last executing test programs: 6m57.467114772s ago: executing program 1 (id=2946): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x7fffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, 0x0) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000280)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599c3d277abb0e7828a07495c83a8f13fcdfb49aa8434aa650dd499c47a11fd125994", 0x2e}, {&(0x7f0000000300)="d74fc4ecd631da86b2f70a", 0xb}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41adb420625cedf190238937", 0xbe}, {&(0x7f0000000580)="c2b2c2845878e06770d619d3e9eca0e581d43f7444a57c65dd68a353d6ed418950ce931df506fbc501a2e77fb801ed1410c5dbcbda39aba16fa6079b0edc1a0813efd8aab7db80b981a5a62c232203d9917f728e13cbdc0bae21d8be5c949fb9c1294a947110f6536e0a70eab741daf1ea6dbe8d53d04da5fc73c1faadb4946cfe1bfd35d1084efb2f837823a0ef62475626159337805df4505b272a92879ecc4b05536afd0bd7e4ddce3e5dc65d8e8e4d3b0d08f251614e2e63b3a1", 0xbc}, {&(0x7f0000000640)="84b6992c8c06a69aa3f1bb35f450c791da67ec6906b97ea51bdf54a11b96d6a8ee3883ede75d7bc6494c520c442b650674606426de486e6ba909679b13ef79e2bb7a04604babd6b262025ec316940f8d38a999e39d0a0b6feb78ece3ee328233efebe358401f095b0bb94fcb78cb9f175c99f0a2613c4b6980cb32b8689449b581f0a578b44ccb9712f37d466260e8b5b4537cc173ed42aa413a2c8d94d306c21e6b4ef0c4b1e67ebc5bc36529652b9a01752352b0cefd974455", 0xba}], 0x6, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r2], 0x28}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) open_by_handle_at(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="15000000be000000000d99749a4418bbc39bac090ce37ec5e91b9ac7e1165b25b7138198c37f47533021f0000000000000"], 0x1) shutdown(r6, 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) read$FUSE(r8, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r6, 0x0, r11) socket$inet_udplite(0x2, 0x2, 0x88) sched_setattr(r9, &(0x7f0000000340)={0x38, 0x0, 0x0, 0x0, 0xdc3d, 0x7fff, 0x5, 0xd9, 0x2b1, 0xe1}, 0x0) 6m55.175850634s ago: executing program 1 (id=2953): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x140, 0x380, 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) ioctl$VT_ACTIVATE(r4, 0x5606, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x1) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xfd44) 6m51.317541443s ago: executing program 1 (id=2962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c050", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601040000000000000000010000031400078005001400fd7900000800084000000044050001000700000005000400040000000900020073797a3000000000050005000200000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x44885}, 0x40) r4 = dup3(r2, r1, 0x80000) write$tun(r4, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) 6m48.470222792s ago: executing program 1 (id=2970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='debugfs\x00', 0x0, &(0x7f0000000180)='gid=1\x00\x1c\x00\x00\x00m\xbe\xd7\xa9:\n\xf9\b\rk[\xa1\xcc\xd6\xa28|5}(\x06l\xa8\x86di\xf3vJ,S.\xc3\x9b\xaaNj0\xef\x810EZ\xb6\x16\x88AZg`\xee\xe2\x93r\xd7\xa3v\x1f\xdb\x04\xd1\xe0\xabR \xeb\x80\r\x1b\x17\x0e\r\x93K\xe6\xc3BFz\xba\x7f\xc0\x1e@\xe4\xd0\xea\x16\xaa-aR)\\\x16\x8b^>\xbf\x06p\xc8\x9b\xf0N:\x05F\xe7fJ\x9a8\xa4\xb0FA\x9a\xe9E\xf9GJaGTf\x0f\xec\xff\x00\xb4\x97\x86\xd1&\a\xb554\x86\xd7\xbdeY\xa6\x91\r@0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x4000, @fd_index, 0xb8, 0x8, 0x5, 0x1a, 0x1, {0x2, r9}}) 6m45.956291576s ago: executing program 1 (id=2975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000008ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="abfa73f1819363baac50d2c8ffb29551b09183e5515b042bab6194ed42bfbb28e9ac90a5091cf1c5b2e6c6570123d4", 0x2f}, {&(0x7f0000000380)="b424034edf671b5cfba138e16cb26ba13c97053ab983e1eabaacc19f5553d3d50fad35c21ca4d3997e028976105cad4f7bb24e0b2d3adb358f0bcf68ba0b5c022f74aa6c6e7bc8cd1575a0779277d2ba1e23f723559b7565102f3eb5ef5d07b1f3fbf535052a08f10406f602f0cc9d0bec7a24c268a482e511322b4ef5e379cc63cbca84dbc3343df15bf73e3f1c701c4f4251cb126bd4aac911af66fdbf4886286a3081448f6f9f5012aba1d031c213bdd7dc93814aa8b6548ea5a08599a0a9aa1da96087420ef2fefabc3cbb9f33379a3c0c444df16e9a48daa829d7cc1fb4c4", 0xe1}, {&(0x7f00000000c0)="2ffcce1ea001984fcff2bea0d88cf5843c9c3ab4eebd5ca24f8f581b18551329a75380a38ea2ecbde883b9f0df0dcb5230726c35657b7c1e653f672d5342ca5479dfaf1df1e035a907cf6f25a6e1f807d68316e497a8e339fe52bca25238dde8204d66c5cd63e321275ce09d5f1cc96f74dceefa5ac5808cdd2d60767885a4", 0x7f}, {&(0x7f00000001c0)="4a10670b0ead1c3b93abdac84634eeb6", 0x10}, {&(0x7f0000000480)="7aaf96c6a55f7f418f06d171648b053c9e0a5f1b4220e73fbe05f9eb23cdadd4dbe217e466b289fcd5b3435ce9bc0c7dc1cd709a468063a08f98e069918b42e546c8eb139c37d6daa91288ac5a6de0c9e7595276b79664c52e55d53cea6c011b0cb133b63d29df309c931e0a8b3dc2b3acd78dbada2f9a7372e23c91", 0x7c}, {&(0x7f0000000500)="8c7260bbb8013417a30e54ccd2b6661f08bdece40bbb6bfda5bfa137bd43f3e3f6fce988972eb3adbbb410fd0786db14ea678e724d1139da1fd4d52d0e262f81e6f1", 0x42}], 0x6, &(0x7f0000001900)=[@rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r1, r2, r2, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x38, 0x40}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000001800)="3c5cb56994bdba4443de8eb87e8cdf6ef80f8f5d2878d45f902e99d1cf7e857e9af8774599d7cd3e393ac1951d96fc966bde062071fa490effdf8ca1b833204594a2350b468f6fdc74b054d06363d37b4d474d89ce744b2d2546d16afd9645ce2102c2b95bf94fea7d28928ca83abd11703884", 0x73}], 0x1, 0x0, 0x0, 0x4000040}}, {{&(0x7f0000001880)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000600)="60c88760227eefe11943faf9753dfd03e750496827fb8609ad6f63d46cfcd5b6a64922aca778070d028676f85897bf9370574cdd04e2d23c40a340987a058686f88d49c2d4a1", 0x46}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x108, 0x8080}}, {{&(0x7f0000001b40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001bc0)="fda5e122784cb05d91f45e34f5651e24dc7ac6695f4ed492eacc20d5bad0114ff6f751ffc95a3fd1dc0c842794906608f6f0b08cd8a897bcb05b1aaa66cfec8cd505beae64e26f00d6d75f3fbfe85e51cb56de427264cf6e6c955965dd2062e561cbc97bbd45fd42a0c94c336d87eee5ee0729c5f15d5c5209302c2a8100e368b9af047880abad1947c6f70904481f079c006fbae529a2fc", 0x98}, {&(0x7f0000001c80)="4fff0af8ffb263b2cbb19b181587db72eda5380c9468d48b7cfe5a160408a078e42ef8c5ae2d4cc9ba772d9641b6638c100b43dcdea5776802f1d71777e1bd2b9b1dbd62f79fba156751", 0x4a}], 0x2, &(0x7f0000001980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x8000}}, {{&(0x7f0000001dc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001e40)="c3f4cee61d3d57ce1529b9b855a41e95f5ee3531e3c30c2b0ff9f05a39bdbde4acf2778e617f474344dbd1627192c911fede73afca37687fb45864a9c9aa11d9e33268ceff64f0f51386dd16000b7d72eecc9a6358de6bc0f73804043a2f9bd678664f7e423bf37280b39438b6b141517b75c54942c044dd5a7f64299bb00e", 0x7f}], 0x1, &(0x7f0000008200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000008340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008740)=[{&(0x7f00000083c0)="833d8900bfce96802c4c5773a6a799fd412f41094c311e9949bc90b701afce50", 0x20}, {&(0x7f0000008400)="7628bde5ae3cb2317595792b4ae5ecb1e19fbcf7136ff04ed1b1499674eb18e6f7976f7e49b3cf18cab2e16cac7a92d75b3c94ac8eed7ab40496c6da881c19562a786c0780617dfdc181ca8d27b8542f64e96a391b34b9754c6e69402d207145d6ce", 0x62}, {&(0x7f0000008480)="cc985ad84507cd9e9e0b0b09ef6e4ba28c5c5c28e4cad66361adeb67c491d8ed2cfc1509d7fa24ec6e30ce5d4e786f1b708525ea52b26a901e2b86722ab83e0167926e1bebbd807c", 0x48}, {&(0x7f0000008500)="557760f00681348fdb42056df480445de8907696967272f4004409af66e1e1455b585c5afe7347dff68575bad30ea19a1d9f92c755fec9e0d126dfff82004756b2b53cb4f09397a0d97b2f0ce5571f86077d3fd4e3c2a1fde3a9f0b451636837e21f8d15f85620cc42f9eded2182e6bb6dae61ad6c6a80cb78db5189abfe6e4c340afc36962b7fa8d5bfde105f36bad134925299b3a6c34b329b5d8c0202b2921e4b9368f542deb1bd3c467028e40bc645ae89c8bc415a82a170b9015a340994bfdc4b58457d22d2197f1b9ea63dbeb0686b1029c84cf7f34e123518859a10ad9e", 0xe1}, {&(0x7f0000008600)="9d7a7d825023ad3619da0be6fda66cb2c7bdd20d3cce98ec1c4c5fd409c8be22aef4ad89b7e156b6e4d48e03c4938b49326556c5aabbec3d463bef119e83259f3426c59a3ac03c6d397d646bd04f306adc011b818ece", 0x56}, {&(0x7f0000008680)="e1987f7d9b325a489a151a91a371fef8c08c2163d9863c9622010592527f4f9ef3e3e7f146989f076006b174f5766e480494d9fa5c595385a3d135854bb320fb6fecd6967cffff27d26aad0b2cc6720de9886f0c03a07d63e382f24e7c58dc528f78c41e66b1ebe370377a4ce26aae84976529badc3142a4a8745446376791551596ec6602a69d38ac8f2b33eb062eec721a012c2f5b950c1495ed85faebc819391419ecfc189e", 0xa7}], 0x6, &(0x7f0000008880)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98, 0x24004084}}, {{&(0x7f0000008940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008a80)=[{&(0x7f00000089c0)="425d3a95ad846d1a233d96bb11ecce474848f22998c574b64d342489143cd1039ac7af1308b97807078474b22c5bbf4f0b2965f1c08bbc6aac640b4afed30a49ab3f96cc45d98e3497e8a1efc1e7320e87b972d97296cb357b4b8cd9b9fa344f1e5a309cc94103d38f35a869fa16225212ee98318412196705ea5e553113a0", 0x7f}, {&(0x7f0000008a40)="5ba77b", 0x3}], 0x2, 0x0, 0x0, 0x20000000}}], 0x7, 0x4008844) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000280)={0xa, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40002, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) 6m44.095065238s ago: executing program 1 (id=2980): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x8, 0x62, 0x7, @vifc_lcl_ifindex, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/4096, 0x1000}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ip6gre0\x00'}) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f00000000c0)) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x1000000010) 6m43.601657279s ago: executing program 32 (id=2980): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x8, 0x62, 0x7, @vifc_lcl_ifindex, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/4096, 0x1000}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ip6gre0\x00'}) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f00000000c0)) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x1000000010) 6.204071958s ago: executing program 4 (id=4082): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f0000000480)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) gettid() read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 5.771626022s ago: executing program 4 (id=4084): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x30040, 0x58) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x1, 0x0, 0x6, 0x40, 0x38b, 0x0, 0x2004cb, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x3, 0x9, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.59888777s ago: executing program 0 (id=4087): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x13, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x44}, 0x94) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000010000000b70400000800000085000000950000009500000004000000bb98cb139a66ec1b91cdcce2a6ca894411c7cf1ecd7da7318d630f2543479e7cefea71083f475d33a1af479ec026dc61763e6d28a91e02dcda53638b8d49fa71e67fa0f618309914"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x709380, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 4.744606725s ago: executing program 4 (id=4092): socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x288}], 0x1}}], 0x1, 0x400c0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) clock_settime(0x17, &(0x7f0000000200)) 4.29114431s ago: executing program 2 (id=4093): epoll_create1(0x0) r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$lock(r2, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001540)={'tunl0\x00', &(0x7f0000001480)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x7fff, 0x80000000, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x4, 0x4, 0x0, @empty, @remote, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r5 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) 4.269136542s ago: executing program 2 (id=4094): poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x1, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.235910808s ago: executing program 0 (id=4095): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x50001000, &(0x7f0000000400)="78e8a5bd7706d88f73f6c070d896c997e2d220566e5d8e506d2444225986a968a242e4787d2a5dce1fcab49e72f59c61cc9f10145c5eb3", 0x37, 0x0, 0x0, &(0x7f00000004c0)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_pts(0xffffffffffffffff, 