last executing test programs: 4m16.514487075s ago: executing program 0 (id=796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4m16.057166778s ago: executing program 0 (id=799): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b60008000900020000"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0xe, 0x0, &(0x7f0000000700)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x375, 0x0, 0x39, 0x0, &(0x7f0000000540)="9a4f1f796ecac0afa6efee7073e66f741b673e78b684388008a1374fed03c7508a50a9e6796dfd73facfb013a6322467a4a0011fc387ea6be1", 0x0}, 0x50) setreuid(0xffffffffffffffff, 0xee00) getresgid(&(0x7f0000000040), &(0x7f00000000c0), 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) r8 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r8, 0x0, 0x0, 0x4000044, 0x0, 0x0) fcntl$setownex(r6, 0xf, 0x0) fsopen(0x0, 0x1) socket$l2tp(0x2, 0x2, 0x73) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0xffffff8c, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r11, 0x0, 0x0, 0x20000010) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r12, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) 4m15.532945911s ago: executing program 0 (id=803): connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4ea0, @empty}, 0x12a6ae1996cf1162) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) 4m12.107793803s ago: executing program 0 (id=815): r0 = timerfd_create(0x9, 0x800) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000575f22c01c9802000000000000110400000000000000000000000000000400000000020000000000001202000000020000000000000e030000000000", @ANYRES16=r0, @ANYRESDEC=r0], 0x0, 0x54}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) (async, rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) (async, rerun: 32) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) (rerun: 32) chdir(&(0x7f0000000180)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0x9361, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) (async) socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 4m9.362202413s ago: executing program 0 (id=831): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x1, @raw_data="e7416485b8a622cf0490d63fdf4b8db2a3525405edf926f3965c51e1051a4ffd2a7a49d3c70725b015399835bf91c7621a2e3da4d9d3f5597fd57e8f2961320038b85e83123e7a9cacbcf4e8070b7ab2c562e5e910c4d6ed73bf9e8684513e6e65fc759f68373128a9ea7fac3ca9e3a9a24a00832c77605a6392c7bf63a1b4b82447d2bea0772e26a9c8baa8053b6804b6fa796ae23767d773e0114438e24aaf671a22b13cb4759a9a7b5c9a64d86e1d5afeb19029cc28bad08caac0815c66199a0e26df1bd84b04"}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 4m8.928401666s ago: executing program 0 (id=835): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) 4m8.255281799s ago: executing program 32 (id=835): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) 3m35.421437206s ago: executing program 5 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0xf5ffffff, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x80}}, 0x0) 3m34.251273099s ago: executing program 5 (id=964): syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009"], 0x0) fanotify_init(0x40, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 3m31.142749291s ago: executing program 5 (id=975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, 0x0, 0x4000004) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) 3m28.699280491s ago: executing program 5 (id=983): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x638, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x608, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1d028}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xfff1}}, @TCA_FLOW_EMATCHES={0x114, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_META={0x104, 0x1, 0x0, 0x0, {{0x1a05, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="4f0f4b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='bv2d', @TCF_META_TYPE_VAR="c7d59ca1b86fc316a72d", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x8}, {0x0, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="d6eaa744dc", @TCF_META_TYPE_VAR="ae2a772311f9", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="12834aa5", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f193e205c52c", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x265, 0x3, 0x2}, {0x4, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="de"]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="d23b9f2e583c00", @TCF_META_TYPE_VAR="64376ca13e9ae4a8", @TCF_META_TYPE_VAR="c45ac7", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e119", @TCF_META_TYPE_VAR="2433bf9b60da1c", @TCF_META_TYPE_VAR="a41b", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6ea2, 0x0, 0x1}, {0x7d62, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="bd9144b55b25ec", @TCF_META_TYPE_VAR="2faf", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="3ab1bf"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR='j', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_FLOW_ACT={0x148, 0x9, 0x0, 0x1, [@m_ctinfo={0x60, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfff}]}, {0x2a, 0x6, "1df2d19255caa4bd0954c8997bd4553c409d68a5b0642fa8feb500acbb0d1055b946eb07fc6d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xe4, 0x1a, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x679}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5a7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd, 0x8, 0x4, 0x7, 0x6}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x0, 0x20000000, 0xbf59, 0x64}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x989}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x57, 0x6, "39e6023657635afe0047e417d517bd72b7990dc5109a14894b13dfe74d1a24b2510f0a220620d68648781fe7efa2fc2ccca6159a6686da8bbc85a46b5f6b7d0ed152ca1e10fa998d30c9704e5dbbdbce2e94ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0xfffffff8}, @TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}, @TCA_FLOW_ACT={0x35c, 0x9, 0x0, 0x1, [@m_vlan={0x84, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x55, 0x6, "49b5b3c4f820090ec4b0e874d51be75195a8036ff65ab126d1c3ea92faadb4906ea409b68f0e6e7be330b9faeb4c6e1909b64ccb6454d8431d813e707e6ad665dcd42548a563c6cbe41a8728eda7d88efb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x16c, 0x16, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000001}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x7, 0x10000000, 0x861, 0x9}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0xc1, 0x6, "99f8d87581659e5188b891ff9f93cfc18f15e53882a9b8270148cbca30dbd722714a9154b510d2d82354eafe9b37856768aa91068b1dce22f2420af4558095297741c8f1c87dcbe1b09fed8546f465714ab7dd7550006bf6f6a377314fd678e4daa01006f4972abf395da135eaa8f883a7cff037b9d19fe38a7c8cd601837144408f9796a14223db9906d8475a926986dc8493bdf7790f32774e1e3f77cb44a7df020e4b54a3dd9e009955e80ff0107743ae3a37cfc1291024f6289130"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_pedit={0x168, 0xd, 0x0, 0x0, {{0xa}, {0x5c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x58, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xe2, 0x6, "e5cf5c5a8bf7e16bd618b7f4992878557e0458cd490aafc3e1f2c3a900bfcf8f89a9cb7e7dfc45e1e073fd56c23ef86da86b1ba40c1e0a6648e6fa73e6882755352ed389444b31b1c8e44f96e7b6d5769a40d670df2b1183c57f42b27217bbe8c5e650807921b97fb1c4483fb9afdad52bfe6c9ce10f5ebdfc49d8c759b82957677ba01f2184fa036839ae3707859c322627f223ff84cea369a5773f6adc4bd08cbd7baf6c76a978f105212f9555398f571ad39c92521cd55a633a93c1c7fa37a315faa1840f1ad7fc99badd7380ae185b57db0d4288c4eed0c70b5b5248"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FLOW_POLICE={0x1c, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8}]}]}}]}, 0x638}, 0x1, 0x0, 0x0, 0x4000804}, 0x24040084) 3m28.215298574s ago: executing program 5 (id=986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc73b5c37696b90ad5bca70304193fc04574d3ca94f8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d12576131d3c2de8be8d600ab0c76798f2675cf5d68d137fe86e1d0", 0x54}, {&(0x7f0000000100)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a6a79dd2d20ff1637187bf9b58377bd5ae5", 0xe2}, {&(0x7f00000012c0)="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", 0x54b}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x50) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 3m26.917043294s ago: executing program 5 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x4, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x6, 0x0, &(0x7f0000000040)=0xffffffa1) prlimit64(0x0, 0xf, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) 3m11.520520387s ago: executing program 33 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x4, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x6, 0x0, &(0x7f0000000040)=0xffffffa1) prlimit64(0x0, 0xf, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) 9.896207054s ago: executing program 3 (id=1797): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="811000"/16], &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1, 0x6}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x401003}, 0x38) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x70, 0x1f, 0xe, 0x40, 0xe41, 0x4156, 0x15eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0xe5, 0xf3, 0x2e, 0x5}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/37, 0x25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r6 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x114, &(0x7f0000000080)=0xffffffbc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000300)) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000280)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x2, 0x0, [0x200]}}) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r12, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r11, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r13, r12, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.759180814s ago: executing program 2 (id=1798): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) readlinkat(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3fc0, &(0x7f0000000240)={0x0, 0x7f, 0x40, 0x2, 0xeb, 0x0, r0}, &(0x7f00000013c0), &(0x7f0000001400)) syz_io_uring_setup(0x2012ac, &(0x7f00000002c0)={0x0, 0x7498, 0x0, 0xffffffff, 0x44, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000140)=0x9, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000180), 0x4) sendto$inet6(r4, &(0x7f00000000c0)="14", 0x1, 0x8000004, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000003c0)=""/4096, &(0x7f00000001c0)=0x1000) socketpair(0x26, 0x2ec8eaa42627ec2f, 0x5, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast1}, 0x0, 0x0, 0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9a83410861246206ec60102030109021b000100090582024000"/45], 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0xc, 0xd, 0xffffe5a7, 0xffffffbe, 0x9, 0x3, 0x6, r9}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001440)={0x1000, 0x8006, 0x101, 0xbeef, r9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8001420, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x21b, 0x109880}) 7.730400885s ago: executing program 1 (id=1804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0xfffffffffffffffe, 0x80000000000007}, &(0x7f0000000280)={0x77359400}, 0x0) 7.300193962s ago: executing program 3 (id=1806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7.217111969s ago: executing program 3 (id=1807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x8001}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000280)="f30f1ecfd92b66b8010000000f01d966b9c40d000066b80080000066ba000000000f30f2abb811010f00d03664650f01c3e800d065dac80f21ac", 0x3a}], 0x1, 0x69, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$kcm(0xa, 0x5, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x8e, 0x2f}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1c, 0x15, 0xc3, 0x8, 0x2040, 0x9301, 0xe4fb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9a, 0xf0, 0x3}}]}}]}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, &(0x7f0000000600)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000340)={&(0x7f0000000500)=[{0x8, 0x4a00, 0x0, 0x0}, {0x9, 0x200, 0x0, 0x0}], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.716480339s ago: executing program 1 (id=1808): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xffffff8d) 6.659372783s ago: executing program 1 (id=1809): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 6.600779794s ago: executing program 2 (id=1810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @loopback}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x1000, 0xa0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x20) openat(r3, &(0x7f0000000100)='./file0\x00', 0x240800, 0x20) 6.46454268s ago: executing program 2 (id=1811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[], 0xfffffe2b}, 0x1, 0x0, 0x0, 0x20000040}, 0xff8d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) 6.322499588s ago: executing program 6 (id=1812): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x6, 0x0, 0x20000000, 0x0, 0xfffffffc}}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000140)) 5.468250868s ago: executing program 2 (id=1814): syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xa, 0x24, 0x7, 0x0, 0x0, 0x0, "8e781f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xfe, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x3, 0xf3, 0x0, "53534c494405595672"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x1, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xd86}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0x58, 0x4}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x40, 0x22, 0x101, {0x101, 0x1, "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"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xd, 0x8041580, 0x80, 0x3ff, 0x3, 0x9, 0x0, 0x0, 0x100, 0x4}}, 0x50) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x118}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc091}, 0xc010) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002440)={0x80, 0x0, r2, [{0x2, 0x49d, 0xc, 0xd88, ')-)!{^.