_mount failed w/return code = -22 [ 392.073921][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1865'. [ 393.076406][ T30] audit: type=1326 audit(1757064403.266:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 393.155068][ T30] audit: type=1326 audit(1757064403.266:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 393.178763][ T30] audit: type=1326 audit(1757064403.266:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 393.203884][ T30] audit: type=1326 audit(1757064403.276:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 393.227765][ T30] audit: type=1326 audit(1757064403.276:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 393.232560][T12005] FAULT_INJECTION: forcing a failure. [ 393.232560][T12005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.251271][ T30] audit: type=1326 audit(1757064403.276:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 393.288440][T12005] CPU: 0 UID: 0 PID: 12005 Comm: syz.4.1867 Not tainted syzkaller #0 PREEMPT(full) [ 393.288462][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.288472][T12005] Call Trace: [ 393.288478][T12005] [ 393.288485][T12005] dump_stack_lvl+0x16c/0x1f0 [ 393.288508][T12005] should_fail_ex+0x512/0x640 [ 393.288530][T12005] _copy_to_user+0x32/0xd0 [ 393.288553][T12005] simple_read_from_buffer+0xcb/0x170 [ 393.288572][T12005] proc_fail_nth_read+0x197/0x240 [ 393.288593][T12005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.288614][T12005] ? rw_verify_area+0xcf/0x6c0 [ 393.288639][T12005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.288658][T12005] vfs_read+0x1e1/0xcf0 [ 393.288678][T12005] ? __pfx___mutex_lock+0x10/0x10 [ 393.288697][T12005] ? __pfx_vfs_read+0x10/0x10 [ 393.288720][T12005] ? __fget_files+0x20e/0x3c0 [ 393.288746][T12005] ksys_read+0x12a/0x250 [ 393.288762][T12005] ? __pfx_ksys_read+0x10/0x10 [ 393.288778][T12005] ? fput+0x9b/0xd0 [ 393.288803][T12005] do_syscall_64+0xcd/0x4c0 [ 393.288825][T12005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.288841][T12005] RIP: 0033:0x7f5db5d8d5fc [ 393.288854][T12005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 393.288876][T12005] RSP: 002b:00007f5db3fcd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.288891][T12005] RAX: ffffffffffffffda RBX: 00007f5db5fc6090 RCX: 00007f5db5d8d5fc [ 393.288901][T12005] RDX: 000000000000000f RSI: 00007f5db3fcd0a0 RDI: 0000000000000007 [ 393.288910][T12005] RBP: 00007f5db3fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 393.288920][T12005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.288929][T12005] R13: 00007f5db5fc6128 R14: 00007f5db5fc6090 R15: 00007ffe541fb398 [ 393.288951][T12005] [ 393.471707][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.631517][ T30] audit: type=1326 audit(1757064403.276:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 393.654897][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.663782][ T30] audit: type=1326 audit(1757064403.276:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 393.687148][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.711792][ T30] audit: type=1326 audit(1757064403.276:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 393.735188][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.741391][ T30] audit: type=1326 audit(1757064403.476:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11997 comm="syz.3.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ec78ebe9 code=0x7ffc0000 [ 394.828922][T12017] FAULT_INJECTION: forcing a failure. [ 394.828922][T12017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.845521][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.4.1870 Not tainted syzkaller #0 PREEMPT(full) [ 394.845546][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.845556][T12017] Call Trace: [ 394.845562][T12017] [ 394.845569][T12017] dump_stack_lvl+0x16c/0x1f0 [ 394.845592][T12017] should_fail_ex+0x512/0x640 [ 394.845614][T12017] _copy_from_iter+0x29f/0x1720 [ 394.845638][T12017] ? __alloc_skb+0x200/0x380 [ 394.845655][T12017] ? __pfx__copy_from_iter+0x10/0x10 [ 394.845677][T12017] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 394.845704][T12017] netlink_sendmsg+0x829/0xdd0 [ 394.845727][T12017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.845755][T12017] sock_write_iter+0x4ff/0x5b0 [ 394.845778][T12017] ? __pfx_sock_write_iter+0x10/0x10 [ 394.845809][T12017] ? __pfx_file_has_perm+0x10/0x10 [ 394.845840][T12017] do_iter_readv_writev+0x65f/0x9e0 [ 394.845868][T12017] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 394.845893][T12017] ? selinux_file_permission+0x126/0x660 [ 394.845919][T12017] ? bpf_lsm_file_permission+0x9/0x10 [ 394.845938][T12017] ? security_file_permission+0x71/0x210 [ 394.845962][T12017] ? rw_verify_area+0xcf/0x6c0 [ 394.845988][T12017] vfs_writev+0x35f/0xde0 [ 394.846006][T12017] ? __lock_acquire+0x62e/0x1ce0 [ 394.846033][T12017] ? __pfx_vfs_writev+0x10/0x10 [ 394.846065][T12017] ? __fget_files+0x20e/0x3c0 [ 394.846081][T12017] ? __fget_files+0x150/0x3c0 [ 394.846104][T12017] ? do_writev+0x28c/0x340 [ 394.846116][T12017] do_writev+0x28c/0x340 [ 394.846131][T12017] ? __pfx_do_writev+0x10/0x10 [ 394.846153][T12017] do_syscall_64+0xcd/0x4c0 [ 394.846174][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.846190][T12017] RIP: 0033:0x7f5db5d8ebe9 [ 394.846204][T12017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.846220][T12017] RSP: 002b:00007f5db3fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 394.846236][T12017] RAX: ffffffffffffffda RBX: 00007f5db5fc5fa0 RCX: 00007f5db5d8ebe9 [ 394.846246][T12017] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 394.846257][T12017] RBP: 00007f5db3fee090 R08: 0000000000000000 R09: 0000000000000000 [ 394.846266][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.846276][T12017] R13: 00007f5db5fc6038 R14: 00007f5db5fc5fa0 R15: 00007ffe541fb398 [ 394.846298][T12017] [ 395.213194][T12022] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 395.219908][T12022] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 395.229138][T12022] vhci_hcd vhci_hcd.0: Device attached [ 395.440222][ T5983] vhci_hcd: vhci_device speed not set [ 395.510167][ T5983] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 395.713304][T12033] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1874'. [ 395.890175][ T5915] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 396.202624][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 396.211810][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.222478][ T5915] usb 4-1: config 0 descriptor?? [ 396.229493][ T5915] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 396.284736][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 396.327143][ T5915] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 396.840977][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 396.894645][ T5915] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 396.913416][ T5915] usb 4-1: media controller created [ 396.927842][ T5915] dvb-usb: bulk message failed: -22 (5/0) [ 397.054246][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 397.499078][ T9] usb 3-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 397.507696][ T5915] dvb-usb: MAC address reading failed. [ 397.520205][ T9] usb 3-1: Product: syz [ 397.524378][ T9] usb 3-1: Manufacturer: syz [ 397.527002][T12059] ceph: No mds server is up or the cluster is laggy [ 397.528958][ T9] usb 3-1: SerialNumber: syz [ 397.536051][ T24] libceph: connect (1)[c::]:6789 error -97 [ 397.540906][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.555058][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 397.654256][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 