0x40440) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0x2, 0xb, 0x0, 0x1, 0x5, 0xce, '\x00', 0x4, 0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x4, @win={{0x7, 0xcb2, 0x8f, 0x7}, 0x1, 0x6, 0x0, 0x5, 0x0, 0xf8}}) 3.938976252s ago: executing program 3 (id=4097): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) recvmmsg(r0, &(0x7f000001d780)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/230, 0xe6}], 0x5, &(0x7f0000000800)=""/211, 0xd3}, 0x1800}, {{&(0x7f0000000900)=@pppol2tpv3, 0x80, &(0x7f0000000340)=[{&(0x7f0000000ac0)=""/171, 0xab}], 0x1}, 0xfffffffc}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000e00)=""/157, 0x9d}], 0x1, &(0x7f0000001040)=""/112, 0x70}, 0x79bc}, {{&(0x7f00000010c0)=@x25={0x9, @remote}, 0x80, &(0x7f000001ba40)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/178, 0xb2}, {&(0x7f00000025c0)=""/194, 0xc2}, {&(0x7f0000002240)=""/157, 0x9d}, {&(0x7f000001b700)=""/73, 0x49}, {&(0x7f000001b780)=""/154, 0x9a}, {&(0x7f0000000c00)=""/25, 0x19}, {&(0x7f000001b840)=""/72, 0x48}, {&(0x7f000001b8c0)=""/90, 0x5a}, {&(0x7f000001b940)=""/212, 0xd4}], 0xa, &(0x7f0000000ec0)=""/8, 0x8}, 0xfffffc00}, {{&(0x7f000001bb00)=@qipcrtr, 0x80, &(0x7f000001cc80)=[{&(0x7f00000026c0)=""/50, 0x32}, {&(0x7f000001bb80)=""/209, 0xd1}, {&(0x7f000001bc80)=""/4096, 0x1000}], 0x3, &(0x7f000001ccc0)=""/6, 0x6}, 0x4}, {{0x0, 0x0, &(0x7f000001cf00)=[{&(0x7f000001cd00)=""/230, 0xe6}, {&(0x7f000001ce00)=""/238, 0xee}], 0x2, &(0x7f000001cf40)=""/220, 0xdc}, 0xf18}, {{&(0x7f000001d040)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000001d480)=[{&(0x7f000001d0c0)=""/1, 0x1}, {&(0x7f000001d100)=""/252, 0xfc}, {&(0x7f000001d200)=""/235, 0xeb}, {&(0x7f000001d300)=""/152, 0x98}, {&(0x7f000001d3c0)=""/167, 0xa7}], 0x5, &(0x7f000001d500)=""/176, 0xb0}, 0x5}, {{&(0x7f000001d5c0)=@generic, 0x80, &(0x7f000001d740)=[{&(0x7f000001d640)=""/156, 0x9c}, {&(0x7f000001d700)}], 0x2}, 0x2}], 0x8, 0x40000003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x9}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f00000003c0)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e2a9c9d1e2ce73cb9fd7e8943", 0x50}, {&(0x7f00000009c0)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000f00)="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", 0x102}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000002300)="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", 0x2af}], 0x6) open_by_handle_at(r3, 0x0, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 3.881131145s ago: executing program 5 (id=4098): socket$inet6(0xa, 0x80001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'xfrm0\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (fail_nth: 2) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) 3.880309379s ago: executing program 2 (id=4099): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x511800) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 3.753608504s ago: executing program 3 (id=4100): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc6, 0x4a, 0x68, 0x20, 0x6cd, 0x107, 0xf0b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0xe9, 0x0, 0x1, 0x88, 0x20, 0x43, 0x0, [], [{{0x9, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1}}]}}]}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioprio_set$uid(0x3, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x40008) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="00214717a7070075000003060000000000000000d35fecbfc83df141460817efaaa6087c309c981de05261a7164d20dc8555", 0x32}], 0x1, 0x73a, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000380), &(0x7f0000000400)=0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r5, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='fscache_invalidate\x00', r3, 0x0, 0x7fffffff}, 0x18) 3.495105547s ago: executing program 4 (id=4101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r4, 0x1, 0xfffffffd, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90, 0x5}, {0xc, 0x90, 0x8000000000000001}}]}, 0x54}}, 0x40) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc00000044000900000000000000000005000000a70016800d362a7f49423d7d7afbb70e2894f8ce2487b0c77b3a2d7a0628f7573c82b28a37c5a8ec59c8eb800d0433cb9918320f0d5d2145daf3674b629dccce665a3c02507c4f4d7713030f0c6798ad4e5d7ddd11d44c2f02293e9cd1542b95ce3a8b582b5ab0093c10f8531cfb9927fbe5b0d726d5915692fca3b3ad93207618", @ANYBLOB="00aab4da3bc325e44a8599c17cab84f080bc9f2fb996de97f80d2a778bcaad6674b74165c51d91f346542b949d190cb88efe8f25f3be3a9dd63eaea86ed1b8dfa926e55a8703cfe3d9dc7e9717a48c793e"], 0xbc}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) socket$nl_generic(0x10, 0x3, 0x10) 3.494775694s ago: executing program 2 (id=4102): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) munmap(&(0x7f000082f000/0x400000)=nil, 0x400000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000004000000000000200000000000006e"], 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x6, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 3.14709055s ago: executing program 3 (id=4103): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x1, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.985108151s ago: executing program 0 (id=4104): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2800047e) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.939107791s ago: executing program 5 (id=4105): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x13, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x44}, 0x94) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000010000000b70400000800000085000000950000009500000004000000bb98cb139a66ec1b91cdcce2a6ca894411c7cf1ecd7da7318d630f2543479e7cefea71083f475d33a1af479ec026dc61763e6d28a91e02dcda53638b8d49fa71e67fa0f618309914"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x709380, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.362250849s ago: executing program 3 (id=4106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x140, 0x380, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x1) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfd44) 2.26730473s ago: executing program 0 (id=4107): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x4, 0x8, 0xa4, 0x200, 0x3a2, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getpriority(0x0, r2) read(r1, &(0x7f00000002c0)=""/235, 0xeb) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1000000, &(0x7f00000004c0)="622798b369d365d4455c7fad799975417881e3c07d69d970c7c3fe29cbbaa534a725fd1f8ffea5cdd9c536f98abda0c2acca755e64da9ba4f26a1e4b0978445ba04a41071cba4b667c6fb8895f52d8b10faa236e0593fe10900c4e0b6d4e07c6a97192d6c6", 0x65, &(0x7f0000000180), &(0x7f00000003c0), &(0x7f0000000580)="b2fb8db94a209092e66e2d27052df935a22f5c732b002f4fd3992417b690a0f9289db62b8c5cb756638d3c407396f9f466bc11045bdb482fcb51ce5c13905dff4b8525fb0c5f5162fe011c949b43bc5848d226b66943ef26fc3a6d727c015b5df9468302a2309b908ab16e2eb7f32f93c23381953f897ecc5bcb216001ee1b8c1425aaeec0ecc10d9ac09542fb024f0eb2ed7a81820ebacfff2134d6a57397fdb60e89ce55812e092c93a02ab1e9e92fd2d4d1a739725d") syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @local}, 0x4, 0x4, 0x1}}, 0x2e) syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x1a, 0x11, 0x0, @rand_addr=0x64010100, @broadcast}, {0xfffd, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}}}}}}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 1.760398272s ago: executing program 3 (id=4108): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000980)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') pidfd_getfd(r5, r3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) (fail_nth: 8) 1.581141372s ago: executing program 4 (id=4109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x13, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x44}, 0x94) r4 = creat(0x0, 0xd931d3864d39dcca) r5 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r3, @ANYRES16=0x0, @ANYRES32=r2, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000010000000b70400000800000085000000950000009500000004000000bb98cb139a66ec1b91cdcce2a6ca894411c7cf1ecd7da7318d630f2543479e7cefea71083f475d33a1af479ec026dc61763e6d28a91e02dcda53638b8d49fa71e67fa0f618309914"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r4, &(0x7f0000000000)=ANY=[@ANYRES64=r9], 0x69) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x709380, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.580492427s ago: executing program 5 (id=4110): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 1.577992066s ago: executing program 2 (id=4111): socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x288}], 0x1}}], 0x1, 0x400c0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) clock_settime(0x17, &(0x7f0000000200)) 1.464529405s ago: executing program 5 (id=4112): socket$inet6(0xa, 0x80001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) connect$pppoe(r5, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'macvlan1\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) syz_open_dev$tty1(0xc, 0x4, 0x3) 1.452834721s ago: executing program 0 (id=4113): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x0, 0x143102) pselect6(0x40, &(0x7f0000000040)={0x9, 0xbbec, 0x0, 0x100000001, 0x2, 0x7, 0x1, 0x8000}, &(0x7f0000000080)={0x16344836, 0x3, 0x8, 0x4a3, 0x86, 0x800, 0x3, 0x5}, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x6932b6e3, 0x9, 0x1, 0x1, 0x3, 0x3}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8}) socket$nl_audit(0x10, 0x3, 0x9) socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x0, 0x337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x616d, 0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(0x0, 0x2, 0x123000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x5b}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELSET={0x194, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_USERDATA={0x80, 0xd, 0x1, 0x0, "f74c6b440621798f7f1dc16767f3142c8ac294ef25ae011bce3f92cd87a667fb641656b3687705c9748183ecaa21432c9df9ef64d0b117a74e8b8489c95668ada9f98885cc597d833aa81fd96c7fb5ae9307c9168009aaa00387942828a22659b02d9061b5f005b07c84a5672e88e0c6d801b9a19472197802aa2aba"}, @NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xa0}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x151}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x270}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x80) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe09) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) iopl(0x3) gettid() timer_create(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0xc010) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="e52684b38c7d56297a1560dc2302d8361feeffb45459d57ad406d84bf888079585770a02652bd15b343633de06aed8cb9ffb65d50065760c776db6a8fa9c7f2ba75476c5986377993575bd110f8a3707bee3866fd41a5c4a00e2a275039e8289c19e470c614759b40f20a25d6dac5394829a9f2d80587e879d457f951ab2c0f83a3ebc241b6ddd36f85627d9ed154085ad83cbea09c83647a5", 0x99}], 0x1}, 0x1) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902240001000080000904000201030001006e290000000122f804090581034000040000"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 619.185315ms ago: executing program 4 (id=4114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x4100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) close(r3) setsockopt$sock_void(r4, 0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001480)={&(0x7f0000001040), 0xc, &(0x7f0000001440)={&(0x7f0000001200)=@allocspi={0x19c, 0x16, 0x10, 0x70bd27, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x5, 0x4e24, 0x5, 0x2, 0x0, 0x0, 0x29}, {@in=@broadcast, 0x4d5, 0xff}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x3, 0x0, 0x6, 0x5636, 0x81, 0xffffffff, 0xee, 0x4}, {0x10001, 0x2, 0x9, 0x8}, {0x1, 0x10001, 0x8}, 0x70bd29, 0x3504, 0xa, 0x1, 0x1, 0x4}, 0xa, 0x2}, [@algo_auth={0x5a, 0x1, {{'crc32c\x00'}, 0x90, "0db5cff994942e2471874828473632421247"}}, @etimer_thresh={0x8, 0xc, 0x3ff}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}, @address_filter={0x28, 0x1a, {@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x2, 0x3, 0xe3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @etimer_thresh={0x8, 0xc, 0xfff}]}, 0x19c}, 0x1, 0x0, 0x0, 