#+\'*M'}, {0x3, 0x9, 0x1, 0x200, '\x00'}, {0x5, 0x5, 0xa, 0x4, '/dev/fuse\x00'}]}, 0x80) 5.467795119s ago: executing program 6 (id=1815): prlimit64(0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)}, {&(0x7f00000012c0)="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", 0x4cd}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0x50) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 4.4079948s ago: executing program 1 (id=1817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) read(r2, &(0x7f0000000200)=""/202, 0xca) tkill(r1, 0x11) open$dir(&(0x7f0000000040)='./file0\x00', 0x840, 0x2) 4.159730408s ago: executing program 6 (id=1819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffe4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x8000) 4.020297638s ago: executing program 1 (id=1820): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x1, @raw_data="e7416485b8a622cf0490d63fdf4b8db2a3525405edf926f3965c51e1051a4ffd2a7a49d3c70725b015399835bf91c7621a2e3da4d9d3f5597fd57e8f2961320038b85e83123e7a9cacbcf4e8070b7ab2c562e5e910c4d6ed73bf9e8684513e6e65fc759f68373128a9ea7fac3ca9e3a9a24a00832c77605a6392c7bf63a1b4b82447d2bea0772e26a9c8baa8053b6804b6fa796ae23767d773e0114438e24aaf671a22b13cb4759a9a7b5c9a64d86e1d5afeb19029cc28bad08caac0815c66199a0e26df1bd84b04"}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, 0x0) 3.43138976s ago: executing program 4 (id=1821): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x24004801) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000004) setsockopt(r4, 0x84, 0x1000080, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r7, 0x6a98047402e98331, 0x70bd2e, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x5}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.424739069s ago: executing program 3 (id=1822): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="682400003e000701feffffff00000040037c000008004280040008000c000180060020"], 0x2468}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 3.364131678s ago: executing program 6 (id=1823): r0 = getpid() (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000001000000008000100", @ANYRES32=0x0, @ANYBLOB="060011"], 0x24}}, 0x0) (async, rerun: 32) r6 = syz_pidfd_open(r0, 0x0) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r7}, 0x10) (async) pselect6(0x40, &(0x7f0000000040)={0x5, 0x1ff, 0x7, 0x3d, 0x2, 0x7, 0x5, 0x3}, &(0x7f0000000080)={0x1, 0x7, 0x2, 0xfffffffffffffff9, 0x4, 0xb, 0x3, 0xe44aaa4}, &(0x7f0000000100)={0x1, 0xffffffff80000000, 0x2, 0x2, 0x5, 0x7, 0x3, 0x80000000}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c00024000000000000000030800034000000020080004"], 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r10 = socket$kcm(0x21, 0x2, 0x2) (async) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x400, 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000600)='%pK \x00'}, 0x20) ppoll(&(0x7f0000000680)=[{r11, 0x20}, {r9, 0x2008}, {r3, 0x100}, {r9, 0x1132}, {r6, 0x9014}, {r8, 0x6000}, {r12, 0x5}, {r3, 0x4008}], 0x8, &(0x7f00000006c0)={0x77359400}, &(0x7f0000000700)={[0x4]}, 0x8) (async, rerun: 32) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) (rerun: 32) r13 = syz_open_dev$usbfs(&(0x7f0000000400), 0xf, 0x2080) ioctl$USBDEVFS_FREE_STREAMS(r13, 0x8008551d, &(0x7f0000000440)=ANY=[@ANYBLOB="ca3700001b0000008c058a04008e08028e048a810ef6d6038c880d058d870600000000"]) (async) close_range(r6, 0xffffffffffffffff, 0x0) 2.392228654s ago: executing program 3 (id=1824): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600000fa00703afffe800000000000000000000000000010ff02000000000000000000000000000186009078000000000000000000000000180aa78c000005dc8080a2e85918cced1ee85587aafaffffffff6b98747ab28702f0e2f4ffffff23732472eefa45ad965788a4ea70254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af05020001000000110000000000000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000480)="7800000018002507b9409b14ffff00000204be3f020506050e0204094300080004000000040011000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x8040, 0x0, 0x0) 2.231363433s ago: executing program 4 (id=1825): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0xb8, 0x320, 0x238, 0x150, 0x320, 0x408, 0xb8, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'lo\x00', 'veth0_macvtap\x00', {0xff}, {}, 0xff, 0x0, 0x50}, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x300}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x620e, {0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xffffffff, 0xff, 'veth0_to_batadv\x00', 'bond0\x00', {0xff}, {}, 0x84, 0x1, 0x17}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0x0, 0xff000000, 'dummy0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x0, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x2, 0x3}, {0x3, 0x3, 0x7}}}}, {{@ip={@local, @remote, 0x0, 0xffffffff, 'ipvlan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x2}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 2.165062546s ago: executing program 6 (id=1826): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blo']) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019300)=""/102384, 0x18ff0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20048000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.64806463s ago: executing program 4 (id=1827): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) creat(0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c, 0x0, 0x20000000}, 0x28) 1.485024935s ago: executing program 3 (id=1828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.267741214s ago: executing program 2 (id=1829): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0xfffc, 0x41, 0x2}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x2, 0x2, 0x2e, 0xde, 0x0, r1, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000feffffff3900000008000300", @ANYRES32, @ANYBLOB="10005a800c01"], 0x2c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) clock_gettime(0xfeffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 862.293575ms ago: executing program 4 (id=1830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000002c0)=@random="8c", 0x1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 666.465702ms ago: executing program 4 (id=1831): syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = socket(0x25, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f01e, 0x19}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0xfffffffd) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r10 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a5c000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007323b12aac8fedc1b0797a3000000000080005400000000c0800034000000008080007400000002e080006400000000008000f4000000002140000001000010000000000"], 0x84}}, 0x0) memfd_create(&(0x7f0000000180)='fd/3\x00', 0x1) r12 = fsmount(r10, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x209800500, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0x58) 343.580095ms ago: executing program 1 (id=1832): sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000680)}, 0x40840) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="400d21000000de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x401, 0x101000) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x80000) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x0, 0x7, 0xcf, {0xcf, 0x2, "24233c7280ebf3bd168016c6bbedc76f0dfd16145c14627e55efdc1f7eb3be3cb12c0bc426fec2dca1b20ceb98ad0adedc69b6183d10218996c398494dd48a0016463fba0d0b3963f767852a4138ebef395ab74c4c9353448b990f58713f8c117964d1b7b67dd5ca0bfb7d1484df45fb4807ef207f2fa4edf5c5a35962efd6352a1c967dc09c59661b5e3b8618d29a81774e79189196f032af94c9e44ca26ec7e1293b4f20f2aa5630cc57d0c161b04a6102afd87c304470ec30c6a9b512ae21867264c27b8186b12c5832a52e"}}, &(0x7f0000000300)=ANY=[@ANYBLOB="99b90400000004030304"], &(0x7f0000000340)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x69, "62f31a4d8cdcee829cb41e9bc442aa96"}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x77bd, 0xf000, 0x16b5, [0xff0000, 0xc00f, 0x30, 0xff0000, 0xff000f, 0x30]}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x8, 0x2, '\a%\";', "a6df3685"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x5, 0x7, 0x2, 0x0, 0x3ff}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x40, 0x15, 0xdf, "38a824dbf2508fcd5915248e1d84e1b960708473adef1c529f0d1a9f82b8b758dd3240bd918a696f27dcadb5801169c7022001194ec33500089167b6bdcac7bf86f57827bfc8bc5ffcfcf2c38adbd5f97504124197a26799a31d343e7ee882a97d2dee3b5c2776bb23c9a43598e8f90c5c441ac5a77ec71c9c3132d74861916b1c35790cc0c66fc2835d7ed51c540a9ad29219296fe998a77032bfccda2b43e23340b5e3ea169d39edf2c7985443e49948122314816c0af83c41ceb0737a55d3674a22328adc4c0e680c008e4ad04db5c22a2058c212eaaacacc38ba3b4ae8"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0xb, 0x2, '&E'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="8d8263d9b054"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "b72e"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x3a}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xb5, 0x76, 0x1, '\x00', 0x3}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x200, 0x3006}) 327.327947ms ago: executing program 6 (id=1833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000a10000000000000000000500850000006d00000007000000000000009561a56ba033a5d019b11ea0757c75cd383355beb1a113fc4879fdcd35eb4c27ed66b014cec9a4877f697449f486e519cba86efe62322a25db6c782d7e93883afcfb7839dcdf6778fdafbe869e4524ae3cdbfe1a5a862dde3ad4a5394080529a7bd5c01cb02a49680a322ac0f24ce5fe5496d7f9a412bdf3f9bea1b3f22a135381809bd46057685fa0c4402341908548383514645595a1210bc3d8671b5b169e4e329653a0d03abc8e3990b4fc5bb84c54e8678ca3c0bcbd396a0537"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 234.738568ms ago: executing program 2 (id=1834): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r3], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 0s ago: executing program 4 (id=1835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r11, &(0x7f0000000080), 0x0}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000380)={@loopback, 0x2, 0x2, 0x3, 0x0, 0x9, 0x29}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): alid_pcr cause=ToMToU comm="syz.3.1350" name="/newroot/273/bus/file0" dev="overlay" ino=1455 res=1 errno=0 [ 379.625152][T10746] FAULT_INJECTION: forcing a failure. [ 379.625152][T10746] name failslab, interval 1, probability 0, space 0, times 0 [ 379.667925][T10746] CPU: 0 UID: 0 PID: 10746 Comm: syz.6.1354 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 379.667950][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.667959][T10746] Call Trace: [ 379.667965][T10746] [ 379.667971][T10746] dump_stack_lvl+0x16c/0x1f0 [ 379.667999][T10746] should_fail_ex+0x512/0x640 [ 379.668023][T10746] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 379.668048][T10746] should_failslab+0xc2/0x120 [ 379.668074][T10746] __kmalloc_cache_node_noprof+0x6d/0x420 [ 379.668098][T10746] ? __get_vm_area_node+0x101/0x330 [ 379.668121][T10746] __get_vm_area_node+0x101/0x330 [ 379.668143][T10746] __vmalloc_node_range_noprof+0x271/0x14b0 [ 379.668163][T10746] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 379.668185][T10746] ? find_held_lock+0x2b/0x80 [ 379.668208][T10746] ? avc_has_perm_noaudit+0x117/0x3b0 [ 379.668233][T10746] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 379.668260][T10746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 379.668281][T10746] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 379.668313][T10746] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 379.668332][T10746] __vmalloc_node_noprof+0xad/0xf0 [ 379.668351][T10746] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 379.668371][T10746] bpf_prog_alloc_no_stats+0x54/0x630 [ 379.668388][T10746] ? security_capable+0x7e/0x260 [ 379.668410][T10746] bpf_prog_alloc+0x3b/0x230 [ 379.668428][T10746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.668449][T10746] bpf_prog_load+0x1a04/0x2490 [ 379.668479][T10746] ? __pfx_bpf_prog_load+0x10/0x10 [ 379.668501][T10746] ? avc_has_perm_noaudit+0x149/0x3b0 [ 379.668536][T10746] ? selinux_bpf+0xde/0x130 [ 379.668552][T10746] ? bpf_lsm_bpf+0x9/0x10 [ 379.668573][T10746] __sys_bpf+0x433c/0x4d80 [ 379.668601][T10746] ? __pfx___sys_bpf+0x10/0x10 [ 379.668625][T10746] ? ksys_write+0x190/0x250 [ 379.668652][T10746] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 379.668692][T10746] ? fput+0x70/0xf0 [ 379.668709][T10746] ? ksys_write+0x1ac/0x250 [ 379.668730][T10746] ? __pfx_ksys_write+0x10/0x10 [ 379.668757][T10746] __x64_sys_bpf+0x78/0xc0 [ 379.668781][T10746] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.668804][T10746] do_syscall_64+0xcd/0x4c0 [ 379.668830][T10746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.668848][T10746] RIP: 0033:0x7f5dec58e929 [ 379.668862][T10746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.668877][T10746] RSP: 002b:00007f5ded3a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.668894][T10746] RAX: ffffffffffffffda RBX: 00007f5dec7b5fa0 RCX: 00007f5dec58e929 [ 379.668905][T10746] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 379.668914][T10746] RBP: 00007f5ded3a9090 R08: 0000000000000000 R09: 0000000000000000 [ 379.668922][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.668929][T10746] R13: 0000000000000001 R14: 00007f5dec7b5fa0 R15: 00007ffdaed61db8 [ 379.668953][T10746] [ 379.962051][T10746] syz.6.1354: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 379.978468][T10746] CPU: 0 UID: 0 PID: 10746 Comm: syz.6.1354 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 379.978491][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.978497][T10746] Call Trace: [ 379.978502][T10746] [ 379.978506][T10746] dump_stack_lvl+0x16c/0x1f0 [ 379.978525][T10746] warn_alloc+0x248/0x3a0 [ 379.978542][T10746] ? __pfx_warn_alloc+0x10/0x10 [ 379.978558][T10746] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 379.978574][T10746] ? __kasan_kmalloc+0x8a/0xb0 [ 379.978589][T10746] ? __get_vm_area_node+0x208/0x330 [ 379.978604][T10746] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 379.978618][T10746] ? find_held_lock+0x2b/0x80 [ 379.978632][T10746] ? avc_has_perm_noaudit+0x117/0x3b0 [ 379.978645][T10746] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 379.978661][T10746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 379.978675][T10746] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 379.978695][T10746] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 379.978707][T10746] __vmalloc_node_noprof+0xad/0xf0 [ 379.978719][T10746] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 379.978733][T10746] bpf_prog_alloc_no_stats+0x54/0x630 [ 379.978746][T10746] ? security_capable+0x7e/0x260 [ 379.978760][T10746] bpf_prog_alloc+0x3b/0x230 [ 379.978771][T10746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.978786][T10746] bpf_prog_load+0x1a04/0x2490 [ 379.978805][T10746] ? __pfx_bpf_prog_load+0x10/0x10 [ 379.978819][T10746] ? avc_has_perm_noaudit+0x149/0x3b0 [ 379.978839][T10746] ? selinux_bpf+0xde/0x130 [ 379.978849][T10746] ? bpf_lsm_bpf+0x9/0x10 [ 379.978862][T10746] __sys_bpf+0x433c/0x4d80 [ 379.978879][T10746] ? __pfx___sys_bpf+0x10/0x10 [ 379.978895][T10746] ? ksys_write+0x190/0x250 [ 379.978912][T10746] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 379.978937][T10746] ? fput+0x70/0xf0 [ 379.978947][T10746] ? ksys_write+0x1ac/0x250 [ 379.978961][T10746] ? __pfx_ksys_write+0x10/0x10 [ 379.978978][T10746] __x64_sys_bpf+0x78/0xc0 [ 379.978994][T10746] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.979009][T10746] do_syscall_64+0xcd/0x4c0 [ 379.979026][T10746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.979037][T10746] RIP: 0033:0x7f5dec58e929 [ 379.979047][T10746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.979058][T10746] RSP: 002b:00007f5ded3a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.979073][T10746] RAX: ffffffffffffffda RBX: 00007f5dec7b5fa0 RCX: 00007f5dec58e929 [ 379.979080][T10746] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 379.979087][T10746] RBP: 00007f5ded3a9090 R08: 0000000000000000 R09: 0000000000000000 [ 379.979093][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.979099][T10746] R13: 0000000000000001 R14: 00007f5dec7b5fa0 R15: 00007ffdaed61db8 [ 379.979112][T10746] [ 379.979116][T10746] Mem-Info: [ 379.991112][ T50] Bluetooth: hci6: command 0x1003 tx timeout [ 379.991197][ T5835] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 380.277072][T10746] active_anon:30214 inactive_anon:0 isolated_anon:0 [ 380.277072][T10746] active_file:18257 inactive_file:40737 isolated_file:0 [ 380.277072][T10746] unevictable:768 dirty:885 writeback:0 [ 380.277072][T10746] slab_reclaimable:12230 slab_unreclaimable:109037 [ 380.277072][T10746] mapped:51961 shmem:21682 pagetables:1478 [ 380.277072][T10746] sec_pagetables:0 bounce:0 [ 380.277072][T10746] kernel_misc_reclaimable:0 [ 380.277072][T10746] free:1243381 free_pcp:19689 free_cma:0 [ 380.401293][T10746] Node 0 active_anon:108800kB inactive_anon:0kB active_file:73080kB inactive_file:162744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163228kB dirty:3604kB writeback:0kB shmem:73344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12916kB pagetables:5820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 380.454088][T10746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 380.504075][T10746] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.540638][T10746] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 380.548260][T10746] Node 0 DMA32 free:1070224kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102376kB inactive_anon:0kB active_file:73080kB inactive_file:161428kB unevictable:1536kB writepending:3704kB present:3129332kB managed:2540080kB mlocked:0kB bounce:0kB free_pcp:68160kB local_pcp:24044kB free_cma:0kB [ 380.600629][T10746] lowmem_reserve[]: 0 0 1 1 1 [ 380.605767][T10746] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 380.753678][T10746] lowmem_reserve[]: 0 0 0 0 0 [ 380.768559][T10746] Node 1 Normal free:3887940kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:29500kB local_pcp:18976kB free_cma:0kB [ 380.835501][ T30] audit: type=1400 audit(1751841296.195:953): avc: denied { listen } for pid=10750 comm="syz.4.