397.662940][ T9] usb 3-1: config 0 descriptor?? [ 397.765296][ T9] ch341 3-1:0.0: ch341-uart converter detected [ 397.780419][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 397.828938][ T5915] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 397.852502][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 397.910253][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 397.926595][ T5915] dvb-usb: schedule remote query interval to 100 msecs. [ 397.965280][ T9] usb 3-1: failed to receive control message: -121 [ 397.978492][ T5915] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 397.994392][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 398.057533][T12068] Mount JFS Failure: -22 [ 398.070518][ T24] usb 5-1: device descriptor read/64, error -71 [ 398.088370][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 398.098693][ T9] dvb-usb: error while querying for an remote control event. [ 398.101589][T12068] jfs_mount failed w/return code = -22 [ 398.125294][T12069] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1884'. [ 398.350286][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 398.358466][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 398.425237][ T9] dvb-usb: error while querying for an remote control event. [ 398.529577][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 398.529593][ T30] audit: type=1400 audit(1757064409.276:481): avc: denied { setopt } for pid=12074 comm="syz.5.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 398.555747][ T24] usb 5-1: device descriptor read/64, error -71 [ 398.563693][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 398.574593][ T9] dvb-usb: error while querying for an remote control event. [ 398.609892][T12077] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12077 comm=syz.6.1887 [ 398.611439][ T30] audit: type=1400 audit(1757064409.286:482): avc: denied { ioctl } for pid=12051 comm="syz.2.1879" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.685885][ T24] usb usb5-port1: attempt power cycle [ 398.723180][T12081] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 398.731115][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 398.731123][ T30] audit: type=1400 audit(1757064409.326:483): avc: denied { read write } for pid=12074 comm="syz.5.1886" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.738185][ T9] dvb-usb: error while querying for an remote control event. [ 398.770756][T12081] audit: out of memory in audit_log_start [ 398.782856][ T30] audit: type=1400 audit(1757064409.326:484): avc: denied { open } for pid=12074 comm="syz.5.1886" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.831286][ T5958] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 398.844619][ T30] audit: type=1400 audit(1757064409.346:485): avc: denied { name_bind } for pid=12072 comm="syz.6.1887" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 398.868511][ T30] audit: type=1400 audit(1757064409.346:486): avc: denied { node_bind } for pid=12072 comm="syz.6.1887" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 398.881888][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 398.889645][ T30] audit: type=1400 audit(1757064409.356:487): avc: denied { create } for pid=12072 comm="syz.6.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.917160][ T30] audit: type=1400 audit(1757064409.356:488): avc: denied { write } for pid=12072 comm="syz.6.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.981460][ T5958] usb 6-1: device descriptor read/64, error -71 [ 398.987855][ T9] dvb-usb: error while querying for an remote control event. [ 399.003394][T12084] netlink: 'syz.6.1890': attribute type 1 has an invalid length. [ 399.022347][T12084] bond4: entered promiscuous mode [ 399.027715][T12084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 399.040158][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 399.058905][T12084] 8021q: adding VLAN 0 to HW filter on device bond5 [ 399.067314][T12084] bond4: (slave bond5): making interface the new active one [ 399.074833][ T24] usb 5-1: device descriptor read/8, error -71 [ 399.078106][T12084] bond5: entered promiscuous mode [ 399.086708][T12084] bond4: (slave bond5): Enslaving as an active interface with an up link [ 399.101103][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 399.107128][ T9] dvb-usb: error while querying for an remote control event. [ 399.182175][T12089] netlink: 'syz.6.1891': attribute type 1 has an invalid length. [ 399.200594][T12089] bond6: entered promiscuous mode [ 399.206025][T12089] 8021q: adding VLAN 0 to HW filter on device bond6 [ 399.220641][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 399.226462][ T9] dvb-usb: error while querying for an remote control event. [ 399.238969][ T5929] usb 3-1: USB disconnect, device number 40 [ 399.245090][ T5958] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 399.255230][ T5929] ch341 3-1:0.0: device disconnected [ 399.333692][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 399.354938][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 399.385325][ T24] usb 5-1: device descriptor read/8, error -71 [ 399.395508][ T5958] usb 6-1: device descriptor read/64, error -71 [ 399.624712][ T9] dvb-usb: error while querying for an remote control event. [ 399.659689][T12089] 8021q: adding VLAN 0 to HW filter on device bond7 [ 399.669904][T12089] bond6: (slave bond7): making interface the new active one [ 399.696133][T12089] bond7: entered promiscuous mode [ 399.782920][ T5958] usb usb6-port1: attempt power cycle [ 399.788950][ T24] usb usb5-port1: unable to enumerate USB device [ 399.795816][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 399.802157][T12089] bond6: (slave bond7): Enslaving as an active interface with an up link [ 399.812612][ T9] dvb-usb: error while querying for an remote control event. [ 399.947520][ T24] libceph: connect (1)[c::]:6789 error -101 [ 399.986483][T12100] ceph: No mds server is up or the cluster is laggy [ 399.998188][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 400.160137][ T5958] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 400.246440][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 400.252447][ T9] dvb-usb: error while querying for an remote control event. [ 400.286150][ T24] libceph: connect (1)[c::]:6789 error -101 [ 400.299534][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 400.322203][ T5958] usb 6-1: device descriptor read/8, error -71 [ 400.365400][ T9] usb 4-1: USB disconnect, device number 45 [ 400.402129][T12023] vhci_hcd: connection reset by peer [ 400.429890][ T13] vhci_hcd: stop threads [ 400.443752][ T13] vhci_hcd: release socket [ 400.457102][ T13] vhci_hcd: disconnect device [ 400.471536][ T9] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 400.650218][ T5958] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 400.660701][ T5983] vhci_hcd: vhci_device speed not set [ 400.679787][T12112] Mount JFS Failure: -22 [ 400.687543][ T5958] usb 6-1: device descriptor read/8, error -71 [ 400.695937][T12112] jfs_mount failed w/return code = -22 [ 400.705831][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1896'. [ 400.924749][ T5958] usb usb6-port1: unable to enumerate USB device [ 400.990319][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 401.055627][ T9] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 401.196204][ T5958] IPVS: starting estimator thread 0... [ 401.205071][T12120] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 401.212249][T12122] IPVS: nq: FWM 3 0x00000003 - no destination available [ 401.257201][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.269005][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 