0x815}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) unshare(0x40020000) 573.901385ms ago: executing program 5 (id=4115): socket(0x15, 0x5, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x800000020000007, 0x22000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x62, 0x0, 0x7}]}}}], 0x18}}], 0x1, 0x1) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfd44) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0x0, 0x2000000, 0x3, 0xfffffffd, 0xfffffffe}}) syz_open_dev$tty1(0xc, 0x4, 0x1) 554.922703ms ago: executing program 2 (id=4116): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c0002800800030000000000aa7616d42f8cff7fcb34b3048c10fe063a2b11d0677cd99b6455eef5"], 0x3c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x16c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf9, 0x3, "39fba2ac8bbb5c1384837383e3c1c5499cc1351d1108798e3e8801d0772b52828d493475fddc3c64fe5ca07c083598c388bf1ab0482050b130ba8a8a6ae6b11a6cb5c1d2836a384bac42939153c1c20edcb8084562c6502d92fd55ae21383a605f748fe6bbe889af336ffe8af13548fec2727ba69996860dfd852d8e7fb18651e5c933abfe88538a36f4d14576add7217f86f951dd9089ce43479f2cab1fc2ed763b8420e0471f96d387d2b7168060fdd2b54fd286fc1d7f9b791b42216862f9fd01ae27043b8fd7d0d6e6b7113a77015b53b6565af5a6bee0d400d2d0e4f1900dfb15631b5f6d749e57332f8677fc21b131291626"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "72a6b330bbc4229e03b84f425cad269feb7ce46ea3d61d03506aab66fdc24fe8ceb38be3"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x16c}}, 0x4040000) 399.15424ms ago: executing program 3 (id=4117): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0xfffffe57, r0}, './file0\x00'}) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000300)=0x9) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x1000000000000003, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cfc, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000003ff, 0x2, 0x0, 0xcd, 0x1, 0x0, 0xec, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x800, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x1a66, 0x0, 0x2, 0x1, 0x37c, 0x7f, 0x0, 0x0, 0x8000000000000004, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x3, 0xfffffffffffffffc, 0x200, 0x2, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x4, 0x400000, 0x204, 0x0, 0x40000000000, 0x801, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x11000000000, 0x2000000000, 0x8, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n', @ANYRESOCT], 0xb4}}, 0x0) (fail_nth: 5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r9, 0xeb, 0x10, 0x0, 0x0) 22.840553ms ago: executing program 5 (id=4118): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xf2, "7e60bdd48265afcf380dcec3471c9007fca200e905e7ee58b83cb0a3edd1de4d3d6c42d9ce29c9de69381788bcdfa694287580742a1e7a1d37e3a66c3ae22cbaebf71efbf099b7aa122ecdc521fe194c196bef710de4387854594a193ac4b99a5b3e8c5f0b93adfebbfd012f44fb95ca352bce4bdb3d189601552278708a747927e123604d44dd9ffa99ebedf3a881a8444dc24e559c47c7dd16415c53b63718698387eb4db17d96b81fe5f87017ae96673381534f725104e1a350aed1031cd6e11e0030aabd4751db6ec31540db34de29f8a64ba9f726ff0f546f9f7cf698e4eb3617d93bb22541b8034477a25d7d044d66"}, &(0x7f0000000100)=0xfa) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r0, 0xffff}, &(0x7f0000000180)=0x8) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r4 = syz_open_dev$video(&(0x7f0000000240), 0x0, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x4c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40801) socket$netlink(0x10, 0x3, 0xf) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x3c85}}, './file0\x00'}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x3, &(0x7f00000004c0)=@raw=[@call={0x85, 0x0, 0x0, 0x66}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x8a, &(0x7f0000000540)=""/138, 0x41100, 0x50, '\x00', r3, @lsm=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x4, 0x2, 0x0, 0x5d97}, 0x10, 0x0, r7, 0x1, &(0x7f0000000640)=[r2, r7], &(0x7f0000000680)=[{0x1, 0x5, 0x8, 0x2}], 0x10, 0x7ff}, 0x94) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r8, r7, 0xa, 0x0, @val=@iter={&(0x7f0000000780)=@cgroup={0x3, r7, 0x8000000000000001}, 0x10}}, 0x20) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0x1c, &(0x7f0000000800), &(0x7f0000000840)=0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f0000000880)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000008c0)={r1, 0xb0, "bd209f016d22475a2deb842da062b5e928cca90021c67cb0c22562f6d7c99e01a68283be4ef63c20121d317d9b9a316b14533e5a4a7478b1d3757f401b33ddf86199f4d37e0bfa8825e09b842cd3577b5315df181ce8b00f79e8503b98dd5107c0dbfbabc0c83bc0134aeb1e14d97946685d772a40bbd8b2ecdbeaea6a6f31f726061cbfb8bba5954cc405fac41836ae4cee1f30913d5d15ca595f979fb34d0cba53156f64063059a433a1a807bcc006"}, &(0x7f0000000980)=0xb8) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000009c0)={'veth0_to_bridge\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000a00)={'ip6_vti0\x00', {0x2, 0x4e24, @loopback}}) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000a40)={0x3, @bcast}) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000a80), 0x4) bind$alg(r2, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) sendmsg$inet(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000b80)="3f390397dc92561a6894b68e11d673d6a0ed75e7b1665ac028b3", 0x1a}, {&(0x7f0000000bc0)="84182c251043902c87ed740fa53180bd21c77b5610342e790d56f817f4cfbc8521f5d2841865d141083a380ded1b2893", 0x30}, {&(0x7f0000000c00)="ca50dd5b3fa20888ecef81a3b1f8d5250acf535f68d13c030445c7eb21e141a95ab53a41bf94cee0f5b18c1197d03968bb405720b1f03ee4a785c64f0a3bd8", 0x3f}], 0x3}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000d80)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000d40)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r12, &(0x7f0000000dc0)={0x12, 0x10, 0xfa00, {&(0x7f0000000d00), r13, r12}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r14, 0x8004f50c, &(0x7f0000000e40)) 0s ago: executing program 0 (id=4119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r4, 0x1, 0xfffffffd, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90, 0x5}, {0xc, 0x90, 0x8000000000000001}}]}, 0x54}}, 0x40) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc00000044000900000000000000000005000000a70016800d362a7f49423d7d7afbb70e2894f8ce2487b0c77b3a2d7a0628f7573c82b28a37c5a8ec59c8eb800d0433cb9918320f0d5d2145daf3674b629dccce665a3c02507c4f4d7713030f0c6798ad4e5d7ddd11d44c2f02293e9cd1542b95ce3a8b582b5ab0093c10f8531cfb9927fbe5b0d726d5915692fca3b3ad93207618", @ANYBLOB="00aab4da3bc325e44a8599c17cab84f080bc9f2fb996de97f80d2a778bcaad6674b74165c51d91f346542b949d190cb88efe8f25f3be3a9dd63eaea86ed1b8dfa926e55a8703cfe3d9dc7e9717a48c793e"], 0xbc}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 2762] ? __lock_acquire+0x622/0x1c90 [ 1237.053764][T22762] __sys_sendmsg+0x16d/0x220 [ 1237.053786][T22762] ? __pfx___sys_sendmsg+0x10/0x10 [ 1237.053822][T22762] do_syscall_64+0xcd/0xfa0 [ 1237.053839][T22762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.053856][T22762] RIP: 0033:0x7f4a1638f6c9 [ 1237.053869][T22762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1237.053885][T22762] RSP: 002b:00007f4a171b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1237.053900][T22762] RAX: ffffffffffffffda RBX: 00007f4a165e5fa0 RCX: 00007f4a1638f6c9 [ 1237.053910][T22762] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 1237.053920][T22762] RBP: 00007f4a171b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.053929][T22762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.053939][T22762] R13: 00007f4a165e6038 R14: 00007f4a165e5fa0 R15: 00007ffe76bd7cb8 [ 1237.053961][T22762] [ 1237.223529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.647702][T22773] serio: Serial port ttyS3 [ 1238.269956][T22776] blktrace: Concurrent blktraces are not allowed on loop11 [ 1238.298021][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.305956][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.593366][T22785] capability: warning: `syz.0.3714' uses 32-bit capabilities (legacy support in use) [ 1238.963142][T22784] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1239.181297][T22793] hub 1-0:1.0: USB hub found [ 1239.188208][T22793] hub 1-0:1.0: 1 port detected [ 1239.661183][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 1239.661198][ T30] audit: type=1400 audit(1762790567.286:13205): avc: denied { create } for pid=22788 comm="syz.5.3716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1239.977856][ T30] audit: type=1400 audit(1762790567.616:13206): avc: denied { create } for pid=22789 comm="syz.3.3718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1240.019290][ T30] audit: type=1400 audit(1762790567.616:13207): avc: denied { write } for pid=22789 comm="syz.3.3718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1240.042882][ T30] audit: type=1400 audit(1762790567.626:13208): avc: denied { read write } for pid=22789 comm="syz.3.3718" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.157840][ T30] audit: type=1400 audit(1762790567.626:13209): avc: denied { open } for pid=22789 comm="syz.3.3718" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.186176][ T30] audit: type=1400 audit(1762790567.626:13210): avc: denied { ioctl } for pid=22789 comm="syz.3.3718" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.220355][ T30] audit: type=1400 audit(1762790567.716:13211): avc: denied { mount } for pid=22796 comm="syz.4.3719" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1240.339169][T22803] fuse: Bad value for 'fd' [ 1240.691558][ T30] audit: type=1400 audit(1762790567.716:13212): avc: denied { map_create } for pid=22798 comm="syz.2.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1240.713392][ T30] audit: type=1400 audit(1762790567.716:13213): avc: denied { prog_load } for pid=22798 comm="syz.2.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1240.733364][ T30] audit: type=1400 audit(1762790567.716:13214): avc: denied { bpf } for pid=22798 comm="syz.2.3720" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1240.763396][T12664] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1241.443404][T12664] usb 4-1: Using ep0 maxpacket: 16 [ 1241.565518][T12664] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1241.579856][T12664] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1241.594106][T12664] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1241.604453][T12664] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1241.736753][T12664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.365327][T12664] usb 4-1: config 0 descriptor?? [ 1242.371618][T12664] usb 4-1: can't set config #0, error -71 [ 1242.383524][T12664] usb 4-1: USB disconnect, device number 98 [ 1243.683603][T22834] binder: 22832:22834 ioctl 4018620d 0 returned -22 [ 1243.720142][T22834] binder: 22832:22834 unknown command 0 [ 1243.726021][T22834] binder: 22832:22834 ioctl c0306201 2000000002c0 returned -22 [ 1244.199662][T22839] hub 1-0:1.0: USB hub found [ 1244.205287][T22839] hub 1-0:1.0: 1 port detected [ 1244.761117][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 1244.761132][ T30] audit: type=1400 audit(1762790572.406:13316): avc: denied { create } for pid=22851 comm="syz.4.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1244.898895][ T30] audit: type=1400 audit(1762790572.436:13317): avc: denied { setopt } for pid=22851 comm="syz.4.3734" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1244.956187][ T30] audit: type=1400 audit(1762790572.436:13318): avc: denied { write } for pid=22851 comm="syz.4.3734" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1244.988904][ T30] audit: type=1400 audit(1762790572.436:13319): avc: denied { open } for pid=22851 comm="syz.4.3734" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1245.023645][ T30] audit: type=1400 audit(1762790572.436:13320): avc: denied { ioctl } for pid=22851 comm="syz.4.3734" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1245.055247][ T30] audit: type=1400 audit(1762790572.446:13321): avc: denied { read } for pid=22851 comm="syz.4.3734" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1245.085564][ T30] audit: type=1400 audit(1762790572.506:13322): avc: denied { execmem } for pid=22851 comm="syz.4.