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 380.878655][T10746] lowmem_reserve[]: 0 0 0 0 0 [ 380.888725][T10746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 380.920666][T10746] Node 0 DMA32: 504*4kB (UM) 257*8kB (UM) 538*16kB (UM) 68*32kB (UME) 28*64kB (UME) 8*128kB (UE) 3*256kB (UM) 2*512kB (UE) 2*1024kB (U) 2*2048kB (UE) 258*4096kB (UM) = 1082376kB [ 380.941974][T10754] vivid-004: disconnect [ 380.948147][ T30] audit: type=1400 audit(1751841296.305:954): avc: denied { read } for pid=10750 comm="syz.4.1356" lport=37017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.010901][T10746] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 381.040621][T10746] Node 1 Normal: 11*4kB (UE) 7*8kB (UE) 6*16kB (UE) 4*32kB (UME) 4*64kB (UME) 6*128kB (UE) 4*256kB (U) 5*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3887940kB [ 381.091501][T10746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.120639][T10746] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 381.150703][T10746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.181466][T10746] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 381.252593][T10746] 65998 total pagecache pages [ 381.257420][T10746] 0 pages in swap cache [ 381.263156][T10746] Free swap = 124996kB [ 381.267406][T10746] Total swap = 124996kB [ 382.209660][T10746] 2097051 pages RAM [ 382.216457][T10750] vivid-004: reconnect [ 382.224261][T10746] 0 pages HighMem/MovableOnly [ 382.231769][T10746] 430053 pages reserved [ 382.235969][T10746] 0 pages cma reserved [ 382.423635][ T30] audit: type=1400 audit(1751841297.785:955): avc: denied { append } for pid=10757 comm="syz.3.1359" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 383.810667][ T30] audit: type=1400 audit(1751841299.075:956): avc: denied { bind } for pid=10767 comm="syz.2.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 383.834797][ T30] audit: type=1400 audit(1751841299.075:957): avc: denied { setopt } for pid=10767 comm="syz.2.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.199112][ T30] audit: type=1400 audit(1751841299.555:958): avc: denied { nlmsg_read } for pid=10784 comm="syz.2.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 384.580752][T10791] FAULT_INJECTION: forcing a failure. [ 384.580752][T10791] name failslab, interval 1, probability 0, space 0, times 0 [ 384.595633][ T30] audit: type=1400 audit(1751841299.655:959): avc: denied { create } for pid=10784 comm="syz.2.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 384.626479][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.3.1363 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 384.626503][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.626513][T10791] Call Trace: [ 384.626518][T10791] [ 384.626525][T10791] dump_stack_lvl+0x16c/0x1f0 [ 384.626553][T10791] should_fail_ex+0x512/0x640 [ 384.626576][T10791] ? fs_reclaim_acquire+0xae/0x150 [ 384.626596][T10791] ? tomoyo_encode2+0x100/0x3e0 [ 384.626619][T10791] should_failslab+0xc2/0x120 [ 384.626642][T10791] __kmalloc_noprof+0xd2/0x510 [ 384.626665][T10791] ? d_absolute_path+0x136/0x1a0 [ 384.626688][T10791] tomoyo_encode2+0x100/0x3e0 [ 384.626714][T10791] tomoyo_encode+0x29/0x50 [ 384.626736][T10791] tomoyo_realpath_from_path+0x18f/0x6e0 [ 384.626767][T10791] tomoyo_path_number_perm+0x245/0x580 [ 384.626787][T10791] ? tomoyo_path_number_perm+0x237/0x580 [ 384.626812][T10791] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.626836][T10791] ? find_held_lock+0x2b/0x80 [ 384.626881][T10791] ? find_held_lock+0x2b/0x80 [ 384.626902][T10791] ? hook_file_ioctl_common+0x145/0x410 [ 384.626924][T10791] ? __fget_files+0x20e/0x3c0 [ 384.626953][T10791] security_file_ioctl+0x9b/0x240 [ 384.626978][T10791] __x64_sys_ioctl+0xb7/0x210 [ 384.627001][T10791] do_syscall_64+0xcd/0x4c0 [ 384.627027][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.627045][T10791] RIP: 0033:0x7ff1efd8e929 [ 384.627059][T10791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.627075][T10791] RSP: 002b:00007ff1f0be9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.627091][T10791] RAX: ffffffffffffffda RBX: 00007ff1effb5fa0 RCX: 00007ff1efd8e929 [ 384.627102][T10791] RDX: 00002000000000c0 RSI: 00000000c0205649 RDI: 0000000000000003 [ 384.627112][T10791] RBP: 00007ff1f0be9090 R08: 0000000000000000 R09: 0000000000000000 [ 384.627122][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.627132][T10791] R13: 0000000000000000 R14: 00007ff1effb5fa0 R15: 00007fffa9c3af98 [ 384.627161][T10791] [ 384.627177][T10791] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.800735][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 385.212193][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 385.221640][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.297878][ T24] usb 2-1: config 0 descriptor?? [ 385.850131][ T24] cp210x 2-1:0.0: cp210x converter detected [ 386.101691][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 386.683861][ T24] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 386.711438][ T24] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 386.735636][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 386.759039][T10814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1370'. [ 386.801099][ T24] usb 2-1: USB disconnect, device number 42 [ 386.842859][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 386.863466][ T24] cp210x 2-1:0.0: device disconnected [ 386.897403][T10816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10816 comm=syz.2.1371 [ 387.136163][T10828] netlink: 'syz.4.1373': attribute type 4 has an invalid length. [ 387.423813][T10834] lo speed is unknown, defaulting to 1000 [ 390.042721][ T5910] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 390.102951][ T30] audit: type=1400 audit(1751841305.465:960): avc: denied { accept } for pid=10880 comm="syz.3.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.251555][ T5910] usb 7-1: Using ep0 maxpacket: 32 [ 390.260475][ T5910] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 390.274351][ T5910] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 390.296525][ T5910] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 390.318106][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 390.361328][ T5910] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 390.528243][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 390.715263][ T5910] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 390.776052][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.826612][ T5910] usb 7-1: config 0 descriptor?? [ 390.948731][ T30] audit: type=1400 audit(1751841306.305:961): avc: denied { setopt } for pid=10891 comm="syz.2.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.968631][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.075772][ T5910] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 391.118694][ T5910] usb 7-1: USB disconnect, device number 9 [ 391.130820][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 391.150101][ T5910] usblp0: removed [ 391.310672][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 391.340829][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.353748][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.397249][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.434280][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 391.462839][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.502238][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 391.511407][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 391.536933][ T9] usb 4-1: Manufacturer: syz [ 391.600629][ T5910] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 391.603221][ T9] usb 4-1: config 0 descriptor?? [ 391.776062][ T5910] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 391.795094][ T5910] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 391.814119][ T5910] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 391.844904][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 391.875502][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 391.906839][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 391.950287][ T5910] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 391.980659][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.011367][ T5910] usb 7-1: config 0 descriptor?? [ 392.017012][T10862] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 392.032861][ T9] rc_core: IR keymap rc-hauppauge not found [ 392.044033][ T9] Registered IR keymap rc-empty [ 392.048991][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.086755][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.174270][T10913] can0: slcan on ttyS3. [ 392.333233][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 392.371561][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 392.382047][T10913] can0 (unregistered): slcan off ttyS3. [ 392.399301][ T5910] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 392.434777][ T5910] usb 7-1: USB disconnect, device number 10 [ 392.456486][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.494407][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.530854][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.556605][ T30] audit: type=1400 audit(1751841307.915:962): avc: denied { mounton } for pid=10920 comm="syz.6.1400" path="/62/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 392.587261][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.593809][ T5910] usblp0: removed [ 392.642100][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.672871][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.903730][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.036025][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.071534][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.105816][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.138939][ T9] mceusb 4-1:0.0: Registered ￲ with mce emulator interface version 1 [ 393.179398][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 393.195919][T10926] netlink: 'syz.1.1402': attribute type 10 has an invalid length. [ 393.204974][T10926] wlan1: mtu less than device minimum [ 393.210431][T10926] : (slave wlan1): Error -22 calling dev_set_mtu [ 393.232293][ T9] usb 4-1: USB disconnect, device number 49 [ 393.434825][ T30] audit: type=1400 audit(1751841308.775:963): avc: denied { mount } for pid=10927 comm="syz.6.1403" name="/" dev="rpc_pipefs" ino=34422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 393.601718][T10938] fuse: Unknown parameter '' [ 393.690934][ T30] audit: type=1400 audit(1751841308.775:964): avc: denied { mounton } for pid=10927 comm="syz.6.1403" path="/63/file0" dev="rpc_pipefs" ino=34422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 393.834864][T10941] ubi31: attaching mtd0 [ 393.848336][T10941] ubi31: scanning is finished [ 393.853121][T10941] ubi31: empty MTD device detected [ 394.118412][ T30] audit: type=1400 audit(1751841308.855:965): avc: denied { append } for pid=10933 comm="syz.2.1404" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 394.190965][T10941] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 394.198557][T10941] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 394.205944][T10941] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 394.213063][T10941] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 394.220549][T10941] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 394.227485][T10941] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 394.235624][T10941] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2414250355 [ 394.245738][T10941] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 394.257244][T10944] ubi31: background thread "ubi_bgt31d" started, PID 10944 [ 394.338173][ T30] audit: type=1400 audit(1751841309.695:966): avc: denied { unmount } for pid=9710 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 394.948613][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1412'. [ 396.392026][T10973] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1413'. [ 396.720196][ T30] audit: type=1400 audit(1751841312.075:967): avc: denied { read } for pid=10974 comm="syz.4.1414" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 396.791733][ T30] audit: type=1400 audit(1751841312.075:968): avc: denied { open } for pid=10974 comm="syz.4.1414" path="/286/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 397.599892][ T30] audit: type=1400 audit(1751841312.955:969): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.758869][ T30] audit: type=1400 audit(1751841312.955:970): avc: denied { open } for pid=5826 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.782875][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.789245][ T30] audit: type=1400 audit(1751841312.955:971): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.919593][ T30] audit: type=1400 audit(1751841313.045:972): avc: denied { bpf } for pid=10994 comm="syz.2.1420" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 397.971655][ T30] audit: type=1400 audit(1751841313.065:973): avc: denied { read } for pid=10989 comm="syz.1.1419" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 398.002108][ T30] audit: type=1400 audit(1751841313.065:974): avc: denied { open } for pid=10989 comm="syz.1.1419" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 398.028204][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 398.037792][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 398.914318][ T30] audit: type=1400 audit(1751841313.095:975): avc: denied { map_create } for pid=10989 comm="syz.1.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.933442][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.999995][ T30] audit: type=1400 audit(1751841313.095:976): avc: denied { perfmon } for pid=10989 comm="syz.1.1419" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.740338][T11023] orangefs_mount: mount request failed with -4 [ 401.594395][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 401.950674][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 401.950711][ T30] audit: type=1400 audit(1751841317.165:1016): avc: denied { create } for pid=11037 comm="syz.1.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.181592][ T30] audit: type=1400 audit(1751841317.235:1017): avc: denied { ioctl } for pid=11037 comm="syz.1.1430" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34622 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 402.244621][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 402.263784][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 402.276798][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.375585][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 402.410212][ T9] pvrusb2: ********** [ 402.415218][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 402.454449][ T30] audit: type=1400 audit(1751841317.805:1018): avc: denied { create } for pid=11043 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 402.535002][ T9] pvrusb2: Important functionality might not be entirely working. [ 402.543792][ T5971] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 403.320312][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 403.331821][ T30] audit: type=1400 audit(1751841317.805:1019): avc: denied { write } for pid=11043 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 403.331863][ T30] audit: type=1400 audit(1751841317.805:1020): avc: denied { bind } for pid=11043 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.331898][ T30] audit: type=1400 audit(1751841317.865:1021): avc: denied { create } for pid=11043 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 403.331930][ T30] audit: type=1400 audit(1751841317.865:1022): avc: denied { bind } for pid=11043 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 403.455031][ T9] pvrusb2: ********** [ 403.460160][ T30] audit: type=1400 audit(1751841317.875:1023): avc: denied { read } for pid=11043 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 403.493952][ T2336] pvrusb2: Invalid write control endpoint [ 403.511790][ T5971] usb 7-1: Using ep0 maxpacket: 16 [ 403.519880][ T5971] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.536973][ T5971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.560633][ T30] audit: type=1400 audit(1751841318.895:1024): avc: denied { create } for pid=11048 comm="syz.4.