401.278489][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 401.291882][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.311981][ T9] usb 4-1: config 0 descriptor?? [ 401.320361][T12121] IPVS: using max 43 ests per chain, 103200 per kthread [ 401.330914][ T24] usb 7-1: config 0 has no interfaces? [ 401.333609][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 401.336394][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 401.353520][ T5929] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 401.387298][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 401.392804][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.417051][ T24] usb 7-1: config 0 descriptor?? [ 401.455972][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 401.494976][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 401.510209][ T9] usb 4-1: media controller created [ 401.517774][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.530200][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 401.563188][ T5929] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 401.615534][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 401.696543][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.760459][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 401.783246][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 401.811602][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 401.818622][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 401.846079][ T5929] usb 5-1: Product: syz [ 401.850359][ T5929] usb 5-1: Manufacturer: syz [ 401.867471][ T5929] usb 5-1: SerialNumber: syz [ 401.970257][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 402.069528][ T10] dvb-usb: error while querying for an remote control event. [ 402.097146][ T5929] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 402.224952][ T5929] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 402.450323][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 402.883977][ T5929] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 402.889642][ T9] dvb-usb: error while querying for an remote control event. [ 403.112572][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 403.302482][ T9] dvb-usb: error while querying for an remote control event. [ 403.424500][ T9] usb 7-1: USB disconnect, device number 6 [ 403.472441][ T5994] usb 4-1: USB disconnect, device number 46 [ 403.526759][ T5994] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 403.550174][ T5929] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 403.686055][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 403.686075][ T30] audit: type=1400 audit(1757064414.436:557): avc: denied { name_bind } for pid=12150 comm="syz.2.1904" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 403.758226][ T5929] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 403.913352][T12156] ceph: No mds server is up or the cluster is laggy [ 404.222867][ T9] usb 5-1: USB disconnect, device number 35 [ 404.236282][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 404.242178][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.254166][ T24] libceph: connect (1)[c::]:6789 error -101 [ 404.268915][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 404.309663][ T5929] usb 6-1: config 0 descriptor?? [ 404.314969][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 404.345095][ T5929] gspca_main: spca508-2.14.0 probing 8086:0110 [ 404.352575][ T9] visor 5-1:1.0: device disconnected [ 404.534914][ T5929] gspca_spca508: reg_read err -32 [ 404.663544][T12168] Mount JFS Failure: -22 [ 404.667795][T12168] jfs_mount failed w/return code = -22 [ 404.793361][T12169] lo speed is unknown, defaulting to 1000 [ 405.195195][T12173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1909'. [ 405.200348][ T30] audit: type=1400 audit(1757064415.456:558): avc: denied { watch watch_reads } for pid=12160 comm="syz.4.1907" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 405.210655][ T5929] gspca_spca508: reg_read err -110 [ 405.274477][ T5929] gspca_spca508: reg_read err -71 [ 405.405812][ T5929] gspca_spca508: reg_read err -71 [ 405.480455][ T5929] gspca_spca508: reg write: error -71 [ 405.521138][ T30] audit: type=1400 audit(1757064415.886:559): avc: denied { nlmsg_write } for pid=12143 comm="syz.5.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 405.534906][ T5929] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 405.729800][ T30] audit: type=1400 audit(1757064415.946:560): avc: denied { ioctl } for pid=12143 comm="syz.5.1902" path="socket:[39966]" dev="sockfs" ino=39966 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 405.781616][ T5929] usb 6-1: USB disconnect, device number 24 [ 405.804437][ T30] audit: type=1400 audit(1757064416.006:561): avc: denied { create } for pid=12174 comm="syz.6.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 406.415263][ T30] audit: type=1400 audit(1757064417.166:562): avc: denied { create } for pid=12190 comm="syz.5.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.036002][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 407.209169][ T30] audit: type=1400 audit(1757064417.936:563): avc: denied { create } for pid=12197 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.468410][ T10] usb 7-1: config 0 has no interfaces? [ 407.490214][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 407.530214][ T30] audit: type=1400 audit(1757064417.936:564): avc: denied { shutdown } for pid=12197 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.550466][ T30] audit: type=1400 audit(1757064417.936:565): avc: denied { getopt } for pid=12197 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.980554][T12214] ceph: No mds server is up or the cluster is laggy [ 407.990708][ T5929] libceph: connect (1)[c::]:6789 error -97 [ 408.137554][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.152778][ T10] usb 7-1: config 0 descriptor?? [ 408.171487][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 408.229163][T12218] vcan0: entered allmulticast mode [ 408.229177][ T30] audit: type=1400 audit(1757064418.976:566): avc: denied { ioctl } for pid=12213 comm="syz.2.1920" path="socket:[40048]" dev="sockfs" ino=40048 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 409.076946][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 409.076958][ T30] audit: type=1400 audit(1757064419.826:568): avc: denied { write } for pid=12213 comm="syz.2.1920" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 409.401157][T12232] Mount JFS Failure: -22 [ 409.406872][T12232] jfs_mount failed w/return code = -22 [ 409.414174][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1923'. [ 410.030226][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 410.270403][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 410.634840][ T30] audit: type=1400 audit(1757064421.386:569): avc: denied { mount } for pid=12246 comm="syz.2.1929" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 411.102907][ T30] audit: type=1400 audit(1757064421.426:570): avc: denied { setopt } for pid=12246 comm="syz.2.