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1245.109494][ T30] audit: type=1400 audit(1762790572.696:13323): avc: denied { create } for pid=22856 comm="syz.0.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1245.130959][ T30] audit: type=1400 audit(1762790572.696:13324): avc: denied { write } for pid=22856 comm="syz.0.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1245.151997][ T30] audit: type=1400 audit(1762790572.696:13325): avc: denied { read write } for pid=22856 comm="syz.0.3735" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1245.323410][T13371] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1245.497619][T13371] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1246.442490][T13371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.453237][T13371] usb 1-1: Product: syz [ 1246.458341][T13371] usb 1-1: Manufacturer: syz [ 1246.462967][T13371] usb 1-1: SerialNumber: syz [ 1246.503185][T13371] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1246.530397][ T5817] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1246.738375][ T5884] usb 1-1: USB disconnect, device number 97 [ 1247.144175][T13371] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1247.373369][T13371] usb 4-1: Using ep0 maxpacket: 32 [ 1247.392170][T13371] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1247.409243][T13371] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1247.439457][T13371] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.478525][T13371] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1247.674699][ T5817] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1247.681812][ T5817] ath9k_htc: Failed to initialize the device [ 1247.695838][ T5884] usb 1-1: ath9k_htc: USB layer deinitialized [ 1247.714546][T13371] usb 4-1: string descriptor 0 read error: -22 [ 1247.720912][T13371] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1247.779127][T13371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.916763][T13371] usb 4-1: 0:2 : does not exist [ 1249.124700][T22880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.173611][T22880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.201876][T22907] Bluetooth: Invalid byte 02 after esc byte [ 1249.222512][T12664] usb 4-1: USB disconnect, device number 99 [ 1249.486082][T17369] Bluetooth: Error in BCSP hdr checksum [ 1249.746374][ T1153] Bluetooth: Error in BCSP hdr checksum [ 1249.927067][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 1249.927084][ T30] audit: type=1400 audit(1762790577.496:13534): avc: denied { read write } for pid=22908 comm="syz.2.3753" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1250.138959][T22918] blktrace: Concurrent blktraces are not allowed on loop11 [ 1250.359095][ T30] audit: type=1400 audit(1762790577.496:13535): avc: denied { open } for pid=22908 comm="syz.2.3753" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1250.552795][ T30] audit: type=1400 audit(1762790577.496:13536): avc: denied { ioctl } for pid=22908 comm="syz.2.3753" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1250.581877][ T30] audit: type=1400 audit(1762790577.506:13537): avc: denied { name_bind } for pid=22908 comm="syz.2.3753" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1250.603954][ T30] audit: type=1400 audit(1762790577.506:13538): avc: denied { node_bind } for pid=22908 comm="syz.2.3753" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1250.625912][ T30] audit: type=1400 audit(1762790577.536:13539): avc: denied { mount } for pid=22908 comm="syz.2.3753" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1250.648173][ T30] audit: type=1400 audit(1762790577.546:13540): avc: denied { create } for pid=22908 comm="syz.2.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1250.673727][ T30] audit: type=1400 audit(1762790577.626:13541): avc: denied { allowed } for pid=22915 comm="syz.5.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1250.693587][ T30] audit: type=1400 audit(1762790577.626:13542): avc: denied { read } for pid=22915 comm="syz.5.3755" dev="nsfs" ino=4026534355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1250.715108][ T30] audit: type=1400 audit(1762790577.626:13543): avc: denied { read open } for pid=22915 comm="syz.5.3755" path="net:[4026534355]" dev="nsfs" ino=4026534355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1250.938535][T18458] Bluetooth: hci4: command 0x1003 tx timeout [ 1250.946324][T22408] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1251.233373][ T5928] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1251.663774][T22942] SELinux: failed to load policy [ 1252.022121][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1252.159658][ T5928] usb 1-1: not running at top speed; connect to a high speed hub [ 1252.179789][ T5928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.195714][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1252.209005][ T5928] usb 1-1: string descriptor 0 read error: -22 [ 1252.702232][ T5928] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1252.711376][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.755500][ T5928] usb 1-1: 0:2 : does not exist [ 1253.713475][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1253.748676][T22969] FAULT_INJECTION: forcing a failure. [ 1253.748676][T22969] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.788029][T22969] CPU: 0 UID: 0 PID: 22969 Comm: syz.2.3771 Not tainted syzkaller #0 PREEMPT(full) [ 1253.788053][T22969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1253.788063][T22969] Call Trace: [ 1253.788069][T22969] [ 1253.788077][T22969] dump_stack_lvl+0x16c/0x1f0 [ 1253.788109][T22969] should_fail_ex+0x512/0x640 [ 1253.788130][T22969] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1253.788162][T22969] should_failslab+0xc2/0x120 [ 1253.788183][T22969] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1253.788209][T22969] ? __alloc_skb+0x2b2/0x380 [ 1253.788235][T22969] ? __alloc_skb+0x2b2/0x380 [ 1253.788253][T22969] ? __pfx_netlink_insert+0x10/0x10 [ 1253.788276][T22969] __alloc_skb+0x2b2/0x380 [ 1253.788301][T22969] ? __pfx___alloc_skb+0x10/0x10 [ 1253.788322][T22969] ? netlink_autobind.isra.0+0x158/0x370 [ 1253.788353][T22969] netlink_alloc_large_skb+0x69/0x140 [ 1253.788380][T22969] netlink_sendmsg+0x698/0xdd0 [ 1253.788409][T22969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1253.788443][T22969] ____sys_sendmsg+0xa98/0xc70 [ 1253.788462][T22969] ? copy_msghdr_from_user+0x10a/0x160 [ 1253.788485][T22969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1253.788513][T22969] ___sys_sendmsg+0x134/0x1d0 [ 1253.788537][T22969] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.788557][T22969] ? __lock_acquire+0x622/0x1c90 [ 1253.788616][T22969] __sys_sendmsg+0x16d/0x220 [ 1253.788639][T22969] ? __pfx___sys_sendmsg+0x10/0x10 [ 1253.788679][T22969] do_syscall_64+0xcd/0xfa0 [ 1253.788697][T22969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.788714][T22969] RIP: 0033:0x7fd69e38f6c9 [ 1253.788729][T22969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.788746][T22969] RSP: 002b:00007fd69f149038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1253.788768][T22969] RAX: ffffffffffffffda RBX: 00007fd69e5e5fa0 RCX: 00007fd69e38f6c9 [ 1253.788780][T22969] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1253.788791][T22969] RBP: 00007fd69f149090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.788801][T22969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.788812][T22969] R13: 00007fd69e5e6038 R14: 00007fd69e5e5fa0 R15: 00007ffcb2ef6b88 [ 1253.788837][T22969] [ 1254.243408][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1254.346722][ T9] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1254.383373][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.458769][ T9] usb 4-1: Product: syz [ 1254.463364][ T9] usb 4-1: Manufacturer: syz [ 1254.468001][ T9] usb 4-1: SerialNumber: syz [ 1254.479008][ T9] usb 4-1: config 0 descriptor?? [ 1254.820988][T22979] tipc: Started in network mode [ 1254.829098][T22979] tipc: Node identity 1e61c9775f23, cluster identity 4711 [ 1254.838624][T22979] tipc: Enabled bearer , priority 0 [ 1254.840954][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1255.032295][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 1255.032332][ T30] audit: type=1400 audit(1762790582.676:13696): avc: denied { ioctl } for pid=22977 comm="syz.5.3773" path="socket:[79384]" dev="sockfs" ino=79384 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1255.032524][T22979] syzkaller0: entered promiscuous mode [ 1255.073702][T22979] syzkaller0: entered allmulticast mode [ 1255.183487][ T30] audit: type=1400 audit(1762790582.686:13697): avc: denied { ioctl } for pid=22962 comm="syz.3.3770" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1255.208805][ T30] audit: type=1400 audit(1762790582.796:13698): avc: denied { read } for pid=22971 comm="syz.2.3772" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1255.232764][ T30] audit: type=1400 audit(1762790582.796:13699): avc: denied { open } for pid=22971 comm="syz.2.3772" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1255.256415][ T30] audit: type=1400 audit(1762790582.866:13700): avc: denied { ioctl } for pid=22977 comm="syz.5.3773" path="socket:[79384]" dev="sockfs" ino=79384 ioctlcmd=0x54e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1255.283129][T22977] tipc: Resetting bearer [ 1255.290834][ T30] audit: type=1400 audit(1762790582.896:13701): avc: denied { ioctl } for pid=22971 comm="syz.2.3772" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1255.315820][ T30] audit: type=1400 audit(1762790582.926:13702): avc: denied { create } for pid=22962 comm="syz.3.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1255.417435][ T30] audit: type=1400 audit(1762790582.926:13703): avc: denied { create } for pid=22962 comm="syz.3.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1255.442827][T22977] tipc: Disabling bearer [ 1255.509468][ T5928] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1255.523467][ T30] audit: type=1400 audit(1762790582.926:13704): avc: denied { read } for pid=22962 comm="syz.3.3770" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1255.526694][ T5928] usb 1-1: Warning! Unlikely big volume range (=20196), cval->res is probably wrong. [ 1255.576292][ T5928] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/1 [ 1255.584883][ T30] audit: type=1400 audit(1762790582.926:13705): avc: denied { open } for pid=22962 comm="syz.3.3770" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1255.585488][T22986] FAULT_INJECTION: forcing a failure. [ 1255.585488][T22986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.627970][ T5928] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1255.663071][ T5928] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1255.746172][ T5928] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1255.770512][ T5928] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1255.806732][ T5928] usb 1-1: USB disconnect, device number 98 [ 1255.813388][T22986] CPU: 1 UID: 0 PID: 22986 Comm: syz.4.3774 Not tainted syzkaller #0 PREEMPT(full) [ 1255.813416][T22986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1255.813427][T22986] Call Trace: [ 1255.813433][T22986] [ 1255.813440][T22986] dump_stack_lvl+0x16c/0x1f0 [ 1255.813473][T22986] should_fail_ex+0x512/0x640 [ 1255.813497][T22986] _copy_from_user+0x2e/0xd0 [ 1255.813518][T22986] move_addr_to_kernel+0x65/0x170 [ 1255.813536][T22986] __copy_msghdr+0x386/0x470 [ 1255.813557][T22986] copy_msghdr_from_user+0xc1/0x160 [ 1255.813577][T22986] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1255.813603][T22986] ___sys_sendmsg+0xfe/0x1d0 [ 1255.813617][T22986] ? __pfx____sys_sendmsg+0x10/0x10 [ 1255.813629][T22986] ? __lock_acquire+0x622/0x1c90 [ 1255.813667][T22986] __sys_sendmsg+0x16d/0x220 [ 1255.813689][T22986] ? __pfx___sys_sendmsg+0x10/0x10 [ 1255.813724][T22986] do_syscall_64+0xcd/0xfa0 [ 1255.813743][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.813754][T22986] RIP: 0033:0x7ff728b8f6c9 [ 1255.813763][T22986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.813773][T22986] RSP: 