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.561102][ T5971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.616111][ T2336] pvrusb2: Invalid write control endpoint [ 403.627606][ T30] audit: type=1400 audit(1751841318.895:1025): avc: denied { ioctl } for pid=11048 comm="syz.4.1434" path="socket:[35618]" dev="sockfs" ino=35618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.628659][ T5971] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.669723][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 403.710944][ T10] usb 6-1: Failed to load image "edgeport/boot.fw" err -110 [ 403.722732][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 403.730342][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 403.738958][ T10] usb 6-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 403.752668][ T2336] pvrusb2: Device being rendered inoperable [ 403.767256][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 403.775271][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 403.800788][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 403.827092][ T10] usb 6-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 403.835527][ T5971] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.847106][ T2336] pvrusb2: Attached sub-driver cx25840 [ 403.852659][ T9448] Restarting kernel threads ... [ 403.859806][ T9448] Done restarting kernel threads. [ 403.881659][ T10] usb 6-1: USB disconnect, device number 8 [ 403.958220][ T5971] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.971372][ T5971] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.989173][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 404.003634][ T5971] usb 7-1: Manufacturer: syz [ 404.012849][ T10] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 404.033093][ T5971] usb 7-1: config 0 descriptor?? [ 404.038224][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 404.039903][ T10] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 404.077483][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 404.078019][ T10] io_edgeport 6-1:162.209: device disconnected [ 404.118209][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 404.140960][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 404.159618][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 404.183556][ T24] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 404.198125][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.206729][ T24] usb 2-1: Product: syz [ 404.253249][ T24] usb 2-1: Manufacturer: syz [ 404.258338][ T24] usb 2-1: SerialNumber: syz [ 404.301658][ T24] usb 2-1: config 0 descriptor?? [ 404.322899][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.337292][ T24] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 404.402512][ T5971] rc_core: IR keymap rc-hauppauge not found [ 404.408511][ T5971] Registered IR keymap rc-empty [ 404.415638][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.460885][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.492565][ T5971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 404.506604][ T5971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 404.530223][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.552948][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.560798][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.600683][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.630668][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.652162][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.660680][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.690701][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.720646][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.750664][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.759497][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.780710][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.831001][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.840992][ T5910] usb 3-1: USB disconnect, device number 37 [ 404.873770][ T5971] mceusb 7-1:0.0: Registered ￲ with mce emulator interface version 1 [ 404.916140][ T5971] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.955780][ T5971] usb 7-1: USB disconnect, device number 11 [ 405.143172][ T24] scsi host1: usb-storage 2-1:0.0 [ 405.176154][ T12] bridge_slave_1: left allmulticast mode [ 405.178938][ T24] usb 2-1: USB disconnect, device number 43 [ 405.190416][ T12] bridge_slave_1: left promiscuous mode [ 405.209666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.226168][ T12] bridge_slave_0: left allmulticast mode [ 405.232799][ T12] bridge_slave_0: left promiscuous mode [ 405.273442][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.390915][ T5910] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 405.564813][ T5910] usb 3-1: device descriptor read/64, error -71 [ 405.767060][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.791114][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.812536][ T5910] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 405.814092][ T12] bond0 (unregistering): Released all slaves [ 405.991361][ T5910] usb 3-1: device descriptor read/64, error -71 [ 406.101064][ T5910] usb usb3-port1: attempt power cycle [ 406.660813][ T5910] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 406.861271][ T5910] usb 3-1: device descriptor read/8, error -71 [ 407.125543][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 407.125557][ T30] audit: type=1400 audit(1751841322.485:1084): avc: denied { create } for pid=11116 comm="syz.3.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.160668][ T5910] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 407.213995][ T5910] usb 3-1: device descriptor read/8, error -71 [ 407.233833][ T30] audit: type=1400 audit(1751841322.515:1085): avc: denied { write } for pid=11116 comm="syz.3.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.290033][ T12] hsr_slave_0: left promiscuous mode [ 407.308300][ T30] audit: type=1400 audit(1751841322.515:1086): avc: denied { nlmsg_write } for pid=11116 comm="syz.3.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.350896][ T12] hsr_slave_1: left promiscuous mode [ 407.356726][ T5910] usb usb3-port1: unable to enumerate USB device [ 407.373441][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.425819][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.502384][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.516188][ T30] audit: type=1400 audit(1751841322.875:1087): avc: denied { sys_module } for pid=11120 comm="syz.3.1446" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 407.621797][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.695443][ T30] audit: type=1400 audit(1751841323.005:1088): avc: denied { create } for pid=11120 comm="syz.3.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 407.905076][T11132] FAULT_INJECTION: forcing a failure. [ 407.905076][T11132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.930796][ T30] audit: type=1400 audit(1751841323.035:1089): avc: denied { write } for pid=11120 comm="syz.3.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 407.950780][ T30] audit: type=1400 audit(1751841323.035:1090): avc: denied { ioctl } for pid=11120 comm="syz.3.1446" path="socket:[35735]" dev="sockfs" ino=35735 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 407.998394][ T30] audit: type=1400 audit(1751841323.355:1091): avc: denied { read write } for pid=11133 comm="syz.2.1448" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 408.043658][T11132] CPU: 0 UID: 0 PID: 11132 Comm: syz.4.1447 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 408.043675][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.043682][T11132] Call Trace: [ 408.043686][T11132] [ 408.043690][T11132] dump_stack_lvl+0x16c/0x1f0 [ 408.043711][T11132] should_fail_ex+0x512/0x640 [ 408.043728][T11132] _copy_from_user+0x2e/0xd0 [ 408.043745][T11132] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 408.043759][T11132] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 408.043776][T11132] do_ipv6_setsockopt+0x865/0x4400 [ 408.043791][T11132] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 408.043802][T11132] ? avc_has_perm_noaudit+0x117/0x3b0 [ 408.043816][T11132] ? avc_has_perm_noaudit+0x149/0x3b0 [ 408.043828][T11132] ? avc_has_perm+0x11a/0x1c0 [ 408.043839][T11132] ? __pfx_avc_has_perm+0x10/0x10 [ 408.043855][T11132] ? sock_has_perm+0x259/0x2f0 [ 408.043873][T11132] ? __pfx_sock_has_perm+0x10/0x10 [ 408.043886][T11132] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 408.043903][T11132] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 408.043918][T11132] ? proc_fail_nth_write+0x9f/0x250 [ 408.043936][T11132] ? ipv6_setsockopt+0xcb/0x170 [ 408.043947][T11132] ipv6_setsockopt+0xcb/0x170 [ 408.043960][T11132] tcp_setsockopt+0xa4/0x100 [ 408.043977][T11132] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 408.043989][T11132] do_sock_setsockopt+0x221/0x470 [ 408.043999][T11132] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 408.044025][T11132] __sys_setsockopt+0x1a0/0x230 [ 408.044042][T11132] __x64_sys_setsockopt+0xbd/0x160 [ 408.044056][T11132] ? do_syscall_64+0x91/0x4c0 [ 408.044071][T11132] ? lockdep_hardirqs_on+0x7c/0x110 [ 408.044087][T11132] do_syscall_64+0xcd/0x4c0 [ 408.044103][T11132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.044114][T11132] RIP: 0033:0x7ff8fcd8e929 [ 408.044124][T11132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.044134][T11132] RSP: 002b:00007ff8fdc43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.044145][T11132] RAX: ffffffffffffffda RBX: 00007ff8fcfb5fa0 RCX: 00007ff8fcd8e929 [ 408.044152][T11132] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 408.044158][T11132] RBP: 00007ff8fdc43090 R08: 0000000000000310 R09: 0000000000000000 [ 408.044164][T11132] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 408.044170][T11132] R13: 0000000000000000 R14: 00007ff8fcfb5fa0 R15: 00007ffd404997a8 [ 408.044183][T11132] [ 408.301080][ T30] audit: type=1400 audit(1751841323.355:1092): avc: denied { open } for pid=11133 comm="syz.2.1448" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 408.404418][ T12] veth1_macvtap: left promiscuous mode [ 408.411445][ T12] veth0_macvtap: left promiscuous mode [ 408.417049][ T12] veth1_vlan: left promiscuous mode [ 408.422531][ T12] veth0_vlan: left promiscuous mode [ 408.439514][ T30] audit: type=1400 audit(1751841323.795:1093): avc: denied { write } for pid=11133 comm="syz.2.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.789266][T11145] overlayfs: conflicting lowerdir path [ 409.050895][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 409.246696][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.280628][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.296390][ T24] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 409.318366][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.347487][ T24] usb 7-1: config 0 descriptor?? [ 409.469582][ T12] team0 (unregistering): Port device team_slave_1 removed [ 409.545327][ T12] team0 (unregistering): Port device team_slave_0 removed [ 409.574809][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 409.588041][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 409.590699][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 409.623892][ T24] usb 7-1: USB disconnect, device number 12 [ 409.782465][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 409.793984][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 409.804093][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 409.813805][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 409.825936][ T10] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 409.835329][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.843712][ T10] usb 3-1: Product: syz [ 409.848016][ T10] usb 3-1: Manufacturer: syz [ 409.853409][ T10] usb 3-1: SerialNumber: syz [ 409.865893][ T10] usb 3-1: config 0 descriptor?? [ 409.875719][ T10] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 410.064352][T11170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.090719][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 410.280790][ T24] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 410.360910][ T24] usb 7-1: config 0 has no interface number 0 [ 410.367082][ T24] usb 7-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 410.379318][ T24] usb 7-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.389364][ T24] usb 7-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 410.399468][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 410.410831][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.452797][T11183] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 410.481370][ T24] usb 7-1: config 0 descriptor?? [ 410.775450][ T24] usb 7-1: string descriptor 0 read error: -71 [ 410.787315][ T24] keyspan 7-1:0.168: Keyspan 2 port adapter converter detected [ 410.822557][ T24] keyspan 7-1:0.168: found no endpoint descriptor for endpoint 1 [ 411.492140][ T24] keyspan 7-1:0.168: found no endpoint descriptor for endpoint 84 [ 411.520390][ T10] scsi host1: usb-storage 3-1:0.0 [ 411.526680][ T24] keyspan 7-1:0.168: found no endpoint descriptor for endpoint 2 [ 411.532266][ T10] usb 3-1: USB disconnect, device number 42 [ 411.589640][ T24] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 411.640020][ T24] keyspan 7-1:0.168: found no endpoint descriptor for endpoint 88 [ 411.654626][ T24] keyspan 7-1:0.168: found no endpoint descriptor for endpoint 6 [ 411.675685][ T24] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 411.714232][ T24] usb 7-1: USB disconnect, device number 13 [ 411.752910][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 411.801312][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 411.834111][ T24] keyspan 7-1:0.168: device disconnected [ 412.104076][ T5910] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 412.129709][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1464'. [ 412.140708][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 412.140718][ T30] audit: type=1400 audit(1751841327.485:1112): avc: denied { setcheckreqprot } for pid=11208 comm="syz.6.1464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 412.167924][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 412.290800][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 412.302737][ T5910] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 412.315649][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.330648][ T5910] usb 2-1: Product: syz [ 412.334853][ T5910] usb 2-1: Manufacturer: syz [ 412.339476][ T5910] usb 2-1: SerialNumber: syz [ 412.346632][ T5910] usb 2-1: config 0 descriptor?? [ 412.487534][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.526692][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 412.593378][ T10] usb 4-1: config 1 has no interface number 1 [ 412.646012][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 412.753199][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 412.805239][ T30] audit: type=1400 audit(1751841328.165:1113): avc: denied { create } for pid=11215 comm="syz.2.