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 411.304642][ T5929] usb 7-1: USB disconnect, device number 7 [ 412.105268][T12261] ceph: No mds server is up or the cluster is laggy [ 412.112302][ T24] libceph: connect (1)[c::]:6789 error -101 [ 412.119439][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 412.655294][ T30] audit: type=1400 audit(1757064423.406:571): avc: denied { execute } for pid=12265 comm="syz.6.1932" name="file0" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 412.825338][ T30] audit: type=1400 audit(1757064423.576:572): avc: denied { execute_no_trans } for pid=12265 comm="syz.6.1932" path="/72/file0" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 413.690235][ T30] audit: type=1400 audit(1757064424.436:573): avc: denied { setcheckreqprot } for pid=12276 comm="syz.2.1935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 413.843236][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.857649][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 413.865339][ T5901] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 413.911576][ T9] usb 5-1: can't read configurations, error -71 [ 414.033708][ T30] audit: type=1400 audit(1757064424.786:574): avc: denied { create } for pid=12279 comm="syz.2.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 414.441726][ T30] audit: type=1400 audit(1757064425.136:575): avc: denied { bind } for pid=12279 comm="syz.2.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.467008][ T5901] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 414.478185][ T5901] usb 6-1: config 1 has no interface number 0 [ 414.485965][ T5901] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 414.507874][ T30] audit: type=1400 audit(1757064425.146:576): avc: denied { write } for pid=12279 comm="syz.2.1936" path="socket:[40215]" dev="sockfs" ino=40215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.540268][ T5901] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 414.550556][ T5901] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.563931][ T5901] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 414.663482][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.672965][ T5901] usb 6-1: Product: syz [ 414.678239][ T5901] usb 6-1: Manufacturer: syz [ 414.689809][ T5901] usb 6-1: SerialNumber: syz [ 414.782266][T12295] FAULT_INJECTION: forcing a failure. [ 414.782266][T12295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.928895][ T30] audit: type=1400 audit(1757064425.656:577): avc: denied { watch } for pid=12293 comm="syz.3.1941" path="/407/file0" dev="tmpfs" ino=2142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 415.259313][T12299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1942'. [ 415.269842][ T30] audit: type=1400 audit(1757064425.656:578): avc: denied { watch_sb watch_reads } for pid=12293 comm="syz.3.1941" path="/407/file0" dev="tmpfs" ino=2142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 415.299049][T12295] CPU: 0 UID: 0 PID: 12295 Comm: syz.6.1940 Not tainted syzkaller #0 PREEMPT(full) [ 415.299074][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.299084][T12295] Call Trace: [ 415.299090][T12295] [ 415.299098][T12295] dump_stack_lvl+0x16c/0x1f0 [ 415.299122][T12295] should_fail_ex+0x512/0x640 [ 415.299147][T12295] _copy_to_user+0x32/0xd0 [ 415.299172][T12295] simple_read_from_buffer+0xcb/0x170 [ 415.299192][T12295] proc_fail_nth_read+0x197/0x240 [ 415.299213][T12295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.299234][T12295] ? rw_verify_area+0xcf/0x6c0 [ 415.299260][T12295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.299280][T12295] vfs_read+0x1e1/0xcf0 [ 415.299302][T12295] ? __pfx___mutex_lock+0x10/0x10 [ 415.299322][T12295] ? __pfx_vfs_read+0x10/0x10 [ 415.299347][T12295] ? __fget_files+0x20e/0x3c0 [ 415.299374][T12295] ksys_read+0x12a/0x250 [ 415.299418][T12295] ? __pfx_ksys_read+0x10/0x10 [ 415.299444][T12295] do_syscall_64+0xcd/0x4c0 [ 415.299466][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.299485][T12295] RIP: 0033:0x7f2e2298d5fc [ 415.299500][T12295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.299516][T12295] RSP: 002b:00007f2e23815030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.299533][T12295] RAX: ffffffffffffffda RBX: 00007f2e22bc5fa0 RCX: 00007f2e2298d5fc [ 415.299544][T12295] RDX: 000000000000000f RSI: 00007f2e238150a0 RDI: 0000000000000005 [ 415.299554][T12295] RBP: 00007f2e23815090 R08: 0000000000000000 R09: 0000000000000000 [ 415.299564][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.299574][T12295] R13: 00007f2e22bc6038 R14: 00007f2e22bc5fa0 R15: 00007fffa3babe38 [ 415.299599][T12295] [ 415.599372][T12277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 415.905730][ T30] audit: type=1400 audit(1757064426.656:579): avc: denied { append } for pid=12301 comm="syz.2.1943" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 416.142174][ T30] audit: type=1400 audit(1757064426.686:580): avc: denied { read write } for pid=12275 comm="syz.5.1934" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 416.268451][ T30] audit: type=1400 audit(1757064426.686:581): avc: denied { open } for pid=12275 comm="syz.5.1934" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 416.330650][T12299] bond7 (unregistering): Released all slaves [ 416.348316][T12310] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 417.013154][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 417.029977][ T30] audit: type=1400 audit(1757064426.946:582): avc: denied { read write } for pid=12275 comm="syz.5.1934" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 417.068085][ T5901] usb 6-1: Incompatible driver and firmware versions [ 417.092736][ T30] audit: type=1400 audit(1757064426.956:583): avc: denied { open } for pid=12275 comm="syz.5.1934" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 417.120710][ T30] audit: type=1400 audit(1757064426.966:584): avc: denied { allowed } for pid=12275 comm="syz.5.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 417.284633][ T24] usb 6-1: USB disconnect, device number 25 [ 417.511173][T12329] FAULT_INJECTION: forcing a failure. [ 417.511173][T12329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.706077][T12329] CPU: 0 UID: 0 PID: 12329 Comm: syz.3.1950 Not tainted syzkaller #0 PREEMPT(full) [ 417.706094][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.706101][T12329] Call Trace: [ 417.706104][T12329] [ 417.706108][T12329] dump_stack_lvl+0x16c/0x1f0 [ 417.706125][T12329] should_fail_ex+0x512/0x640 [ 417.706140][T12329] _copy_from_user+0x2e/0xd0 [ 417.706155][T12329] bpf_test_init.isra.0+0xe2/0x140 [ 417.706174][T12329] bpf_prog_test_run_xdp+0x4f0/0x1590 [ 417.706192][T12329] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 417.706205][T12329] ? __might_fault+0xc0/0x190 [ 417.706218][T12329] ? fput+0x9b/0xd0 [ 417.706233][T12329] ? __bpf_prog_get+0x97/0x2a0 [ 417.706245][T12329] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 417.706257][T12329] __sys_bpf+0x1050/0x4de0 [ 417.706272][T12329] ? __pfx___sys_bpf+0x10/0x10 [ 417.706287][T12329] ? ksys_write+0x190/0x250 [ 417.706300][T12329] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 417.706321][T12329] ? fput+0x9b/0xd0 [ 417.706334][T12329] ? ksys_write+0x1ac/0x250 [ 417.706344][T12329] ? __pfx_ksys_write+0x10/0x10 [ 417.706358][T12329] __x64_sys_bpf+0x78/0xc0 [ 417.706372][T12329] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.706383][T12329] do_syscall_64+0xcd/0x4c0 [ 417.706397][T12329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.706408][T12329] RIP: 0033:0x7f90ec78ebe9 [ 417.706417][T12329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.706427][T12329] RSP: 002b:00007f90ed693038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.706438][T12329] RAX: ffffffffffffffda RBX: 00007f90ec9c5fa0 RCX: 00007f90ec78ebe9 [ 417.706445][T12329] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 417.706451][T12329] RBP: 00007f90ed693090 R08: 0000000000000000 R09: 0000000000000000 [ 417.706457][T12329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.706463][T12329] R13: 00007f90ec9c6038 R14: 00007f90ec9c5fa0 R15: 00007ffd22e06b28 [ 417.706477][T12329] [ 418.145606][T12338] capability: warning: `syz.3.1952' uses 32-bit capabilities (legacy support in use) [ 418.422457][T12348] binder: BINDER_SET_CONTEXT_MGR already set [ 418.428608][T12348] binder: 12342:12348 ioctl 4018620d 200000004a80 returned -16 [ 420.619728][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 420.619848][ T30] audit: type=1400 audit(1757064430.726:606): avc: denied { create } for pid=12358 comm="syz.3.