002b:00007ff72998c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1255.813783][T22986] RAX: ffffffffffffffda RBX: 00007ff728de5fa0 RCX: 00007ff728b8f6c9 [ 1255.813790][T22986] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 1255.813796][T22986] RBP: 00007ff72998c090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.813803][T22986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.813813][T22986] R13: 00007ff728de6038 R14: 00007ff728de5fa0 R15: 00007ffdae13f8a8 [ 1255.813836][T22986] [ 1256.383365][ T5928] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1256.458631][ T9] gspca_sunplus: reg_r err -32 [ 1256.463710][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1256.471848][T13371] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 1256.545823][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 1256.554626][ T5928] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1256.565579][ T5928] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1256.584646][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 33023, setting to 1024 [ 1256.595993][ T5928] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1256.610930][ T5928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1256.621608][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.623361][T13371] usb 3-1: Invalid ep0 maxpacket: 16 [ 1256.641579][ T5928] usb 1-1: Product: syz [ 1256.647896][ T5928] usb 1-1: Manufacturer: syz [ 1256.657592][ T5928] usb 1-1: SerialNumber: syz [ 1256.676419][ T5928] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1256.692782][ T5928] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1256.708195][ T5928] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1256.763465][T13371] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 1256.923699][T13371] usb 3-1: Invalid ep0 maxpacket: 16 [ 1256.930169][T13371] usb usb3-port1: attempt power cycle [ 1256.945494][ T5817] usb 1-1: USB disconnect, device number 99 [ 1257.283390][T13371] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 1257.303720][T13371] usb 3-1: Invalid ep0 maxpacket: 16 [ 1257.433503][T13371] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1257.453785][T13371] usb 3-1: Invalid ep0 maxpacket: 16 [ 1257.459324][T13371] usb usb3-port1: unable to enumerate USB device [ 1257.497634][T13371] usb 4-1: USB disconnect, device number 100 [ 1259.044429][T17369] Bluetooth: Error in BCSP hdr checksum [ 1260.063856][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 1260.063871][ T30] audit: type=1400 audit(1762790587.716:13864): avc: denied { ioctl } for pid=23021 comm="syz.2.3787" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1260.123395][T13371] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1260.196267][ T30] audit: type=1400 audit(1762790587.836:13865): avc: denied { read write } for pid=19431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1260.233642][ T30] audit: type=1400 audit(1762790587.846:13866): avc: denied { read write open } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1260.261641][ T30] audit: type=1400 audit(1762790587.846:13867): avc: denied { ioctl } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1260.289864][ T30] audit: type=1400 audit(1762790587.876:13868): avc: denied { ioctl } for pid=23021 comm="syz.2.3787" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1260.425668][T13371] usb 3-1: Using ep0 maxpacket: 16 [ 1260.446940][T13371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1260.461308][T13371] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1260.472838][ T30] audit: type=1400 audit(1762790587.876:13869): avc: denied { write } for pid=23036 comm="syz.0.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1260.493538][T13371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.501810][T13371] usb 3-1: Product: syz [ 1260.511951][T13371] usb 3-1: Manufacturer: syz [ 1260.522048][T13371] usb 3-1: SerialNumber: syz [ 1260.550123][T13371] usb 3-1: config 0 descriptor?? [ 1260.605081][ T30] audit: type=1400 audit(1762790587.896:13870): avc: denied { nlmsg_write } for pid=23036 comm="syz.0.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1260.631777][ T30] audit: type=1400 audit(1762790587.896:13871): avc: denied { prog_load } for pid=23036 comm="syz.0.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1260.635176][T13371] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1260.756917][T13371] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1260.792275][ T30] audit: type=1400 audit(1762790587.896:13872): avc: denied { bpf } for pid=23036 comm="syz.0.3792" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1260.823019][ T30] audit: type=1400 audit(1762790587.896:13873): avc: denied { read write } for pid=23040 comm="syz.5.3793" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1260.877525][T18458] Bluetooth: hci4: command 0x1003 tx timeout [ 1260.879158][T22408] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1261.229879][T23047] blktrace: Concurrent blktraces are not allowed on loop7 [ 1261.437168][T13371] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1263.298909][T13371] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1263.564081][T13371] em28xx 3-1:0.0: board has no eeprom [ 1263.653496][T13371] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1263.676284][T13371] em28xx 3-1:0.0: dvb set to bulk mode. [ 1263.681982][ T10] em28xx 3-1:0.0: Binding DVB extension [ 1263.717178][T13371] usb 3-1: USB disconnect, device number 102 [ 1263.738168][T13371] em28xx 3-1:0.0: Disconnecting em28xx [ 1263.913923][ T10] em28xx 3-1:0.0: Registering input extension [ 1263.942182][T13371] em28xx 3-1:0.0: Closing input extension [ 1264.025312][T13371] em28xx 3-1:0.0: Freeing device [ 1264.466730][T23080] hub 1-0:1.0: USB hub found [ 1264.472712][T23080] hub 1-0:1.0: 1 port detected [ 1265.126085][T23089] FAULT_INJECTION: forcing a failure. [ 1265.126085][T23089] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.153359][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 1265.153373][ T30] audit: type=1400 audit(1762790592.776:13997): avc: denied { write } for pid=23087 comm="syz.2.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1265.233453][T23089] CPU: 1 UID: 0 PID: 23089 Comm: syz.2.3806 Not tainted syzkaller #0 PREEMPT(full) [ 1265.233479][T23089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1265.233490][T23089] Call Trace: [ 1265.233496][T23089] [ 1265.233503][T23089] dump_stack_lvl+0x16c/0x1f0 [ 1265.233543][T23089] should_fail_ex+0x512/0x640 [ 1265.233563][T23089] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1265.233593][T23089] should_failslab+0xc2/0x120 [ 1265.233613][T23089] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1265.233638][T23089] ? __alloc_skb+0x2b2/0x380 [ 1265.233664][T23089] ? __alloc_skb+0x2b2/0x380 [ 1265.233682][T23089] ? __pfx_netlink_insert+0x10/0x10 [ 1265.233704][T23089] __alloc_skb+0x2b2/0x380 [ 1265.233725][T23089] ? __pfx___alloc_skb+0x10/0x10 [ 1265.233746][T23089] ? netlink_autobind.isra.0+0x158/0x370 [ 1265.233777][T23089] netlink_alloc_large_skb+0x69/0x140 [ 1265.233803][T23089] netlink_sendmsg+0x698/0xdd0 [ 1265.233832][T23089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.233866][T23089] ____sys_sendmsg+0xa98/0xc70 [ 1265.233884][T23089] ? copy_msghdr_from_user+0x10a/0x160 [ 1265.233906][T23089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1265.233934][T23089] ___sys_sendmsg+0x134/0x1d0 [ 1265.233958][T23089] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.233978][T23089] ? __lock_acquire+0x622/0x1c90 [ 1265.234038][T23089] __sys_sendmsg+0x16d/0x220 [ 1265.234061][T23089] ? __pfx___sys_sendmsg+0x10/0x10 [ 1265.234097][T23089] do_syscall_64+0xcd/0xfa0 [ 1265.234116][T23089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.234131][T23089] RIP: 0033:0x7fd69e38f6c9 [ 1265.234144][T23089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.234158][T23089] RSP: 002b:00007fd69f149038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.234175][T23089] RAX: ffffffffffffffda RBX: 00007fd69e5e5fa0 RCX: 00007fd69e38f6c9 [ 1265.234186][T23089] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1265.234196][T23089] RBP: 00007fd69f149090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.234206][T23089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.234216][T23089] R13: 00007fd69e5e6038 R14: 00007fd69e5e5fa0 R15: 00007ffcb2ef6b88 [ 1265.234239][T23089] [ 1265.250279][ T30] audit: type=1400 audit(1762790592.776:13998): avc: denied { read } for pid=23087 comm="syz.2.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1265.415369][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.531157][ T30] audit: type=1400 audit(1762790592.806:13999): avc: denied { read write } for pid=23090 comm="syz.3.3808" name="vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1265.605905][T23098] blktrace: Concurrent blktraces are not allowed on loop5 [ 1265.868368][ T30] audit: type=1400 audit(1762790592.806:14000): avc: denied { open } for pid=23090 comm="syz.3.3808" path="/dev/vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1265.892840][ T30] audit: type=1400 audit(1762790592.806:14001): avc: denied { ioctl } for pid=23090 comm="syz.3.3808" path="/dev/vbi2" dev="devtmpfs" ino=965 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1265.917749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.926443][ T30] audit: type=1400 audit(1762790592.976:14002): avc: denied { create } for pid=23092 comm="syz.5.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1265.952595][ T30] audit: type=1400 audit(1762790593.006:14003): avc: denied { mount } for pid=23092 comm="syz.5.3807" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1265.979260][ T30] audit: type=1400 audit(1762790593.016:14004): avc: denied { read } for pid=23092 comm="syz.5.3807" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1266.037814][ T30] audit: type=1400 audit(1762790593.016:14005): avc: denied { open } for pid=23092 comm="syz.5.3807" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1266.063565][ T30] audit: type=1400 audit(1762790593.016:14006): avc: denied { ioctl } for pid=23092 comm="syz.5.3807" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1267.078206][ T5884] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1267.293602][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 1267.306984][ T5884] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1267.323391][T13371] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1267.337720][ T5884] usb 3-1: config 179 has no interface number 0 [ 1267.352508][ T5884] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1267.381604][ T5884] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1267.393177][ T5884] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1267.415941][ T5884] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1267.483753][T23120] hub 1-0:1.0: USB hub found [ 1267.489181][T23120] hub 1-0:1.0: 1 port detected [ 1267.622623][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1267.703672][ T5884] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1267.713366][T13371] usb 6-1: Using ep0 maxpacket: 16 [ 1267.730138][T13371] usb 6-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1267.746449][ T5884] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1267.760015][ T5884] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1267.760022][T13371] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1267.760048][T13371] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1267.769579][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.839822][T13371] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1267.849256][T13371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.863240][T23108] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1267.880270][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1267.889585][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.902543][T13371] usb 6-1: config 0 descriptor?? [ 1267.922468][ T5884] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input33 [ 1267.936596][ T10] usb 4-1: Product: syz [ 1267.951582][ T10] usb 4-1: Manufacturer: syz [ 1267.969001][T13371] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1267.997222][ T10] usb 4-1: SerialNumber: syz [ 1268.041971][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1268.076546][T13371] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1268.251496][ T5884] usb 3-1: USB disconnect, device number 103 [ 1268.257629][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1268.588396][ T10] usb 4-1: USB disconnect, device number 101 [ 1269.066807][T12664] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1269.227107][T12664] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1269.283456][T12664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.291912][T12664] usb 1-1: Product: syz [ 1269.304628][T21708] usb 6-1: USB disconnect, device number 16 [ 1269.307745][T12664] usb 1-1: Manufacturer: syz [ 1269.328242][T12664] usb 1-1: SerialNumber: syz [ 1269.338134][T13371] usb 4-1: Service connection timeout for: 256 [ 1269.354365][T12664] usb 1-1: config 0 descriptor?? [ 1269.359444][T13371] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1269.369389][T12664] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 100 [ 1269.388926][T13371] ath9k_htc: Failed to initialize the device [ 1269.409362][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 1269.433647][ T5817] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1269.593391][ T5817] usb 3-1: device descriptor read/64, error -71 [ 1269.651896][T12664] (null): failure setting delay to 10us [ 1269.658584][T12664] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1269.674657][T12664] usb 1-1: USB disconnect, device number 100 [ 1270.133842][ T5817] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1270.243185][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 1270.243231][ T30] audit: type=1400 audit(1762790597.886:14198): avc: denied { ioctl } for pid=23134 comm="syz.2.3819" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1270.298253][ T5817] usb 3-1: device descriptor read/64, error -71 [ 1270.390233][ T30] audit: type=1400 audit(1762790598.036:14199): avc: denied { create } for pid=23148 comm="syz.0.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1270.410260][ T30] audit: type=1400 audit(1762790598.036:14200): avc: denied { getopt } for pid=23148 comm="syz.0.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1270.432964][ T30] audit: type=1400 audit(1762790598.036:14201): avc: denied { create } for pid=23148 comm="syz.0.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1270.458346][ T5817] usb usb3-port1: attempt power cycle [ 1270.565791][ T30] audit: type=1400 audit(1762790598.036:14202): avc: denied { prog_load } for pid=23148 comm="syz.0.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1270.589234][ T30] audit: type=1400 audit(1762790598.036:14203): avc: denied { bpf } for pid=23148 comm="syz.0.3824" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1270.632355][ T30] audit: type=1400 audit(1762790598.036:14204): avc: denied { read write } for pid=19431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1271.091947][ T30] audit: type=1400 audit(1762790598.036:14205): avc: denied { open } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1271.128285][ T30] audit: type=1400 audit(1762790598.036:14206): avc: denied { ioctl } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1271.160687][ T30] audit: type=1400 audit(1762790598.116:14207): avc: denied { ioctl } for pid=23134 comm="syz.2.3819" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1271.373390][ T5817] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1271.394349][ T5817] usb 3-1: device descriptor read/8, error -71 [ 1272.073488][ T5817] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1272.094066][ T5817] usb 3-1: device descriptor read/8, error -71 [ 1272.233045][ T5817] usb usb3-port1: unable to enumerate USB device [ 1272.263361][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1272.452572][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1272.469354][ T24] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1272.477845][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1272.876358][ T24] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1272.960588][ T24] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1273.205093][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1273.235394][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1273.247481][ T24] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1273.348872][ T24] usb 6-1: Product: syz [ 1273.354025][ T24] usb 6-1: Manufacturer: syz [ 1273.359382][ T24] usb 6-1: SerialNumber: syz [ 1273.368686][ T24] usb 6-1: config 0 descriptor?? [ 1273.378043][ T24] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1273.406272][ T24] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1273.577925][T13371] usb 6-1: USB disconnect, device number 17 [ 1273.583913][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1273.589954][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1273.731991][T13371] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1273.796908][T23167] FAULT_INJECTION: forcing a failure. [ 1273.796908][T23167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.902437][T23187] hub 1-0:1.0: USB hub found [ 1273.907301][T23167] CPU: 1 UID: 0 PID: 23167 Comm: syz.5.3829 Not tainted syzkaller #0 PREEMPT(full) [ 1273.907329][T23167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1273.907339][T23167] Call Trace: [ 1273.907345][T23167] [ 1273.907352][T23167] dump_stack_lvl+0x16c/0x1f0 [ 1273.907384][T23167] should_fail_ex+0x512/0x640 [ 1273.907407][T23167] _copy_from_user+0x2e/0xd0 [ 1273.907430][T23167] core_sys_select+0x35b/0xc20 [ 1273.907453][T23167] ? __pfx_core_sys_select+0x10/0x10 [ 1273.907493][T23167] ? set_user_sigmask+0x21b/0x2b0 [ 1273.907512][T23167] ? __pfx_set_user_sigmask+0x10/0x10 [ 1273.907535][T23167] do_pselect.constprop.0+0x19f/0x1e0 [ 1273.907554][T23167] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1273.907580][T23167] __x64_sys_pselect6+0x182/0x240 [ 1273.907598][T23167] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 1273.907621][T23167] do_syscall_64+0xcd/0xfa0 [ 1273.907639][T23167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.907656][T23167] RIP: 0033:0x7f4a1638f6c9 [ 1273.907670][T23167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.907686][T23167] RSP: 002b:00007f4a171b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1273.907704][T23167] RAX: ffffffffffffffda RBX: 00007f4a165e5fa0 RCX: 00007f4a1638f6c9 [ 1273.907715][T23167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000017 [ 1273.907726][T23167] RBP: 00007f4a171b0090 R08: 0000200000000000 R09: 0000000000000000 [ 1273.907736][T23167] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1273.907746][T23167] R13: 00007f4a165e6038 R14: 00007f4a165e5fa0 R15: 00007ffe76bd7cb8 [ 1273.907770][T23167] [ 1273.966418][T23187] hub 1-0:1.0: 1 port detected [ 1274.090409][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1274.110075][ T10] usb 3-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1274.120557][ T10] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.155660][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1274.162467][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1274.176473][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.203246][ T10] usb 3-1: config 0 descriptor?? [ 1274.212495][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1275.538592][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 1275.538608][ T30] audit: type=1400 audit(1762790603.176:14387): avc: denied { read write } for pid=23209 comm="syz.4.3841" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1275.633469][ T30] audit: type=1400 audit(1762790603.176:14388): avc: denied { read write open } for pid=23209 comm="syz.4.3841" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1275.743681][ T30] audit: type=1400 audit(1762790603.176:14389): avc: denied { ioctl } for pid=23209 comm="syz.4.3841" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1275.903848][T12664] usb 3-1: USB disconnect, device number 108 [ 1276.116670][ T30] audit: type=1400 audit(1762790603.176:14390): avc: denied { ioctl } for pid=23209 comm="syz.4.3841" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1276.526550][T23213] SELinux: failed to load policy [ 1276.713368][ T30] audit: type=1400 audit(1762790603.476:14391): avc: denied { prog_load } for pid=23211 comm="syz.2.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1276.753406][ T30] audit: type=1400 audit(1762790603.476:14392): avc: denied { bpf } for pid=23211 comm="syz.2.3842" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1276.787641][ T30] audit: type=1400 audit(1762790603.476:14393): avc: denied { perfmon } for pid=23211 comm="syz.2.3842" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1276.809536][ T30] audit: type=1400 audit(1762790603.476:14394): avc: denied { bpf } for pid=23211 comm="syz.2.3842" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1276.830459][ T30] audit: type=1400 audit(1762790603.486:14395): avc: denied { prog_run } for pid=23211 comm="syz.2.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1276.873508][ T30] audit: type=1400 audit(1762790603.816:14396): avc: denied { load_policy } for pid=23211 comm="syz.2.3842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1276.910967][T23217] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3845'. [ 1277.573463][ T10] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1277.913564][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1278.070755][T23223] create_pit_timer: 1 callbacks suppressed [ 1278.070764][T23223] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1278.093775][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1278.105730][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.117931][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1278.127034][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1278.136069][T23223] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1278.148173][T23223] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1278.162764][T23223] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1278.170988][T23223] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1278.188341][T23223] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1278.201418][T23223] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 1278.210087][T23223] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1278.230041][T23223] kvm: requested 147504 ns i8254 timer period limited to 200000 ns [ 1278.260509][T23223] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 1278.282611][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1278.514971][T23230] SELinux: failed to load policy [ 1278.839016][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.847167][ T10] usb 3-1: Product: syz [ 1278.847185][ T10] usb 3-1: Manufacturer: syz [ 1278.847200][ T10] usb 3-1: SerialNumber: syz [ 1279.508484][ T10] usb 3-1: USB disconnect, device number 109 [ 1280.545988][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 1280.546000][ T30] audit: type=1400 audit(1762790608.196:14479): avc: denied { read } for pid=23252 comm="syz.4.3853" dev="nsfs" ino=4026532829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1280.673441][T23256] blktrace: Concurrent blktraces are not allowed on loop9 [ 1280.904822][ T30] audit: type=1400 audit(1762790608.236:14480): avc: denied { open } for pid=23252 comm="syz.4.3853" path="net:[4026532829]" dev="nsfs" ino=4026532829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1280.930258][ T30] audit: type=1400 audit(1762790608.236:14481): avc: denied { create } for pid=23252 comm="syz.4.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1281.032206][ T30] audit: type=1400 audit(1762790608.236:14482): avc: denied { write } for pid=23252 comm="syz.4.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1281.082431][ T30] audit: type=1400 audit(1762790608.236:14483): avc: denied { read } for pid=23252 comm="syz.4.