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 413.020323][ T30] audit: type=1400 audit(1751841328.375:1114): avc: denied { ioctl } for pid=11218 comm="syz.4.1466" path="socket:[36065]" dev="sockfs" ino=36065 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.085230][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.109696][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.160336][ T5910] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 413.160805][ T10] usb 4-1: Product: syz [ 413.189752][ T30] audit: type=1400 audit(1751841328.495:1115): avc: denied { append } for pid=11232 comm="syz.2.1467" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 413.242934][ T10] usb 4-1: Manufacturer: syz [ 413.268258][ T10] usb 4-1: SerialNumber: syz [ 413.305654][ T30] audit: type=1400 audit(1751841328.665:1116): avc: denied { setopt } for pid=11238 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.337866][T11206] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 413.406802][ T30] audit: type=1400 audit(1751841328.765:1117): avc: denied { ioctl } for pid=11238 comm="syz.4.1469" path="socket:[36084]" dev="sockfs" ino=36084 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 413.471265][ T30] audit: type=1400 audit(1751841328.825:1118): avc: denied { bind } for pid=11238 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.496763][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 413.507737][T11243] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1470'. [ 413.556770][ T30] audit: type=1400 audit(1751841328.915:1119): avc: denied { write } for pid=11238 comm="syz.4.1469" path="socket:[36083]" dev="sockfs" ino=36083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.919688][T11245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.927852][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 414.174865][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 414.182831][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 414.194026][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.214768][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.268378][ T9] usb 7-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 414.324512][ T10] usb 4-1: USB disconnect, device number 50 [ 414.330587][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.361604][ T9] usb 7-1: config 0 descriptor?? [ 414.409154][ T9] usbhid 7-1:0.0: can't add hid device: -22 [ 414.425009][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 414.446589][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.755208][T11255] input: syz0 as /devices/virtual/input/input27 [ 414.790978][ T30] audit: type=1400 audit(1751841330.105:1120): avc: denied { ioctl } for pid=11252 comm="syz.4.1472" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 415.242996][T11261] tipc: Started in network mode [ 415.248113][T11261] tipc: Node identity ac1414aa, cluster identity 4711 [ 415.260871][T11261] tipc: Enabled bearer , priority 10 [ 415.354385][ T30] audit: type=1400 audit(1751841330.215:1121): avc: denied { read } for pid=11252 comm="syz.4.1472" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 415.627780][ T10] usb 2-1: USB disconnect, device number 44 [ 415.742666][T11265] 9p: Unknown Cache mode or invalid value f%cache [ 416.105906][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 416.409161][ T10] tipc: Node number set to 2886997162 [ 416.832515][ T5935] usb 7-1: USB disconnect, device number 14 [ 416.881020][T11299] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 416.888823][T11299] netlink: 'syz.2.1482': attribute type 4 has an invalid length. [ 416.960273][T11299] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1482'. [ 417.160294][T11308] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 417.186916][T11307] netlink: 'syz.4.1483': attribute type 4 has an invalid length. [ 417.199151][T11308] netlink: 'syz.2.1482': attribute type 4 has an invalid length. [ 417.220973][T11305] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1484'. [ 417.233045][T11307] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1483'. [ 417.297891][T11308] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1482'. [ 417.360837][T11299] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 417.382594][T11299] netlink: 'syz.2.1482': attribute type 4 has an invalid length. [ 417.387080][T11308] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 417.429613][T11299] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1482'. [ 417.467390][T11308] netlink: 'syz.2.1482': attribute type 4 has an invalid length. [ 417.530824][T11308] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1482'. [ 417.630031][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 417.630044][ T30] audit: type=1400 audit(1751841332.985:1130): avc: denied { create } for pid=11318 comm="syz.4.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 417.772334][T11325] ptrace attach of "./syz-executor exec"[9710] was attempted by "./syz-executor exec"[11325] [ 417.978470][ T30] audit: type=1400 audit(1751841333.015:1131): avc: denied { mount } for pid=11317 comm="syz.6.1487" name="/" dev="hugetlbfs" ino=37228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 418.081989][ T30] audit: type=1400 audit(1751841333.025:1132): avc: denied { setopt } for pid=11318 comm="syz.4.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.127755][ T30] audit: type=1400 audit(1751841333.025:1133): avc: denied { write } for pid=11318 comm="syz.4.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.217567][ T30] audit: type=1400 audit(1751841333.435:1134): avc: denied { unmount } for pid=9710 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 418.887799][ T30] audit: type=1400 audit(1751841334.235:1135): avc: denied { shutdown } for pid=11339 comm="syz.4.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 419.876012][ T30] audit: type=1400 audit(1751841335.235:1136): avc: denied { create } for pid=11360 comm="syz.4.1496" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 419.934974][T11373] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1496'. [ 420.182706][T11361] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1496'. [ 420.187659][ T30] audit: type=1400 audit(1751841335.255:1137): avc: denied { kexec_image_load } for pid=11368 comm="syz.2.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 420.294798][ T30] audit: type=1400 audit(1751841335.265:1138): avc: denied { setopt } for pid=11368 comm="syz.2.1498" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 420.415291][ T30] audit: type=1400 audit(1751841335.285:1139): avc: denied { read write } for pid=11368 comm="syz.2.1498" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 421.671357][T11395] lo speed is unknown, defaulting to 1000 [ 423.127421][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 423.127945][ T30] audit: type=1400 audit(1751841338.465:1146): avc: denied { create } for pid=11403 comm="syz.4.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 423.596048][T11418] 9pnet_fd: Insufficient options for proto=fd [ 423.603175][ T30] audit: type=1400 audit(1751841338.955:1147): avc: denied { mounton } for pid=11412 comm="syz.1.1507" path="/311/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 423.740657][ T30] audit: type=1400 audit(1751841339.005:1148): avc: denied { bind } for pid=11412 comm="syz.1.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 423.946318][ T30] audit: type=1400 audit(1751841339.005:1149): avc: denied { name_bind } for pid=11412 comm="syz.1.1507" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 424.516977][ T30] audit: type=1400 audit(1751841339.005:1150): avc: denied { node_bind } for pid=11412 comm="syz.1.1507" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 424.589889][ T30] audit: type=1400 audit(1751841339.005:1151): avc: denied { setopt } for pid=11412 comm="syz.1.1507" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 424.729241][ T30] audit: type=1400 audit(1751841339.175:1152): avc: denied { read } for pid=11425 comm="syz.6.1509" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 425.078391][ T30] audit: type=1400 audit(1751841339.175:1153): avc: denied { open } for pid=11425 comm="syz.6.1509" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 425.188076][ T30] audit: type=1400 audit(1751841339.435:1154): avc: denied { read } for pid=11424 comm="syz.4.1510" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 425.291974][ T30] audit: type=1400 audit(1751841339.435:1155): avc: denied { open } for pid=11424 comm="syz.4.1510" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 425.890303][T11468] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 425.960787][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 426.470795][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 426.480430][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.495999][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 62: 82, using maximum allowed: 30 [ 426.520261][ T10] usb 3-1: config 0 interface 0 altsetting 62 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 426.556317][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 426.596161][ T10] usb 3-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 426.764562][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x4 [ 427.078005][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.087283][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.101208][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.146741][ T10] usb 3-1: config 0 descriptor?? [ 427.179061][T11482] FAULT_INJECTION: forcing a failure. [ 427.179061][T11482] name failslab, interval 1, probability 0, space 0, times 0 [ 427.215292][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.217496][T11482] CPU: 1 UID: 0 PID: 11482 Comm: syz.1.1523 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 427.217519][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.217529][T11482] Call Trace: [ 427.217534][T11482] [ 427.217540][T11482] dump_stack_lvl+0x16c/0x1f0 [ 427.217567][T11482] should_fail_ex+0x512/0x640 [ 427.217587][T11482] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 427.217611][T11482] should_failslab+0xc2/0x120 [ 427.217635][T11482] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 427.217655][T11482] ? __alloc_skb+0x2b2/0x380 [ 427.217679][T11482] __alloc_skb+0x2b2/0x380 [ 427.217698][T11482] ? __pfx___alloc_skb+0x10/0x10 [ 427.217721][T11482] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 427.217742][T11482] netlink_alloc_large_skb+0x69/0x130 [ 427.217758][T11482] netlink_sendmsg+0x6a1/0xdd0 [ 427.217778][T11482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.217802][T11482] ____sys_sendmsg+0xa95/0xc70 [ 427.217819][T11482] ? copy_msghdr_from_user+0x10a/0x160 [ 427.217840][T11482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.217866][T11482] ___sys_sendmsg+0x134/0x1d0 [ 427.217888][T11482] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.217907][T11482] ? __lock_acquire+0x622/0x1c90 [ 427.217949][T11482] __sys_sendmsg+0x16d/0x220 [ 427.217970][T11482] ? __pfx___sys_sendmsg+0x10/0x10 [ 427.218006][T11482] do_syscall_64+0xcd/0x4c0 [ 427.218029][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.218044][T11482] RIP: 0033:0x7fd2d6d8e929 [ 427.218056][T11482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.218071][T11482] RSP: 002b:00007fd2d4bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.218086][T11482] RAX: ffffffffffffffda RBX: 00007fd2d6fb5fa0 RCX: 00007fd2d6d8e929 [ 427.218096][T11482] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 427.218105][T11482] RBP: 00007fd2d4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.218114][T11482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.218123][T11482] R13: 0000000000000000 R14: 00007fd2d6fb5fa0 R15: 00007ffc406b6a98 [ 427.218144][T11482] [ 427.447965][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x2 [ 427.455774][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.463546][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.571432][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.576687][ T5935] usb 3-1: USB disconnect, device number 43 [ 427.609396][T11491] FAULT_INJECTION: forcing a failure. [ 427.609396][T11491] name failslab, interval 1, probability 0, space 0, times 0 [ 427.622169][T11491] CPU: 0 UID: 0 PID: 11491 Comm: syz.6.1526 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 427.622189][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.622199][T11491] Call Trace: [ 427.622205][T11491] [ 427.622212][T11491] dump_stack_lvl+0x16c/0x1f0 [ 427.622233][T11491] should_fail_ex+0x512/0x640 [ 427.622248][T11491] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 427.622264][T11491] should_failslab+0xc2/0x120 [ 427.622281][T11491] __kmalloc_cache_noprof+0x6a/0x3e0 [ 427.622293][T11491] ? do_raw_spin_lock+0x12c/0x2b0 [ 427.622306][T11491] ? find_held_lock+0x2b/0x80 [ 427.622319][T11491] ? create_io_worker+0xc9/0x5b0 [ 427.622332][T11491] ? create_io_worker+0x1f/0x5b0 [ 427.622341][T11491] create_io_worker+0xc9/0x5b0 [ 427.622352][T11491] io_wq_enqueue+0x4cc/0x980 [ 427.622384][T11491] ? __pfx_io_wq_enqueue+0x10/0x10 [ 427.622394][T11491] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 427.622417][T11491] io_queue_iowq+0x246/0x530 [ 427.622429][T11491] io_queue_sqe_fallback+0xcd/0x620 [ 427.622442][T11491] io_submit_sqes+0x130f/0x2580 [ 427.622464][T11491] __do_sys_io_uring_enter+0xd6a/0x1630 [ 427.622479][T11491] ? __fget_files+0x20e/0x3c0 [ 427.622495][T11491] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 427.622510][T11491] ? fput+0x70/0xf0 [ 427.622520][T11491] ? ksys_write+0x1ac/0x250 [ 427.622535][T11491] ? __pfx_ksys_write+0x10/0x10 [ 427.622554][T11491] do_syscall_64+0xcd/0x4c0 [ 427.622571][T11491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.622582][T11491] RIP: 0033:0x7f5dec58e929 [ 427.622591][T11491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.622602][T11491] RSP: 002b:00007f5ded3a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 427.622614][T11491] RAX: ffffffffffffffda RBX: 00007f5dec7b5fa0 RCX: 00007f5dec58e929 [ 427.622621][T11491] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 427.622627][T11491] RBP: 00007f5ded3a9090 R08: 0000000000000000 R09: 0000000000000000 [ 427.622634][T11491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.622640][T11491] R13: 0000000000000000 R14: 00007f5dec7b5fa0 R15: 00007ffdaed61db8 [ 427.622654][T11491] [ 427.852732][ T5910] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 427.852757][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.961078][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.968906][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.976723][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.984540][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 427.992462][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.000229][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.008545][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.016349][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.024150][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.031951][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.031972][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.050668][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.050668][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.050707][ T5910] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 428.059426][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.088830][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.110228][ T5910] usb 2-1: config 0 descriptor?? [ 428.157953][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.166126][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.173938][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.182175][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.189925][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.197811][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.205575][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.213375][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.221285][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.230411][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.240684][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.250694][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.258939][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.267503][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.275287][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.283031][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.293157][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.310157][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.318103][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.325898][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 428.339868][ T5971] hid-generic 0000:007F:FFFFFFFE.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 428.559634][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 428.559649][ T30] audit: type=1400 audit(1751841343.915:1166): avc: denied { write } for pid=11488 comm="syz.1.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 428.718799][T11518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1528'. [ 429.094631][T11510] fido_id[11510]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 429.162380][ T30] audit: type=1400 audit(1751841344.525:1167): avc: denied { read } for pid=11516 comm="syz.3.1529" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.185180][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.192072][T11517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1529'. [ 429.214697][ T30] audit: type=1400 audit(1751841344.525:1168): avc: denied { open } for pid=11516 comm="syz.3.1529" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.237935][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.287190][ T5910] uclogic 0003:256C:006D.000D: interface is invalid, ignoring [ 429.502341][ T5910] usb 2-1: USB disconnect, device number 45 [ 429.561675][ T30] audit: type=1326 audit(1751841344.925:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.3.