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 421.332277][ T30] audit: type=1400 audit(1757064431.526:607): avc: denied { read } for pid=12350 comm="syz.6.1954" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 421.656997][ T30] audit: type=1400 audit(1757064431.526:608): avc: denied { open } for pid=12350 comm="syz.6.1954" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 421.743231][ T30] audit: type=1400 audit(1757064431.656:609): avc: denied { ioctl } for pid=12350 comm="syz.6.1954" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 421.817673][ T30] audit: type=1400 audit(1757064431.726:610): avc: denied { map } for pid=12350 comm="syz.6.1954" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 421.904185][ T30] audit: type=1400 audit(1757064431.726:611): avc: denied { execute } for pid=12350 comm="syz.6.1954" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 422.477341][ T30] audit: type=1400 audit(1757064433.226:612): avc: denied { write } for pid=12358 comm="syz.3.1959" name="fib_trie" dev="proc" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 423.745725][T12387] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1965'. [ 423.825807][ T30] audit: type=1400 audit(1757064434.576:613): avc: denied { read } for pid=12388 comm="syz.5.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 423.929354][ T30] audit: type=1400 audit(1757064434.626:614): avc: denied { write } for pid=12388 comm="syz.5.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 423.986439][ T30] audit: type=1400 audit(1757064434.706:615): avc: denied { read } for pid=12388 comm="syz.5.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.221707][ T5929] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 425.445514][T12435] netlink: 'syz.3.1977': attribute type 15 has an invalid length. [ 425.453581][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1977'. [ 425.484763][T12435] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 425.492571][T12435] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1977'. [ 425.515781][T12435] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1977'. [ 425.788135][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 425.839774][ T5929] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 425.849313][ T5929] usb 3-1: config 179 has no interface number 0 [ 425.856573][ T5929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 426.044040][ T5929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 426.059579][ T5929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.071061][ T5929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 426.083468][ T5929] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 426.097172][ T5929] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 426.115345][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.128367][T12422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 427.359212][T12444] tipc: Enabled bearer , priority 0 [ 427.377264][T12444] syzkaller0: entered promiscuous mode [ 427.383910][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'. [ 427.399282][T12444] syzkaller0: entered allmulticast mode [ 427.442838][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input23 [ 427.568890][T12447] tipc: Resetting bearer [ 427.650297][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 427.650315][ T30] audit: type=1400 audit(1757064438.386:628): avc: denied { sqpoll } for pid=12421 comm="syz.2.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 427.690804][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.827032][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.089753][T12443] tipc: Resetting bearer [ 428.106865][ T30] audit: type=1400 audit(1757064438.856:629): avc: denied { read write } for pid=12421 comm="syz.2.1974" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 428.176661][T12443] tipc: Disabling bearer [ 428.223664][ T30] audit: type=1400 audit(1757064438.856:630): avc: denied { open } for pid=12421 comm="syz.2.1974" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 428.439621][T12459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.476865][T12459] binder: 12457:12459 ioctl 40044591 0 returned -22 [ 428.488608][T12459] binder: 12457:12459 ioctl c0306201 200000000640 returned -22 [ 429.070920][T12474] syzkaller1: entered promiscuous mode [ 429.130413][T12474] syzkaller1: entered allmulticast mode [ 429.182621][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 429.523844][T12477] FAULT_INJECTION: forcing a failure. [ 429.523844][T12477] name failslab, interval 1, probability 0, space 0, times 0 [ 429.540220][T12475] lo speed is unknown, defaulting to 1000 [ 429.690327][T12477] CPU: 1 UID: 0 PID: 12477 Comm: syz.6.1988 Not tainted syzkaller #0 PREEMPT(full) [ 429.690358][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.690368][T12477] Call Trace: [ 429.690374][T12477] [ 429.690381][T12477] dump_stack_lvl+0x16c/0x1f0 [ 429.690405][T12477] should_fail_ex+0x512/0x640 [ 429.690423][T12477] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 429.690444][T12477] should_failslab+0xc2/0x120 [ 429.690463][T12477] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 429.690481][T12477] ? __alloc_skb+0x2b2/0x380 [ 429.690502][T12477] __alloc_skb+0x2b2/0x380 [ 429.690518][T12477] ? __pfx___alloc_skb+0x10/0x10 [ 429.690542][T12477] alloc_skb_with_frags+0xe0/0x860 [ 429.690562][T12477] ? __might_fault+0xe3/0x190 [ 429.690577][T12477] ? __might_fault+0x13b/0x190 [ 429.690597][T12477] sock_alloc_send_pskb+0x7fb/0x990 [ 429.690614][T12477] ? _copy_from_iter+0x15d/0x1720 [ 429.690640][T12477] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 429.690656][T12477] ? __lock_acquire+0xb97/0x1ce0 [ 429.690681][T12477] ? _parse_integer_limit+0x17f/0x1d0 [ 429.690713][T12477] ? _kstrtoull+0x145/0x200 [ 429.690727][T12477] ? iov_iter_advance+0x7d/0x6c0 [ 429.690747][T12477] ? __pfx__kstrtoull+0x10/0x10 [ 429.690765][T12477] tun_get_user+0x7f6/0x3ce0 [ 429.690799][T12477] ? __pfx_tun_get_user+0x10/0x10 [ 429.690824][T12477] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 429.690855][T12477] ? find_held_lock+0x2b/0x80 [ 429.690876][T12477] ? tun_get+0x191/0x370 [ 429.690904][T12477] tun_chr_write_iter+0xdc/0x210 [ 429.690930][T12477] vfs_write+0x7d3/0x11d0 [ 429.690949][T12477] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 429.690977][T12477] ? __pfx_vfs_write+0x10/0x10 [ 429.690992][T12477] ? find_held_lock+0x2b/0x80 [ 429.691028][T12477] ksys_write+0x12a/0x250 [ 429.691046][T12477] ? __pfx_ksys_write+0x10/0x10 [ 429.691069][T12477] do_syscall_64+0xcd/0x4c0 [ 429.691091][T12477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.691108][T12477] RIP: 0033:0x7f2e2298ebe9 [ 429.691122][T12477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.691139][T12477] RSP: 002b:00007f2e237d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.691157][T12477] RAX: ffffffffffffffda RBX: 00007f2e22bc6180 RCX: 00007f2e2298ebe9 [ 429.691168][T12477] RDX: 0000000000000fce RSI: 0000200000000240 RDI: 0000000000000003 [ 429.691178][T12477] RBP: 00007f2e237d3090 R08: 0000000000000000 R09: 0000000000000000 [ 429.691189][T12477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.691199][T12477] R13: 00007f2e22bc6218 R14: 00007f2e22bc6180 R15: 00007fffa3babe38 [ 429.691222][T12477] [ 