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1281.104883][ T30] audit: type=1400 audit(1762790608.236:14484): avc: denied { read } for pid=23252 comm="syz.4.3853" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1281.128340][ T30] audit: type=1400 audit(1762790608.236:14485): avc: denied { open } for pid=23252 comm="syz.4.3853" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1281.390954][ T30] audit: type=1400 audit(1762790608.296:14486): avc: denied { read write } for pid=23252 comm="syz.4.3853" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1281.534004][ T30] audit: type=1400 audit(1762790608.296:14487): avc: denied { open } for pid=23252 comm="syz.4.3853" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1281.622332][ T30] audit: type=1400 audit(1762790608.296:14488): avc: denied { ioctl } for pid=23252 comm="syz.4.3853" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1281.763387][ T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1281.993348][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1282.037168][ T10] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1282.050353][ T10] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1282.068037][ T10] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1282.097260][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1282.185387][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1282.309325][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.399746][ T10] usb 4-1: Product: syz [ 1282.413884][ T10] usb 4-1: Manufacturer: syz [ 1282.484891][ T10] usb 4-1: SerialNumber: syz [ 1283.558066][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 102 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1285.454242][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 1287.053545][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 1287.053560][ T30] audit: type=1400 audit(1762790614.706:14626): avc: denied { create } for pid=23307 comm="syz.0.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1287.184177][ T10] usb 4-1: USB disconnect, device number 102 [ 1287.275804][ T10] usblp0: removed [ 1287.299903][ T30] audit: type=1400 audit(1762790614.736:14627): avc: denied { write } for pid=23307 comm="syz.0.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1287.363629][ T30] audit: type=1400 audit(1762790614.746:14628): avc: denied { create } for pid=23307 comm="syz.0.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1287.433218][ T30] audit: type=1400 audit(1762790614.746:14629): avc: denied { write } for pid=23307 comm="syz.0.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1287.539773][T23319] blktrace: Concurrent blktraces are not allowed on loop7 [ 1287.786989][ T30] audit: type=1400 audit(1762790614.746:14630): avc: denied { nlmsg_write } for pid=23307 comm="syz.0.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1287.839433][ T30] audit: type=1400 audit(1762790615.066:14631): avc: denied { allowed } for pid=23317 comm="syz.3.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1287.846530][T23305] SELinux: failed to load policy [ 1287.885927][ T30] audit: type=1400 audit(1762790615.076:14632): avc: denied { read } for pid=23317 comm="syz.3.3867" dev="nsfs" ino=4026533414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1287.908040][ T30] audit: type=1400 audit(1762790615.076:14633): avc: denied { open } for pid=23317 comm="syz.3.3867" path="net:[4026533414]" dev="nsfs" ino=4026533414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1287.937549][ T30] audit: type=1400 audit(1762790615.076:14634): avc: denied { create } for pid=23317 comm="syz.3.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1288.023392][ T30] audit: type=1400 audit(1762790615.086:14635): avc: denied { write } for pid=23317 comm="syz.3.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1289.381241][T23341] netlink: 'syz.2.3870': attribute type 33 has an invalid length. [ 1289.389422][T23341] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3870'. [ 1289.424970][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1289.432947][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1289.440781][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1289.448580][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1289.455222][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3870'. [ 1289.456502][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1289.473057][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1289.480912][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1289.488770][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1289.496588][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1289.504401][T23345] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1291.838283][T23371] SELinux: failed to load policy [ 1292.143417][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 1292.143433][ T30] audit: type=1400 audit(1762790619.526:14763): avc: denied { read write } for pid=23368 comm="syz.0.3879" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1292.184092][ T30] audit: type=1400 audit(1762790619.526:14764): avc: denied { open } for pid=23368 comm="syz.0.3879" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1292.208543][ T30] audit: type=1400 audit(1762790619.536:14765): avc: denied { ioctl } for pid=23368 comm="syz.0.3879" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1292.338861][ T30] audit: type=1400 audit(1762790619.716:14766): avc: denied { write } for pid=23370 comm="syz.2.3878" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1292.762552][ T30] audit: type=1400 audit(1762790619.716:14767): avc: denied { open } for pid=23370 comm="syz.2.3878" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1292.786267][ T30] audit: type=1400 audit(1762790619.716:14768): avc: denied { ioctl } for pid=23370 comm="syz.2.3878" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1292.835439][ T30] audit: type=1400 audit(1762790619.766:14769): avc: denied { prog_load } for pid=23373 comm="syz.5.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1292.902653][ T30] audit: type=1400 audit(1762790619.766:14770): avc: denied { bpf } for pid=23373 comm="syz.5.3880" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1292.993525][ T30] audit: type=1400 audit(1762790619.766:14771): avc: denied { perfmon } for pid=23373 comm="syz.5.3880" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1293.023615][ T30] audit: type=1400 audit(1762790619.796:14772): avc: denied { execmem } for pid=23373 comm="syz.5.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1293.818235][T23396] create_pit_timer: 1 callbacks suppressed [ 1293.818246][T23396] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1293.868145][T23388] blktrace: Concurrent blktraces are not allowed on loop7 [ 1294.016940][T23394] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1294.057543][T23394] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1294.222565][T23394] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1294.230702][T23394] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1294.238933][T23394] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1294.301376][T23408] netlink: 'syz.2.3886': attribute type 33 has an invalid length. [ 1294.309446][T23408] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3886'. [ 1294.376530][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 1294.826169][T23394] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 1294.836556][T23394] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1294.845590][T23394] kvm: requested 149181 ns i8254 timer period limited to 200000 ns [ 1294.963685][T23416] hub 1-0:1.0: USB hub found [ 1294.971892][T23416] hub 1-0:1.0: 1 port detected [ 1295.342630][T23394] kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 1295.903354][ T5817] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1296.365377][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1297.065621][ T5817] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1297.080895][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.094236][ T5817] usb 3-1: config 0 descriptor?? [ 1297.320192][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 1297.320224][ T30] audit: type=1400 audit(1762790624.966:14904): avc: denied { ioctl } for pid=23427 comm="syz.2.3892" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1297.513834][ T30] audit: type=1400 audit(1762790625.066:14905): avc: denied { ioctl } for pid=23427 comm="syz.2.3892" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1297.628048][T23429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.704548][T23429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.712345][ T30] audit: type=1400 audit(1762790625.266:14906): avc: denied { create } for pid=23427 comm="syz.2.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1297.876431][ T30] audit: type=1400 audit(1762790625.276:14907): avc: denied { read write } for pid=23427 comm="syz.2.3892" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1297.885217][ T5817] cypress 0003:04B4:07B1.0021: hidraw0: USB HID v1.01 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 1297.905300][ T30] audit: type=1400 audit(1762790625.276:14908): avc: denied { open } for pid=23427 comm="syz.2.3892" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1297.944861][ T30] audit: type=1400 audit(1762790625.276:14909): avc: denied { ioctl } for pid=23427 comm="syz.2.3892" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1297.970011][ T30] audit: type=1400 audit(1762790625.466:14910): avc: denied { ioctl } for pid=23427 comm="syz.2.3892" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1297.995022][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.001263][ T30] audit: type=1400 audit(1762790625.486:14911): avc: denied { create } for pid=23423 comm="syz.0.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1298.029375][ T30] audit: type=1400 audit(1762790625.676:14912): avc: denied { read write } for pid=23427 comm="syz.2.3892" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1298.098366][ T24] usb 3-1: USB disconnect, device number 110 [ 1298.102407][ T30] audit: type=1400 audit(1762790625.676:14913): avc: denied { read write open } for pid=23427 comm="syz.2.3892" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1298.313537][T23448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1298.368560][T23441] fido_id[23441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1298.801897][T23452] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.910223][T23455] mkiss: ax0: crc mode is auto. [ 1299.269305][T23452] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.749404][T23452] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.760094][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.769264][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.920892][T23456] block nbd2: shutting down sockets [ 1300.195389][T23481] netlink: 'syz.0.3900': attribute type 33 has an invalid length. [ 1300.203356][T23481] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1300.307523][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1300.494484][T23452] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.681787][ T6089] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.730167][T17369] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.769820][T17369] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.835489][T12664] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1300.875929][ T6089] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.121055][T12664] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.136588][T12664] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1301.148557][T12664] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1301.160369][T12664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.172698][T12664] usb 4-1: config 0 descriptor?? [ 1302.535707][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 1302.535741][ T30] audit: type=1400 audit(1762790630.186:15107): avc: denied { read write } for pid=19431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1302.625456][ T30] audit: type=1400 audit(1762790630.216:15108): avc: denied { open } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1302.683910][ T30] audit: type=1400 audit(1762790630.226:15109): avc: denied { ioctl } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1302.844654][T23523] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3911'. [ 1302.889679][ T30] audit: type=1400 audit(1762790630.426:15110): avc: denied { map_create } for pid=23512 comm="syz.0.