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 429.982242][T11524] audit: audit_backlog=65 > audit_backlog_limit=64 [ 429.988743][T11524] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 429.996379][T11524] audit: backlog limit exceeded [ 430.019355][ T30] audit: type=1326 audit(1751841344.925:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.3.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1efd2ab19 code=0x7ffc0000 [ 430.272159][ T30] audit: type=1326 audit(1751841344.925:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.3.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 430.350674][ T30] audit: type=1326 audit(1751841344.925:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.3.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 430.462750][T11521] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 430.471297][T11521] macvlan0: entered promiscuous mode [ 430.476637][T11521] macvlan0: entered allmulticast mode [ 430.862046][ T7310] nci: nci_rsp_packet: unknown rsp opcode 0x101 [ 431.842341][T11576] SELinux: security_context_str_to_sid (l©Rl^º) failed with errno=-22 [ 431.975312][T11574] trusted_key: encrypted_key: key user:syz not found [ 433.956525][T11619] trusted_key: encrypted_key: key user:syz not found [ 435.990814][ T5910] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 436.043848][T11635] trusted_key: encrypted_key: key user:syz not found [ 436.325144][ T5910] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 436.372686][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.397318][ T5910] usb 4-1: Product: syz [ 436.407421][ T5910] usb 4-1: Manufacturer: syz [ 436.417530][ T5910] usb 4-1: SerialNumber: syz [ 436.431588][ T5910] usb 4-1: config 0 descriptor?? [ 436.448638][ T5910] ch341 4-1:0.0: ch341-uart converter detected [ 436.614703][ T5971] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 436.720724][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 436.771984][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 436.791287][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.803401][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.814555][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.828615][ T5971] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.840025][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.850869][ T24] usb 3-1: device descriptor read/64, error -71 [ 436.919490][ T5971] usb 2-1: config 0 descriptor?? [ 437.144927][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 437.290718][ T24] usb 3-1: device descriptor read/64, error -71 [ 437.306436][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 437.306453][ T30] audit: type=1400 audit(1751841352.665:1287): avc: denied { connect } for pid=11659 comm="syz.4.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 437.352422][T11663] loop2: detected capacity change from 0 to 7 [ 437.378365][T11663] Dev loop2: unable to read RDB block 7 [ 437.396496][ T5971] HID 045e:07da: Invalid code 65791 type 1 [ 437.400652][ T30] audit: type=1400 audit(1751841352.665:1288): avc: denied { name_connect } for pid=11659 comm="syz.4.1566" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 437.430703][T11663] loop2: AHDI p1 p2 p3 [ 437.440513][ T5971] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input28 [ 437.448856][T11666] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1565'. [ 437.461935][ T24] usb usb3-port1: attempt power cycle [ 437.462477][T11663] loop2: partition table partially beyond EOD, truncated [ 437.479002][ T5971] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 437.496758][T11663] loop2: p1 start 1601398130 is beyond EOD, truncated [ 437.509097][T11663] loop2: p2 start 1702059890 is beyond EOD, truncated [ 437.606582][ T5971] usb 2-1: USB disconnect, device number 46 [ 437.695025][ T5910] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 437.768536][T11671] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1568'. [ 437.778444][T11671] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1568'. [ 437.810632][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 437.833709][ T24] usb 3-1: device descriptor read/8, error -71 [ 437.897415][ T5971] usb 4-1: USB disconnect, device number 51 [ 437.923317][ T5971] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 437.946966][ T5971] ch341 4-1:0.0: device disconnected [ 438.199660][T11680] SELinux: syz.6.1569 (11680) set checkreqprot to 1. This is no longer supported. [ 438.272651][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 438.429627][ T24] usb 3-1: device descriptor read/8, error -71 [ 438.656343][ T24] usb usb3-port1: unable to enumerate USB device [ 439.279919][ T30] audit: type=1400 audit(1751841354.205:1289): avc: denied { create } for pid=11682 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 439.430048][ T30] audit: type=1400 audit(1751841354.215:1290): avc: denied { write } for pid=11682 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 439.516192][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.523075][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.617439][ T30] audit: type=1400 audit(1751841354.975:1291): avc: denied { create } for pid=11707 comm="syz.2.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 439.651387][T11712] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 439.661150][T11712] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 439.698551][T11712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=11712 comm=syz.1.1573 [ 439.700977][ T30] audit: type=1400 audit(1751841355.055:1292): avc: denied { create } for pid=11702 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 439.980862][ T974] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 440.050428][ T30] audit: type=1400 audit(1751841355.405:1293): avc: denied { write } for pid=11726 comm="syz.3.1579" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 440.110857][ T30] audit: type=1400 audit(1751841355.405:1294): avc: denied { ioctl } for pid=11726 comm="syz.3.1579" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 440.153135][ T974] usb 3-1: device descriptor read/64, error -71 [ 440.449022][ T30] audit: type=1400 audit(1751841355.715:1295): avc: denied { create } for pid=11722 comm="syz.6.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 440.486843][ T30] audit: type=1400 audit(1751841355.715:1296): avc: denied { bind } for pid=11722 comm="syz.6.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 440.530670][ T974] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 440.670634][ T974] usb 3-1: device descriptor read/64, error -71 [ 440.728589][T11742] pim6reg1: entered allmulticast mode [ 440.780812][ T974] usb usb3-port1: attempt power cycle [ 441.302905][ T974] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 441.375296][ T974] usb 3-1: device descriptor read/8, error -71 [ 441.650636][ T974] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 441.678671][ T974] usb 3-1: device descriptor read/8, error -71 [ 441.800873][ T974] usb usb3-port1: unable to enumerate USB device [ 442.893148][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1590'. [ 442.933123][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 442.933152][ T30] audit: type=1400 audit(1751841358.245:1304): avc: denied { mount } for pid=11764 comm="syz.2.1590" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 442.936435][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880571b8c00: rx timeout, send abort [ 442.954727][ T30] audit: type=1400 audit(1751841358.275:1305): avc: denied { read } for pid=11764 comm="syz.2.1590" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 442.961124][ C0] vkms_vblank_simulate: vblank timer overrun [ 442.970731][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880571b8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 442.992032][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.197927][T11777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1592'. [ 443.461181][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880571b8c00: abort rx timeout. Force session deactivation [ 443.572814][ T30] audit: type=1400 audit(1751841358.715:1306): avc: denied { bind } for pid=11773 comm="syz.3.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 443.618861][ T30] audit: type=1400 audit(1751841358.725:1307): avc: denied { ioctl } for pid=11773 comm="syz.3.1592" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 443.820656][ T30] audit: type=1400 audit(1751841358.735:1308): avc: denied { set_context_mgr } for pid=11773 comm="syz.3.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 443.905653][ T30] audit: type=1400 audit(1751841358.745:1309): avc: denied { write } for pid=11773 comm="syz.3.1592" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 443.991028][ T30] audit: type=1400 audit(1751841358.745:1310): avc: denied { map } for pid=11773 comm="syz.3.1592" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 444.016965][ T30] audit: type=1400 audit(1751841358.935:1311): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 444.132746][T11789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1593'. [ 444.269106][ T30] audit: type=1400 audit(1751841359.575:1312): avc: denied { call } for pid=11788 comm="syz.1.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 445.589086][T11806] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 445.625228][T11812] netlink: 'syz.2.1601': attribute type 1 has an invalid length. [ 445.861909][T11812] bond1: entered promiscuous mode [ 445.940027][T11812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.187142][ T30] audit: type=1400 audit(1751841361.435:1313): avc: denied { setopt } for pid=11831 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 446.311675][T11832] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 446.354928][T11817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.433000][T11817] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 446.444838][T11817] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 446.782809][T11817] bond1: (slave ip6gre1): making interface the new active one [ 446.790329][T11817] ip6gre1: entered promiscuous mode [ 446.941267][T11817] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 447.087013][T11855] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1606'. [ 447.374186][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 447.553884][T11867] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1611'. [ 448.161910][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 448.172404][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.183086][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 448.200134][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 448.217937][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 448.275244][ T24] usb 2-1: Manufacturer: syz [ 449.150274][ T24] usb 2-1: config 0 descriptor?? [ 449.780971][T11891] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1615'. [ 450.030589][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 450.195483][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 450.217411][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.229141][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.316264][ T24] usb 3-1: config 0 has no interface number 0 [ 450.359898][ T24] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 450.455660][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 450.539322][ T24] usb 3-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 450.621611][ T24] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.734984][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 450.794553][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.844342][ T24] usb 3-1: config 0 descriptor?? [ 450.938600][ T24] hso 3-1:0.1: Failed to find BULK OUT ep [ 450.982669][T11917] ip6tnl0: entered allmulticast mode [ 451.118179][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 451.118403][ T30] audit: type=1400 audit(1751841366.435:1315): avc: denied { mount } for pid=11915 comm="syz.3.1620" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 451.138036][ T24] usb 3-1: USB disconnect, device number 52 [ 451.372796][ T974] usb 2-1: USB disconnect, device number 47 [ 451.432360][T11915] ip6tnl0: left allmulticast mode [ 451.799763][ T30] audit: type=1400 audit(1751841367.145:1316): avc: denied { ioctl } for pid=11929 comm="syz.6.1623" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 451.905538][ T30] audit: type=1400 audit(1751841367.185:1317): avc: denied { setopt } for pid=11929 comm="syz.6.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.939805][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1625'. [ 452.150919][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1625'. [ 452.346409][ T30] audit: type=1400 audit(1751841367.705:1318): avc: denied { wake_alarm } for pid=11957 comm="syz.4.1629" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 452.960697][T11965] SELinux: syz.6.1631 (11965) set checkreqprot to 1. This is no longer supported. [ 453.050757][ T30] audit: type=1400 audit(1751841368.355:1319): avc: denied { getopt } for pid=11945 comm="syz.3.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 453.982891][ T30] audit: type=1400 audit(1751841369.155:1320): avc: denied { bind } for pid=11984 comm="syz.2.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 454.224679][ T30] audit: type=1400 audit(1751841369.565:1321): avc: denied { getopt } for pid=11957 comm="syz.4.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 454.708712][T11997] lo speed is unknown, defaulting to 1000 [ 454.887916][T12004] x_tables: duplicate underflow at hook 1 [ 455.090770][ T5910] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 455.314202][ T5910] usb 3-1: device descriptor read/64, error -71 [ 455.513931][T12015] dlm: non-version read from control device 2147479540 [ 455.590817][ T5910] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 455.781428][ T5910] usb 3-1: device descriptor read/64, error -71 [ 455.805043][ T30] audit: type=1400 audit(1751841371.135:1322): avc: denied { read } for pid=12016 comm="syz.6.1639" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 455.965473][ T30] audit: type=1400 audit(1751841371.135:1323): avc: denied { open } for pid=12016 comm="syz.6.1639" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 455.999944][ T5910] usb usb3-port1: attempt power cycle [ 456.013777][T12017] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1639'. [ 456.071538][ T30] audit: type=1400 audit(1751841371.285:1324): avc: denied { ioctl } for pid=12016 comm="syz.6.1639" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 456.275945][T12033] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 456.336901][ T30] audit: type=1400 audit(1751841371.695:1325): avc: denied { read write } for pid=12034 comm="syz.3.1643" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 456.369104][T12033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.375904][ T5910] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 456.427287][ T5910] usb 3-1: device descriptor read/8, error -71 [ 456.457685][ T30] audit: type=1400 audit(1751841371.695:1326): avc: denied { open } for pid=12034 comm="syz.3.1643" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 456.524529][T12041] bond4: (slave veth5): Enslaving as an active interface with a down link [ 456.532052][ T30] audit: type=1400 audit(1751841371.695:1327): avc: denied { ioctl } for pid=12034 comm="syz.3.1643" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 456.576314][ T30] audit: type=1400 audit(1751841371.825:1328): avc: denied { read } for pid=12034 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 456.655114][T12033] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 456.662089][T12033] bond4: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 456.700633][ T5910] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 457.150995][ T5910] usb 3-1: device descriptor read/8, error -71 [ 457.264320][ T5910] usb usb3-port1: unable to enumerate USB device [ 457.291449][ T30] audit: type=1400 audit(1751841372.635:1329): avc: denied { read write } for pid=12059 comm="syz.4.1647" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 457.327097][T12058] netlink: 'syz.6.1646': attribute type 8 has an invalid length. [ 457.396888][T12058] netem: change failed [ 457.448171][T12063] openvswitch: netlink: EtherType 0 is less than min 600 [ 457.471402][ T30] audit: type=1400 audit(1751841372.635:1330): avc: denied { open } for pid=12059 comm="syz.4.1647" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 457.501453][ T30] audit: type=1400 audit(1751841372.685:1331): avc: denied { connect } for pid=12057 comm="syz.6.