429.962154][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.060277][ T5958] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 430.195346][ T9] usb 3-1: USB disconnect, device number 41 [ 430.195432][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 430.209787][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 430.217614][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 430.229549][ T5958] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 430.238663][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.246692][ T5958] usb 4-1: Product: syz [ 430.251097][ T5958] usb 4-1: Manufacturer: syz [ 430.255703][ T5958] usb 4-1: SerialNumber: syz [ 430.262648][ T5958] usb 4-1: config 0 descriptor?? [ 430.301028][ T5958] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 430.372933][ T24] usb 5-1: config 0 has no interfaces? [ 430.378421][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 430.395888][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.413253][ T24] usb 5-1: config 0 descriptor?? [ 430.825618][ T5958] gspca_sonixj: reg_w1 err -110 [ 430.830763][ T5958] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 430.910240][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 431.098559][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.133822][ T9] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 431.146265][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.174588][ T9] usb 7-1: config 0 descriptor?? [ 431.396604][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 431.402969][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 431.416100][ T9] usb 7-1: USB disconnect, device number 8 [ 431.775039][ T5958] usb 4-1: USB disconnect, device number 47 [ 431.850179][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 432.051526][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 432.065766][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.097069][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 432.150677][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.197131][ T9] usb 7-1: config 0 descriptor?? [ 432.450833][ T5983] usb 5-1: USB disconnect, device number 38 [ 432.629008][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 432.654213][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 432.679991][ T9] usb 7-1: USB disconnect, device number 9 [ 433.280436][ T5983] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 433.362815][T12535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=12535 comm=syz.6.2003 [ 433.379080][ T30] audit: type=1400 audit(1757064444.116:631): avc: denied { getattr } for pid=12534 comm="syz.6.2003" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=40805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 433.403842][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.444861][ T5983] usb 5-1: config 0 has no interfaces? [ 433.450423][ T5983] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 433.469112][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.604809][ T30] audit: type=1400 audit(1757064444.316:632): avc: denied { ioctl } for pid=12534 comm="syz.6.2003" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 433.632365][ T5983] usb 5-1: config 0 descriptor?? [ 433.730279][ T30] audit: type=1400 audit(1757064444.326:633): avc: denied { name_connect } for pid=12534 comm="syz.6.2003" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 433.874503][T12536] : renamed from bridge_slave_0 (while UP) [ 434.592444][ T30] audit: type=1400 audit(1757064444.626:634): avc: denied { ioctl } for pid=12528 comm="syz.3.2001" path="socket:[40826]" dev="sockfs" ino=40826 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 434.785385][ T30] audit: type=1400 audit(1757064445.326:635): avc: denied { mounton } for pid=12531 comm="syz.5.2002" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 434.829551][ T30] audit: type=1400 audit(1757064445.326:636): avc: denied { mount } for pid=12531 comm="syz.5.2002" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 435.183193][ T5994] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 435.245898][ T30] audit: type=1400 audit(1757064445.996:637): avc: denied { write } for pid=12550 comm="syz.3.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 435.355672][ T30] audit: type=1400 audit(1757064446.106:638): avc: denied { execute } for pid=12549 comm="syz.6.2007" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 435.504284][ T5994] usb 3-1: Using ep0 maxpacket: 16 [ 435.711116][ T5994] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 435.755462][ T5994] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 435.767540][ T5994] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.779066][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 435.787919][ T5994] usb 3-1: SerialNumber: syz [ 435.825813][T12548] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 435.839714][ T5983] usb 5-1: USB disconnect, device number 39 [ 435.854418][T12548] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 436.710276][ T5861] Bluetooth: hci6: command 0x0406 tx timeout [ 437.373770][ T5994] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 437.398007][ T5994] usb 3-1: USB disconnect, device number 42 [ 437.700184][ T30] audit: type=1400 audit(1757064448.396:639): avc: denied { read } for pid=12577 comm="syz.6.2013" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 437.900193][ T30] audit: type=1400 audit(1757064448.396:640): avc: denied { open } for pid=12577 comm="syz.6.2013" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 438.465295][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 438.465306][ T30] audit: type=1400 audit(1757064449.216:643): avc: denied { read } for pid=12584 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 438.665392][ T30] audit: type=1400 audit(1757064449.246:644): avc: denied { read } for pid=12575 comm="syz.4.2012" path="socket:[42004]" dev="sockfs" ino=42004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 438.762075][ T5983] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 438.955781][ T30] audit: type=1400 audit(1757064449.246:645): avc: denied { setopt } for pid=12575 comm="syz.4.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 438.990221][ T5983] usb 3-1: Using ep0 maxpacket: 8 [ 439.033691][T12578] SELinux: failed to load policy [ 439.049312][ T5983] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 439.129973][ T5983] usb 3-1: config 179 has no interface number 0 [ 439.200149][ T5983] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 439.232740][ T30] audit: type=1400 audit(1757064449.276:646): avc: denied { write } for pid=12584 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 439.314061][ T5983] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 439.420351][ T5983] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 439.470743][ T30] audit: type=1400 audit(1757064450.226:647): avc: denied { shutdown } for pid=12592 comm="syz.3.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 439.513161][T12591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2016'. [ 439.522202][ T5983] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 439.580519][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.586823][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.694624][ T5983] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 440.477773][ T5983] usb 3-1: config 179 interface 65 has no altsetting 0 [ 440.486238][ T5983] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 440.496113][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.573067][ T5983] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input24 [ 441.701700][ T30] audit: type=1400 audit(1757064452.446:648): avc: denied { read } for pid=12605 comm="syz.6.