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 457.771203][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 458.336731][ T30] audit: type=1400 audit(1751841373.695:1332): avc: denied { create } for pid=12081 comm="syz.6.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 458.516445][ T30] audit: type=1400 audit(1751841373.735:1333): avc: denied { setopt } for pid=12081 comm="syz.6.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 458.715432][ T30] audit: type=1400 audit(1751841373.735:1334): avc: denied { connect } for pid=12081 comm="syz.6.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 459.460122][T12099] SELinux: syz.6.1656 (12099) set checkreqprot to 1. This is no longer supported. [ 459.563681][T12098] netlink: 'syz.4.1659': attribute type 10 has an invalid length. [ 462.120118][T12133] tipc: Started in network mode [ 462.200702][T12133] tipc: Node identity 080211000001, cluster identity 4711 [ 462.249039][T12133] tipc: Enabled bearer , priority 0 [ 462.284540][T12139] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 462.325525][T12139] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 462.476294][T12139] tipc: Resetting bearer [ 463.400630][ T5910] tipc: Node number set to 134418688 [ 463.420596][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 463.420606][ T30] audit: type=1400 audit(1751841378.775:1337): avc: denied { read } for pid=12154 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.496795][ T30] audit: type=1400 audit(1751841378.835:1338): avc: denied { write } for pid=12154 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.571046][T12156] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1675'. [ 463.619367][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 463.631148][T12150] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1675'. [ 464.255788][ T30] audit: type=1400 audit(1751841379.615:1339): avc: denied { connect } for pid=12182 comm="syz.4.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 464.755648][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 464.778225][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 467.049336][T12223] SET target dimension over the limit! [ 467.339182][T12212] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.505883][T12212] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 467.555440][T12212] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.567170][T12212] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 468.205923][ T30] audit: type=1400 audit(1751841383.555:1340): avc: denied { connect } for pid=12209 comm="syz.2.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 468.299556][ T30] audit: type=1400 audit(1751841383.555:1341): avc: denied { write } for pid=12209 comm="syz.2.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 468.324092][T12240] FAULT_INJECTION: forcing a failure. [ 468.324092][T12240] name failslab, interval 1, probability 0, space 0, times 0 [ 468.368734][ T30] audit: type=1400 audit(1751841383.565:1342): avc: denied { append } for pid=12209 comm="syz.2.1690" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 468.398414][T12240] CPU: 1 UID: 0 PID: 12240 Comm: syz.3.1697 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 468.398441][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.398450][T12240] Call Trace: [ 468.398456][T12240] [ 468.398462][T12240] dump_stack_lvl+0x16c/0x1f0 [ 468.398491][T12240] should_fail_ex+0x512/0x640 [ 468.398512][T12240] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 468.398537][T12240] should_failslab+0xc2/0x120 [ 468.398562][T12240] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 468.398583][T12240] ? getname_flags.part.0+0x4c/0x550 [ 468.398605][T12240] getname_flags.part.0+0x4c/0x550 [ 468.398625][T12240] getname_flags+0x93/0xf0 [ 468.398646][T12240] user_path_at+0x24/0x60 [ 468.398668][T12240] __x64_sys_mount+0x1fc/0x310 [ 468.398684][T12240] ? __pfx___x64_sys_mount+0x10/0x10 [ 468.398706][T12240] do_syscall_64+0xcd/0x4c0 [ 468.398731][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.398747][T12240] RIP: 0033:0x7ff1efd8e929 [ 468.398761][T12240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.398776][T12240] RSP: 002b:00007ff1f0bc8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 468.398791][T12240] RAX: ffffffffffffffda RBX: 00007ff1effb6080 RCX: 00007ff1efd8e929 [ 468.398801][T12240] RDX: 0000200000002880 RSI: 0000200000002840 RDI: 0000000000000000 [ 468.398812][T12240] RBP: 00007ff1f0bc8090 R08: 0000200000000240 R09: 0000000000000000 [ 468.398821][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.398830][T12240] R13: 0000000000000000 R14: 00007ff1effb6080 R15: 00007fffa9c3af98 [ 468.398852][T12240] [ 468.568740][ C1] hrtimer: interrupt took 168225321 ns [ 468.901425][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1695'. [ 469.084163][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'. [ 469.504640][T12263] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 469.815672][T12265] xt_TCPMSS: Only works on TCP SYN packets [ 470.005523][T12269] FAULT_INJECTION: forcing a failure. [ 470.005523][T12269] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 470.045371][T12269] CPU: 1 UID: 0 PID: 12269 Comm: syz.2.1704 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 470.045392][T12269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.045400][T12269] Call Trace: [ 470.045403][T12269] [ 470.045408][T12269] dump_stack_lvl+0x16c/0x1f0 [ 470.045428][T12269] should_fail_ex+0x512/0x640 [ 470.045445][T12269] should_fail_alloc_page+0xe7/0x130 [ 470.045464][T12269] prepare_alloc_pages+0x3c2/0x610 [ 470.045478][T12269] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 470.045495][T12269] ? is_bpf_text_address+0x94/0x1a0 [ 470.045510][T12269] ? kernel_text_address+0x8d/0x100 [ 470.045522][T12269] ? __kernel_text_address+0xd/0x40 [ 470.045534][T12269] ? unwind_get_return_address+0x59/0xa0 [ 470.045546][T12269] ? arch_stack_walk+0xa6/0x100 [ 470.045559][T12269] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 470.045577][T12269] ? _parse_integer_limit+0x17f/0x1d0 [ 470.045591][T12269] ? _kstrtoull+0x145/0x200 [ 470.045602][T12269] ? __pfx__kstrtoull+0x10/0x10 [ 470.045615][T12269] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 470.045629][T12269] ? policy_nodemask+0xea/0x4e0 [ 470.045647][T12269] alloc_pages_mpol+0x1fb/0x550 [ 470.045664][T12269] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 470.045685][T12269] alloc_pages_noprof+0x131/0x390 [ 470.045702][T12269] pte_alloc_one+0x1c/0x3a0 [ 470.045713][T12269] do_huge_pmd_anonymous_page+0x8c9/0x2080 [ 470.045731][T12269] __handle_mm_fault+0x23d2/0x5490 [ 470.045749][T12269] ? __pfx___handle_mm_fault+0x10/0x10 [ 470.045762][T12269] ? lock_vma_under_rcu+0x47d/0x970 [ 470.045776][T12269] ? lock_vma_under_rcu+0x47d/0x970 [ 470.045799][T12269] handle_mm_fault+0x589/0xd10 [ 470.045813][T12269] ? __pkru_allows_pkey+0x41/0xb0 [ 470.045830][T12269] do_user_addr_fault+0x60c/0x1370 [ 470.045849][T12269] ? rcu_is_watching+0x12/0xc0 [ 470.045865][T12269] exc_page_fault+0x5c/0xb0 [ 470.045880][T12269] asm_exc_page_fault+0x26/0x30 [ 470.045891][T12269] RIP: 0033:0x7f331c157db0 [ 470.045901][T12269] Code: 20 72 37 62 e1 fe 28 6f 06 48 83 fa 40 0f 87 a7 00 00 00 62 e1 fe 28 6f 4c 16 ff 62 e1 fe 28 7f 07 62 e1 fe 28 7f 4c 17 ff c3 <8b> 0e 8b 34 16 89 0f 89 34 17 c3 0f 1f 44 00 00 83 fa 10 73 21 83 [ 470.045911][T12269] RSP: 002b:00007f331cf89028 EFLAGS: 00010246 [ 470.045920][T12269] RAX: 0000000000000000 RBX: 00007f331c3b6080 RCX: 0000000000000004 [ 470.045927][T12269] RDX: 0000000000000000 RSI: 0000200000c067a0 RDI: 0000000000000000 [ 470.045933][T12269] RBP: 00007f331cf89090 R08: 0000000000000004 R09: 0000000000000000 [ 470.045939][T12269] R10: 0000000000000000 R11: 0000200000000180 R12: 0000000000000001 [ 470.045945][T12269] R13: 0000000000000000 R14: 00007f331c3b6080 R15: 00007ffc53e547c8 [ 470.045959][T12269] [ 470.046111][T12269] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 470.342433][ T30] audit: type=1326 audit(1751841385.525:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c18e929 code=0x7ffc0000 [ 470.419040][ T30] audit: type=1326 audit(1751841385.695:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.2.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c18e929 code=0x7ffc0000 [ 470.496545][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 470.513032][ T30] audit: type=1400 audit(1751841385.875:1345): avc: denied { append } for pid=12276 comm="syz.4.1707" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 470.577003][ T30] audit: type=1326 audit(1751841385.875:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 470.685850][ T30] audit: type=1326 audit(1751841385.875:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 470.714765][ T30] audit: type=1326 audit(1751841385.875:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 471.170758][ T30] audit: type=1326 audit(1751841385.875:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 471.198715][ T30] audit: type=1326 audit(1751841385.875:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 471.224365][ T30] audit: type=1326 audit(1751841385.875:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 471.269350][ T30] audit: type=1326 audit(1751841385.875:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.3.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1efd8e929 code=0x7ffc0000 [ 471.419071][T12284] vlan2: entered allmulticast mode [ 471.470830][T12284] bond0: entered allmulticast mode [ 471.896117][T12293] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 471.904913][T12293] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 471.915017][T12293] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 471.922997][T12293] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 472.489604][T12302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1713'. [ 472.660490][T12307] SELinux: syz.3.1712 (12307) set checkreqprot to 1. This is no longer supported. [ 473.845328][T12327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1719'. [ 474.592680][T12346] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 474.600632][T12346] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 474.613529][T12346] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 474.621495][T12346] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 475.210012][T12354] SELinux: syz.3.1727 (12354) set checkreqprot to 1. This is no longer supported. [ 476.057733][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 476.069114][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 476.069127][ T30] audit: type=1400 audit(1751841391.425:1369): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 476.099574][T12353] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1728'. [ 476.120621][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 476.183768][T12367] binder: 12364:12367 ioctl c0306201 200000000040 returned -14 [ 476.227412][T12365] geneve2: entered promiscuous mode [ 476.234400][ T30] audit: type=1400 audit(1751841391.555:1370): avc: denied { connect } for pid=12364 comm="syz.2.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 476.256606][ T30] audit: type=1400 audit(1751841391.615:1371): avc: denied { listen } for pid=12364 comm="syz.2.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 476.285398][T12350] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1728'. [ 476.907382][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'. [ 477.420595][ T5910] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 478.082978][ T5910] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.145123][ T5910] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.164951][ T5910] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.243557][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.568190][ T5910] usb 3-1: usb_control_msg returned -32 [ 478.982975][ T5910] usbtmc 3-1:16.0: can't read capabilities [ 479.368893][T12402] trusted_key: encrypted_key: key user:syz not found [ 479.567240][ T30] audit: type=1400 audit(1751841394.775:1372): avc: denied { remount } for pid=12399 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 479.639297][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 479.824928][ T30] audit: type=1400 audit(1751841395.015:1373): avc: denied { setopt } for pid=12399 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 479.859326][T12401] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 480.190768][ T30] audit: type=1400 audit(1751841395.545:1374): avc: denied { ioctl } for pid=12407 comm="syz.4.1741" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 480.288106][ T30] audit: type=1400 audit(1751841395.645:1375): avc: denied { write } for pid=12413 comm="syz.3.1745" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 480.355382][ T30] audit: type=1400 audit(1751841395.645:1376): avc: denied { map } for pid=12413 comm="syz.3.1745" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 480.436395][ T30] audit: type=1400 audit(1751841395.665:1377): avc: denied { append } for pid=12413 comm="syz.3.1745" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.574535][ T30] audit: type=1400 audit(1751841395.885:1378): avc: denied { execute } for pid=12423 comm="syz.1.1747" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 480.609544][T12424] binder: BINDER_SET_CONTEXT_MGR already set [ 480.615873][T12424] binder: 12423:12424 ioctl 4018620d 200000000040 returned -16 [ 480.627353][T12424] binder: 12423:12424 ioctl c0306201 200000000b40 returned -11 [ 481.077207][ T10] usb 3-1: USB disconnect, device number 57 [ 481.178467][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1750'. [ 481.550596][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 482.176646][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 482.185908][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.232752][ T10] usb 3-1: Product: syz [ 482.359839][ T10] usb 3-1: Manufacturer: syz [ 482.483038][ T10] usb 3-1: SerialNumber: syz [ 482.500323][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 482.507731][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 483.363660][T12436] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1751'. [ 483.423325][T12436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.503851][T12436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.655047][T12463] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[12463] [ 483.819539][ T10] r8152-cfgselector 3-1: USB disconnect, device number 58 [ 483.985238][ T30] audit: type=1400 audit(1751841399.335:1379): avc: denied { ioctl } for pid=12466 comm="syz.6.1760" path="socket:[40631]" dev="sockfs" ino=40631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 484.135209][T12471] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 484.143061][T12471] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 484.151705][T12471] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 484.159472][T12471] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 484.431094][ T974] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 484.458270][T12457] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1756'. [ 484.473026][T12473] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1756'. [ 484.606658][ T974] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 484.630639][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.639206][ T974] usb 7-1: Product: syz [ 484.643566][ T974] usb 7-1: Manufacturer: syz [ 484.648279][ T974] usb 7-1: SerialNumber: syz [ 484.665750][ T974] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 484.700251][ T5971] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 484.748074][ T30] audit: type=1400 audit(1751841400.105:1380): avc: denied { read } for pid=12476 comm="syz.2.1763" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 484.776819][ T30] audit: type=1400 audit(1751841400.105:1381): avc: denied { open } for pid=12476 comm="syz.2.1763" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 485.030109][T12481] netlink: 'syz.2.1763': attribute type 21 has an invalid length. [ 485.038678][T12481] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1763'. [ 485.056024][T12481] hfsplus: unable to find HFS+ superblock [ 485.139442][ T974] usb 7-1: USB disconnect, device number 15 [ 485.369855][ T30] audit: type=1400 audit(1751841400.385:1382): avc: denied { getopt } for pid=12476 comm="syz.2.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 485.390710][ T30] audit: type=1400 audit(1751841400.415:1383): avc: denied { mounton } for pid=12476 comm="syz.2.1763" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 485.451604][ T30] audit: type=1400 audit(1751841400.805:1384): avc: denied { read } for pid=12479 comm="syz.3.1764" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 485.497404][ T30] audit: type=1400 audit(1751841400.805:1385): avc: denied { open } for pid=12479 comm="syz.3.1764" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 485.521225][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.732912][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'. [ 485.835608][ T5971] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 485.843839][ T5971] ath9k_htc: Failed to initialize the device [ 485.850140][ T974] usb 7-1: ath9k_htc: USB layer deinitialized [ 486.433919][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 486.495985][ T30] audit: type=1800 audit(1751841401.855:1386): pid=12498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1770" name="bus" dev="overlay" ino=745 res=0 errno=0 [ 487.414957][T12526] netlink: 'syz.6.1777': attribute type 10 has an invalid length. [ 487.425122][T12526] bond0: (slave wlan1): Opening slave failed [ 487.460774][ T5910] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 487.620573][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 487.627489][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 487.639213][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 487.693373][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 487.702591][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.729065][ T5910] usb 4-1: Product: syz [ 487.818277][ T5910] usb 4-1: Manufacturer: syz [ 487.822974][ T5910] usb 4-1: SerialNumber: syz [ 487.830889][ T5910] usb 4-1: config 0 descriptor?? [ 487.844444][ T5910] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 487.898211][ T30] audit: type=1400 audit(1751841403.135:1387): avc: denied { map } for pid=12530 comm="syz.4.1780" path="socket:[40861]" dev="sockfs" ino=40861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 487.921299][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.838641][T12535] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 488.846714][T12535] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 488.856319][T12535] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 488.864309][T12535] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 488.869871][ T5910] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 489.092025][ T5910] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 489.102354][ T5910] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 489.110769][ T5910] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 489.142928][ T5910] em28xx 4-1:0.0: No AC97 audio processor [ 489.174116][T12544] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.1782'. [ 489.184824][ T5910] usb 4-1: USB disconnect, device number 52 [ 489.226396][ T5910] em28xx 4-1:0.0: Disconnecting em28xx [ 489.240236][ T5910] em28xx 4-1:0.0: Freeing device [ 489.435315][ T974] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 489.439580][T12550] mkiss: ax0: crc mode is auto. [ 489.523995][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1786'. [ 489.583051][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1785'. [ 489.655667][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.684751][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 489.702494][ T974] usb 3-1: config 0 has no interfaces? [ 489.723127][ T974] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.762362][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.775070][ T974] usb 3-1: config 0 descriptor?? [ 489.831530][T12567] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 489.939534][T12571] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1791'. [ 489.951030][T12569] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1791'. [ 490.000116][ T974] usb 3-1: USB disconnect, device number 59 [ 490.077612][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1794'. [ 490.329151][T12580] syz.4.1795: attempt to access beyond end of device [ 490.329151][T12580] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 490.343035][T12580] FAT-fs (loop9): unable to read boot sector [ 490.349610][ T30] audit: type=1400 audit(1751841405.685:1388): avc: denied { mounton } for pid=12578 comm="syz.4.1795" path="/374/file0" dev="tmpfs" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 490.670613][ T5971] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 490.833445][ T5971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 490.846328][ T5971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 490.855008][ T5971] usb 4-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 490.864527][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.872796][ T5971] usb 4-1: Product: syz [ 490.877103][ T5971] usb 4-1: Manufacturer: syz [ 490.881785][ T5971] usb 4-1: SerialNumber: syz [ 490.887973][ T5971] usb 4-1: config 0 descriptor?? [ 490.910618][ T5910] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 490.980676][ T24] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 491.160659][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 491.239424][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.376359][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.404464][ T5910] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 491.428467][ T5971] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP found [ 491.441464][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.453712][ T5910] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 491.463059][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.471381][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 491.480489][ T5910] usb 3-1: Product: syz [ 491.484763][ T5910] usb 3-1: Manufacturer: syz [ 491.489406][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 491.497521][ T5910] usb 3-1: SerialNumber: syz [ 491.504420][ T5910] usb 3-1: config 0 descriptor?? [ 491.511492][ T24] usb 7-1: SerialNumber: syz [ 491.523107][ T24] usb 7-1: 0:2 : does not exist [ 491.656143][ T5971] snd_usb_podhd 4-1:0.0: endpoint not available, using fallback values [ 491.673550][ T5971] snd_usb_podhd 4-1:0.0: invalid control EP [ 491.679781][ T5971] snd_usb_podhd 4-1:0.0: cannot start listening: -22 [ 491.689507][ T5971] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 491.697747][ T5971] snd_usb_podhd 4-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 492.082684][T12603] SELinux: syz.1.1803 (12603) set checkreqprot to 1. This is no longer supported. [ 492.335102][ T30] audit: type=1400 audit(1751841407.695:1389): avc: denied { append } for pid=12584 comm="syz.3.1797" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 492.359181][T12585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.395754][ T5971] usb 7-1: USB disconnect, device number 16 [ 492.421984][T12585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.454188][ T974] usb 4-1: USB disconnect, device number 53 [ 493.418756][ T30] audit: type=1400 audit(1751841408.555:1390): avc: denied { shutdown } for pid=12611 comm="syz.6.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 493.621000][ T5910] usb 3-1: USB disconnect, device number 60 [ 493.740972][T12626] : renamed from bond_slave_0 [ 493.811515][ T974] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 494.080078][ T974] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 494.250859][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.543254][ T974] usb 4-1: Product: syz [ 494.549284][ T974] usb 4-1: Manufacturer: syz [ 494.590743][ T30] audit: type=1400 audit(1751841409.935:1391): avc: denied { setopt } for pid=12636 comm="syz.6.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 494.610381][ T974] usb 4-1: SerialNumber: syz [ 494.729997][ T30] audit: type=1400 audit(1751841409.975:1392): avc: denied { write } for pid=12636 comm="syz.6.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 494.764523][ T974] usb 4-1: config 0 descriptor?? [ 495.006832][T12640] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 495.014789][T12640] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 495.023322][T12640] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 495.031265][T12640] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 495.152274][T12617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.161702][ T30] audit: type=1400 audit(1751841409.975:1393): avc: denied { ioctl } for pid=12636 comm="syz.6.1812" path="socket:[42144]" dev="sockfs" ino=42144 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 495.222093][T12617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.365721][ T5910] usb 4-1: USB disconnect, device number 54 [ 495.830670][ T974] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 495.990662][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 495.997295][ T974] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 496.010446][ T974] usb 3-1: config 1 has no interface number 1 [ 496.020184][ T974] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.038019][ T974] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.047311][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.069422][ T974] usb 3-1: Product: syz [ 496.073711][ T974] usb 3-1: Manufacturer: syz [ 496.114948][ T974] usb 3-1: SerialNumber: syz [ 496.758067][T12661] netlink: 'syz.2.1814': attribute type 1 has an invalid length. [ 497.309083][T12667] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.1822'. [ 497.324327][ T974] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 497.341111][ T974] usb 3-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 497.382146][ T974] usb 3-1: 2:1 : invalid channels 0 [ 497.845981][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1823'. [ 497.895175][ T974] usb 3-1: USB disconnect, device number 61 [ 497.960442][ T7384] udevd[7384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.216343][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1824'. [ 499.622319][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 499.720569][ T30] audit: type=1400 audit(1751841415.065:1394): avc: denied { listen } for pid=12701 comm="syz.4.1831" lport=57823 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 499.757229][T12703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1831'. [ 500.164373][T12710] netlink: 'syz.6.1833': attribute type 12 has an invalid length. [ 500.187943][T12710] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.1833'. [ 500.240666][ T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 500.290676][ T5910] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 500.528769][T12718] x_tables: ip_tables: osf match: only valid for protocol 6 [ 500.544965][T12718] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN NOPTI [ 500.557036][T12718] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 500.565439][T12718] CPU: 1 UID: 0 PID: 12718 Comm: syz.4.1835 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 500.577493][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.587551][T12718] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 500.593106][T12718] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 e0 18 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 500.612713][T12718] RSP: 0018:ffffc9000596f330 EFLAGS: 00010203 [ 500.618772][T12718] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000fc77000 [ 500.626734][T12718] RDX: 000000000000005d RSI: ffffffff898f07a0 RDI: 00000000000002ec [ 500.634701][T12718] RBP: 00000000000afff2 R08: 0000000000000005 R09: 0000000000000000 [ 500.642664][T12718] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce89360 [ 500.650629][T12718] R13: 0000000000000000 R14: ffffffff8ce89340 R15: ffff88802aa4b000 [ 500.658585][T12718] FS: 00007ff8fdc016c0(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 500.667498][T12718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.674065][T12718] CR2: 000000110c399547 CR3: 000000007bfc0000 CR4: 00000000003526f0 [ 500.682019][T12718] Call Trace: [ 500.685280][T12718] [ 500.688192][T12718] qdisc_tree_reduce_backlog+0x221/0x500 [ 500.693814][T12718] sfq_init+0x88a/0x2540 [ 500.698049][T12718] ? __pfx_sfq_init+0x10/0x10 [ 500.702713][T12718] ? qdisc_alloc+0x94f/0xc50 [ 500.707292][T12718] ? __pfx_sfq_init+0x10/0x10 [ 500.711956][T12718] qdisc_create+0x457/0xfc0 [ 500.716443][T12718] tc_modify_qdisc+0x12bb/0x2130 [ 500.721366][T12718] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 500.726640][T12718] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 500.731908][T12718] rtnetlink_rcv_msg+0x3c9/0xe90 [ 500.736836][T12718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 500.742280][T12718] ? __lock_acquire+0xb8a/0x1c90 [ 500.747199][T12718] ? irqentry_exit+0x3b/0x90 [ 500.751778][T12718] netlink_rcv_skb+0x155/0x420 [ 500.756526][T12718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 500.761974][T12718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.767239][T12718] ? rcu_is_watching+0x12/0xc0 [ 500.771993][T12718] netlink_unicast+0x53a/0x7f0 [ 500.776738][T12718] ? __pfx_netlink_unicast+0x10/0x10 [ 500.782005][T12718] netlink_sendmsg+0x8d1/0xdd0 [ 500.786751][T12718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.792022][T12718] ____sys_sendmsg+0xa95/0xc70 [ 500.796767][T12718] ? copy_msghdr_from_user+0x10a/0x160 [ 500.802215][T12718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.807485][T12718] ? __pfx_futex_wake_mark+0x10/0x10 [ 500.812753][T12718] ___sys_sendmsg+0x134/0x1d0 [ 500.817418][T12718] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.822603][T12718] ? __lock_acquire+0x622/0x1c90 [ 500.827531][T12718] __sys_sendmsg+0x16d/0x220 [ 500.832109][T12718] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.837208][T12718] ? __x64_sys_futex+0x1e0/0x4c0 [ 500.842140][T12718] do_syscall_64+0xcd/0x4c0 [ 500.846633][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.852507][T12718] RIP: 0033:0x7ff8fcd8e929 [ 500.856905][T12718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.876497][T12718] RSP: 002b:00007ff8fdc01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.884891][T12718] RAX: ffffffffffffffda RBX: 00007ff8fcfb6160 RCX: 00007ff8fcd8e929 [ 500.892845][T12718] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 000000000000000d [ 500.900796][T12718] RBP: 00007ff8fce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 500.908748][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.916703][T12718] R13: 0000000000000000 R14: 00007ff8fcfb6160 R15: 00007ffd404997a8 [ 500.924661][T12718] [ 500.927661][T12718] Modules linked in: [ 500.932795][T12718] ---[ end trace 0000000000000000 ]--- [ 500.938285][T12718] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 500.943888][T12718] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 e0 18 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 500.963581][T12718] RSP: 0018:ffffc9000596f330 EFLAGS: 00010203 [ 500.969675][T12718] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000fc77000 [ 500.977667][T12718] RDX: 000000000000005d RSI: ffffffff898f07a0 RDI: 00000000000002ec [ 500.985656][T12718] RBP: 00000000000afff2 R08: 0000000000000005 R09: 0000000000000000 [ 500.993636][T12718] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce89360 [ 501.001622][T12718] R13: 0000000000000000 R14: ffffffff8ce89340 R15: ffff88802aa4b000 [ 501.009585][T12718] FS: 00007ff8fdc016c0(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 501.018519][T12718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.025097][T12718] CR2: 000000110c399547 CR3: 000000007bfc0000 CR4: 00000000003526f0 [ 501.033071][T12718] Kernel panic - not syncing: Fatal exception in interrupt [ 501.040435][T12718] Kernel Offset: disabled [ 501.044745][T12718] Rebooting in 86400 seconds..