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 441.758127][ T5929] usb 3-1: USB disconnect, device number 43 [ 441.758262][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 441.974212][ T30] audit: type=1400 audit(1757064452.726:649): avc: denied { write } for pid=12608 comm="syz.5.2022" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 442.560344][T12617] tipc: Failed to obtain node identity [ 442.595713][T12617] tipc: Enabling of bearer rejected, failed to enable media [ 442.617442][T12618] input: syz1 as /devices/virtual/input/input25 [ 442.822168][ T30] audit: type=1400 audit(1757064453.576:650): avc: denied { name_connect } for pid=12608 comm="syz.5.2022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 443.136668][ T30] audit: type=1400 audit(1757064453.666:651): avc: denied { listen } for pid=12608 comm="syz.5.2022" lport=51844 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 443.310220][ T5929] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 443.411042][ T30] audit: type=1400 audit(1757064453.756:652): avc: denied { accept } for pid=12608 comm="syz.5.2022" lport=51844 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 443.440327][ T5994] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 443.641937][ T30] audit: type=1400 audit(1757064453.836:653): avc: denied { create } for pid=12621 comm="syz.3.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 443.661432][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 443.667953][ T30] audit: type=1400 audit(1757064453.926:654): avc: denied { connect } for pid=12621 comm="syz.3.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 443.688307][ T30] audit: type=1400 audit(1757064454.186:655): avc: denied { create } for pid=12627 comm="syz.2.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 443.744646][T12629] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2027'. [ 443.997479][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.055035][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.064830][ T30] audit: type=1400 audit(1757064454.196:656): avc: denied { ioctl } for pid=12627 comm="syz.2.2027" path="socket:[41773]" dev="sockfs" ino=41773 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 444.090219][ T5929] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 444.099317][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.147428][ T5994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.390229][ T5994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 444.397441][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2028'. [ 444.409436][ T5994] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 444.419374][ T5929] usb 6-1: config 0 descriptor?? [ 444.437143][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.455143][T12638] veth1: entered promiscuous mode [ 444.471822][ T5994] usb 4-1: config 0 descriptor?? [ 444.480826][ T5994] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 444.493852][ T5994] dvb-usb: bulk message failed: -22 (3/0) [ 444.505186][ T5994] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 444.527738][T12638] netlink: 'syz.6.2028': attribute type 8 has an invalid length. [ 444.536438][T12638] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 444.563410][ T5994] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 444.570666][ T5994] usb 4-1: media controller created [ 444.587793][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.635704][ T5994] dvb-usb: bulk message failed: -22 (6/0) [ 444.651930][ T5929] usbhid 6-1:0.0: can't add hid device: -71 [ 444.667049][ T5929] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 444.677002][ T5994] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 444.687349][T12626] dvb-usb: bulk message failed: -22 (2/0) [ 444.745297][ T5994] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 444.762003][ T5929] usb 6-1: USB disconnect, device number 26 [ 444.769859][ T5994] dvb-usb: schedule remote query interval to 150 msecs. [ 444.783990][ T5994] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 444.940174][ T5994] dvb-usb: bulk message failed: -22 (1/0) [ 444.946035][ T5994] dvb-usb: error while querying for an remote control event. [ 445.160126][ T5994] dvb-usb: bulk message failed: -22 (1/0) [ 445.660243][ T5994] dvb-usb: error while querying for an remote control event. [ 445.930381][ T5994] dvb-usb: bulk message failed: -22 (1/0) [ 445.982881][ T5994] dvb-usb: error while querying for an remote control event. [ 446.202422][ T5929] usb 4-1: USB disconnect, device number 48 [ 446.287317][ T5929] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 446.319494][ T30] audit: type=1400 audit(1757064457.056:657): avc: denied { create } for pid=12666 comm="syz.3.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 446.404200][ T30] audit: type=1400 audit(1757064457.066:658): avc: denied { ioctl } for pid=12666 comm="syz.3.2038" path="socket:[42233]" dev="sockfs" ino=42233 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 446.555843][T12675] Mount JFS Failure: -22 [ 446.567627][T12675] jfs_mount failed w/return code = -22 [ 446.582195][ T31] INFO: task syz.0.1506:10684 blocked for more than 143 seconds. [ 446.596950][ T31] Not tainted syzkaller #0 [ 446.604257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.607068][T12675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2040'. [ 446.623921][ T31] task:syz.0.1506 state:D stack:26552 pid:10684 tgid:10676 ppid:8622 task_flags:0x400140 flags:0x00004004 [ 446.636059][ T31] Call Trace: [ 446.636296][ T30] audit: type=1400 audit(1757064457.356:659): avc: denied { ioctl } for pid=12672 comm="syz.4.2041" path="socket:[41909]" dev="sockfs" ino=41909 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 446.639393][ T31] [ 446.669174][ T31] __schedule+0x1190/0x5de0 [ 446.695353][ T31] ? check_path.constprop.0+0x24/0x50 [ 446.703308][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 446.708380][ T31] ? __pfx___schedule+0x10/0x10 [ 446.713533][ T31] ? find_held_lock+0x2b/0x80 [ 446.720738][ T31] ? schedule+0x2d7/0x3a0 [ 446.728533][ T31] schedule+0xe7/0x3a0 [ 446.736394][T12681] netlink: 'syz.6.2042': attribute type 1 has an invalid length. [ 446.744475][ T31] io_schedule+0xbf/0x130 [ 446.749080][ T31] folio_wait_bit_common+0x3d6/0x9e0 [ 446.767946][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 446.784741][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 446.798592][T12681] bond8: entered promiscuous mode [ 446.804229][ T31] ? filemap_get_folios_tag+0x46a/0xae0 [ 446.810247][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 446.813797][T12681] 8021q: adding VLAN 0 to HW filter on device bond8 [ 446.822789][ T31] folio_wait_writeback+0x3c/0x90 [ 446.840236][ T31] __filemap_fdatawait_range+0x11f/0x200 [ 446.846373][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 446.854593][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.860758][ T31] ? find_held_lock+0x2b/0x80 [ 446.866914][ T31] ? find_held_lock+0x2b/0x80 [ 446.872805][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 446.878060][ T31] filemap_fdatawait_keep_errors+0x21/0x30 [ 446.884144][ T31] sync_inodes_sb+0x5fa/0xa70 [ 446.891302][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 446.896249][ T31] ? __pfx_sync_inodes_sb+0x10/0x10 [ 446.902248][ T31] ? find_held_lock+0x2b/0x80 [ 446.907127][ T31] ? __iterate_supers+0x1b6/0x360 [ 446.913668][ T31] sync_inodes_one_sb+0x52/0x60 [ 446.926924][T12683] 8021q: adding VLAN 0 to HW filter on device bond9 [ 446.967687][T12683] bond8: (slave bond9): making interface the new active one [ 446.975222][T12683] bond9: entered promiscuous mode [ 447.007622][T12683] bond8: (slave bond9): Enslaving as an active interface with an up link [ 447.023050][ T31] __iterate_supers+0x210/0x360 [ 447.034000][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 447.042502][ T31] ksys_sync+0x89/0x150 [ 447.049384][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 447.122252][ T31] ? rcu_is_watching+0x12/0xc0 [ 447.130363][ T31] ? do_syscall_64+0x91/0x4c0 [ 447.138345][ T31] __do_sys_sync+0xe/0x20 [ 447.146197][ T31] do_syscall_64+0xcd/0x4c0 [ 447.157124][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.167497][ T31] RIP: 0033:0x7f78c618ebe9 [ 447.176941][ T31] RSP: 002b:00007f78c6fc2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 447.195369][ T31] RAX: ffffffffffffffda RBX: 00007f78c63c6270 RCX: 00007f78c618ebe9 [ 447.209173][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.228392][ T31] RBP: 00007f78c63c6270 R08: 0000000000000000 R09: 0000000000000000 [ 447.243141][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.260248][ T31] R13: 00007f78c63c6308 R14: 00007f78c63c6270 R15: 00007fff1b2b1258 [ 447.277947][ T31] [ 447.281397][ T31] [ 447.281397][ T31] Showing all locks held in the system: [ 447.316395][ T31] 1 lock held by khungtaskd/31: [ 447.321799][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 447.331984][ T31] 3 locks held by kworker/u8:7/1335: [ 447.337318][ T31] #0: ffff88814cb6f148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 447.348763][ T31] #1: ffffc9000461fd10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 447.361266][ T31] #2: ffffffff90384148 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 447.371202][ T31] 2 locks held by getty/5605: [ 447.375910][ T31] #0: ffff88814dba80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 447.386148][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 447.455444][ T31] 2 locks held by syz.1.599/7632: [ 447.464841][ T31] #0: ffff888033b48428 (sb_writers#13){.+.+}-{0:0}, at: do_pwritev+0x1a6/0x270 [ 447.474867][ T31] #1: ffff888058351498 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: netfs_start_io_write+0x59/0x80 [ 447.580129][ T31] 2 locks held by syz.0.1506/10684: [ 447.585413][ T31] #0: ffff888033b480e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 447.596653][ T31] #1: ffff888033b48950 (&s->s_sync_lock){+.+.}-{4:4}, at: sync_inodes_sb+0x231/0xa70 [ 447.606936][ T31] 1 lock held by syz.5.2035/12657: [ 447.612267][ T31] #0: ffffffff8e5cc6c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 447.622874][ T31] 2 locks held by syz.2.2036/12659: [ 447.628075][ T31] #0: ffff8880504e4a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 447.638649][ T31] #1: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 447.649089][ T31] 2 locks held by syz.4.2041/12672: [ 447.654364][ T31] #0: ffff888058273808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 447.664984][ T31] #1: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 447.675114][ T31] 1 lock held by syz.4.2041/12678: [ 447.680284][ T31] #0: ffff8880255f8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0x90 [ 447.689813][ T31] [ 447.690605][T12678] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 447.692407][ T31] ============================================= [ 447.692407][ T31] [ 447.706631][ T31] NMI backtrace for cpu 1 [ 447.706648][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 447.706668][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.706678][ T31] Call Trace: [ 447.706683][ T31] [ 447.706691][ T31] dump_stack_lvl+0x116/0x1f0 [ 447.706714][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 447.706738][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.706757][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 447.706785][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 447.706813][ T31] watchdog+0xf0e/0x1260 [ 447.706837][ T31] ? __pfx_watchdog+0x10/0x10 [ 447.706855][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.706875][ T31] ? __kthread_parkme+0x19e/0x250 [ 447.706902][ T31] ? __pfx_watchdog+0x10/0x10 [ 447.706921][ T31] kthread+0x3c2/0x780 [ 447.706939][ T31] ? __pfx_kthread+0x10/0x10 [ 447.706958][ T31] ? rcu_is_watching+0x12/0xc0 [ 447.706979][ T31] ? __pfx_kthread+0x10/0x10 [ 447.706997][ T31] ret_from_fork+0x5d4/0x6f0 [ 447.707013][ T31] ? __pfx_kthread+0x10/0x10 [ 447.707031][ T31] ret_from_fork_asm+0x1a/0x30 [ 447.707070][ T31] [ 447.707077][ T31] Sending NMI from CPU 1 to CPUs 0: [ 447.828285][ C0] NMI backtrace for cpu 0 [ 447.828299][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 447.828320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.828329][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 447.828347][ C0] Code: ec 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 e3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 447.828360][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 447.828372][ C0] RAX: 0000000001937c0d RBX: 0000000000000000 RCX: ffffffff8b942c29 [ 447.828381][ C0] RDX: 0000000000000000 RSI: ffffffff8de514d0 RDI: ffffffff8c162b00 [ 447.828390][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 447.828398][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 447.828407][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab6190 R15: 0000000000000000 [ 447.828415][ C0] FS: 0000000000000000(0000) GS:ffff8881246b6000(0000) knlGS:0000000000000000 [ 447.828429][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.828438][ C0] CR2: 00007ffe541f9e78 CR3: 0000000071290000 CR4: 00000000003526f0 [ 447.828446][ C0] Call Trace: [ 447.828452][ C0] [ 447.828456][ C0] default_idle+0x13/0x20 [ 447.828472][ C0] default_idle_call+0x6d/0xb0 [ 447.828487][ C0] do_idle+0x391/0x510 [ 447.828505][ C0] ? __pfx_do_idle+0x10/0x10 [ 447.828520][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 447.828537][ C0] cpu_startup_entry+0x4f/0x60 [ 447.828552][ C0] rest_init+0x16b/0x2b0 [ 447.828568][ C0] ? acpi_subsystem_init+0x133/0x180 [ 447.828580][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 447.828595][ C0] start_kernel+0x3ee/0x4d0 [ 447.828609][ C0] x86_64_start_reservations+0x18/0x30 [ 447.828622][ C0] x86_64_start_kernel+0x130/0x190 [ 447.828635][ C0] common_startup_64+0x13e/0x148 [ 447.828655][ C0] [ 447.839657][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 447.839673][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 447.839692][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.839702][ T31] Call Trace: [ 447.839708][ T31] [ 447.839714][ T31] dump_stack_lvl+0x3d/0x1f0 [ 447.839737][ T31] vpanic+0x6e8/0x7a0 [ 447.839762][ T31] ? __pfx_vpanic+0x10/0x10 [ 447.839785][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 447.839814][ T31] panic+0xca/0xd0 [ 447.839836][ T31] ? __pfx_panic+0x10/0x10 [ 447.839859][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 447.839882][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 447.839906][ T31] ? watchdog+0xd78/0x1260 [ 447.839923][ T31] ? watchdog+0xd6b/0x1260 [ 447.839941][ T31] watchdog+0xd89/0x1260 [ 447.839961][ T31] ? __pfx_watchdog+0x10/0x10 [ 447.839977][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.839995][ T31] ? __kthread_parkme+0x19e/0x250 [ 447.840018][ T31] ? __pfx_watchdog+0x10/0x10 [ 447.840035][ T31] kthread+0x3c2/0x780 [ 447.840056][ T31] ? __pfx_kthread+0x10/0x10 [ 447.840079][ T31] ? rcu_is_watching+0x12/0xc0 [ 447.840099][ T31] ? __pfx_kthread+0x10/0x10 [ 447.840115][ T31] ret_from_fork+0x5d4/0x6f0 [ 447.840129][ T31] ? __pfx_kthread+0x10/0x10 [ 447.840145][ T31] ret_from_fork_asm+0x1a/0x30 [ 447.840173][ T31] [ 448.156751][ T31] Kernel Offset: disabled [ 448.161049][ T31] Rebooting in 86400 seconds..