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1302.994055][ T30] audit: type=1400 audit(1762790630.426:15111): avc: denied { map_read map_write } for pid=23512 comm="syz.0.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1303.505531][ T30] audit: type=1400 audit(1762790630.426:15112): avc: denied { prog_load } for pid=23512 comm="syz.0.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1303.531913][ T30] audit: type=1400 audit(1762790630.426:15113): avc: denied { bpf } for pid=23512 comm="syz.0.3911" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1303.553168][ T30] audit: type=1400 audit(1762790630.426:15114): avc: denied { perfmon } for pid=23512 comm="syz.0.3911" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1303.574186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1303.740542][T12664] Bluetooth: Can't get version to change to load ram patch err [ 1303.759306][ T30] audit: type=1400 audit(1762790630.436:15115): avc: denied { prog_run } for pid=23512 comm="syz.0.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1303.783377][T12664] Bluetooth: Loading patch file failed [ 1303.788962][T12664] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 1303.837777][ T30] audit: type=1400 audit(1762790630.436:15116): avc: denied { read } for pid=23512 comm="syz.0.3911" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1303.870894][T12664] usb 4-1: USB disconnect, device number 103 [ 1304.058169][T23538] blktrace: Concurrent blktraces are not allowed on loop7 [ 1304.706262][T23545] binder: 23544:23545 ioctl c0189375 200000000000 returned -22 [ 1305.161392][T23546] SELinux: failed to load policy [ 1305.625559][T23551] C: renamed from team_slave_0 (while UP) [ 1305.637638][T23551] netlink: 'syz.2.3920': attribute type 3 has an invalid length. [ 1305.702198][T23551] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3920'. [ 1305.714390][T23551] net_ratelimit: 44 callbacks suppressed [ 1305.714407][T23551] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1305.947796][T23560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=23560 comm=syz.3.3921 [ 1306.295372][ T5884] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 1306.679904][ T5884] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1306.699721][ T5884] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1306.720935][ T5884] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1306.778381][ T5884] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1306.895746][ T5884] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1306.945244][ T5884] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1306.969535][ T5884] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1306.997396][ T5884] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1307.041882][ T5884] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1307.073317][ T5884] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1307.108652][ T5884] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1307.127880][ T5884] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1307.201750][T23578] blktrace: Concurrent blktraces are not allowed on loop7 [ 1307.215260][ T5884] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1307.400275][ T5884] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1307.528099][ T5884] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1307.551761][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 1307.551776][ T30] audit: type=1400 audit(1762790635.196:15256): avc: denied { ioctl } for pid=23554 comm="syz.0.3919" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1307.587468][ T30] audit: type=1400 audit(1762790635.236:15257): avc: denied { ioctl } for pid=23554 comm="syz.0.3919" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1307.613210][ T5884] usb 1-1: string descriptor 0 read error: -22 [ 1307.629761][ T5884] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1307.641772][ T30] audit: type=1400 audit(1762790635.266:15258): avc: denied { ioctl } for pid=23554 comm="syz.0.3919" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1307.677210][T23583] can0: slcan on ttyprintk. [ 1307.719555][ T30] audit: type=1400 audit(1762790635.266:15259): avc: denied { read write } for pid=23576 comm="syz.5.3925" name="vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1307.737455][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.755823][ T30] audit: type=1400 audit(1762790635.266:15260): avc: denied { open } for pid=23576 comm="syz.5.3925" path="/dev/vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1307.821488][ T5884] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1307.832549][ T30] audit: type=1400 audit(1762790635.276:15261): avc: denied { ioctl } for pid=23576 comm="syz.5.3925" path="/dev/vbi2" dev="devtmpfs" ino=965 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1308.193329][ T30] audit: type=1400 audit(1762790635.276:15262): avc: denied { create } for pid=23576 comm="syz.5.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1308.253349][ T30] audit: type=1400 audit(1762790635.276:15263): avc: denied { write } for pid=23576 comm="syz.5.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1308.277376][ T30] audit: type=1400 audit(1762790635.346:15264): avc: denied { bpf } for pid=23570 comm="syz.4.3923" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1308.303080][T23593] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1308.378207][T23576] can0 (unregistered): slcan off ttyprintk. [ 1308.483712][T20410] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1308.653415][T20410] usb 3-1: Using ep0 maxpacket: 16 [ 1308.660861][T20410] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1308.680028][T20410] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1308.816102][T20410] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1308.867982][T20410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.896497][T20410] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1308.906469][T20410] usb 3-1: config 0 has no interface number 0 [ 1309.112081][T23593] syz.3.3927 (23593): drop_caches: 2 [ 1309.131668][T20410] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1309.292798][T20410] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1309.336029][T20410] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1309.419147][T20410] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1309.461620][T20410] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1310.582128][ T10] usb 1-1: USB disconnect, device number 101 [ 1311.705837][T23621] blktrace: Concurrent blktraces are not allowed on loop1 [ 1311.971421][T20410] usb 3-1: string descriptor 0 read error: -71 [ 1312.186998][T23627] blktrace: Concurrent blktraces are not allowed on loop5 [ 1312.203515][ T5884] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1312.223535][T20410] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1312.354557][T20410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.428591][T20410] usb 3-1: config 0 descriptor?? [ 1312.464400][T20410] usb 3-1: can't set config #0, error -71 [ 1312.477959][ T5884] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1312.527209][T23634] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1312.545379][T20410] usb 3-1: USB disconnect, device number 111 [ 1312.551611][ T5884] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1312.593693][ T30] kauditd_printk_skb: 272 callbacks suppressed [ 1312.593708][ T30] audit: type=1400 audit(1762790640.236:15472): avc: denied { create } for pid=23633 comm="syz.2.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1312.696004][ T5884] usb 6-1: config 150 has no interface number 0 [ 1312.702315][ T5884] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1312.739653][ T5884] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1312.779986][ T30] audit: type=1400 audit(1762790640.246:15473): avc: denied { unlink } for pid=20180 comm="syz-executor" name="file0" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1312.828881][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.853632][ T5884] usb 6-1: Product: syz [ 1312.857834][ T5884] usb 6-1: Manufacturer: syz [ 1312.881799][ T5884] usb 6-1: SerialNumber: syz [ 1312.928509][ T30] audit: type=1400 audit(1762790640.376:15474): avc: denied { search } for pid=23639 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.123333][ T10] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 1313.248454][ T5884] xr_serial 6-1:150.204: skipping garbage [ 1313.339141][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1313.346952][ T5884] xr_serial 6-1:150.204: xr_serial converter detected [ 1313.366585][T23649] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1313.376730][T23649] SELinux: failed to load policy [ 1313.378277][ T5884] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1313.396599][ T30] audit: type=1400 audit(1762790640.376:15475): avc: denied { search } for pid=23639 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.442404][ T5884] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1313.556595][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1313.570248][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1313.584585][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1313.603915][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1313.605741][ T5884] usb 6-1: USB disconnect, device number 18 [ 1313.615296][ T30] audit: type=1400 audit(1762790640.376:15476): avc: denied { search } for pid=23639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.644962][ T30] audit: type=1400 audit(1762790640.376:15477): avc: denied { search } for pid=23639 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.673649][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1313.681082][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1313.702073][ T30] audit: type=1400 audit(1762790640.376:15478): avc: denied { ioctl } for pid=23608 comm="syz.5.3930" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1313.733415][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1313.854469][ T5884] xr_serial 6-1:150.204: device disconnected [ 1313.909328][T23656] hub 1-0:1.0: USB hub found [ 1313.914976][T23656] hub 1-0:1.0: 1 port detected [ 1314.001871][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1314.211129][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1314.223445][ T30] audit: type=1400 audit(1762790640.386:15479): avc: denied { ioctl } for pid=23608 comm="syz.5.3930" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1314.251111][T23659] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1314.267900][T23659] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 1314.303573][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1314.314733][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1314.344583][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1314.543521][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1314.632949][T23668] netlink: 'syz.5.3939': attribute type 33 has an invalid length. [ 1314.641020][T23668] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3939'. [ 1314.656127][T23668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3939'. [ 1315.513509][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1315.530150][ T10] usb 3-1: string descriptor 0 read error: -22 [ 1315.591730][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1315.670420][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.390065][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1316.407326][ T10] usb 3-1: USB disconnect, device number 112 [ 1317.584661][T23702] wg1: entered promiscuous mode [ 1317.589736][T23702] wg1: entered allmulticast mode [ 1317.685388][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 1317.685418][ T30] audit: type=1400 audit(1762790645.326:15627): avc: denied { create } for pid=23698 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1317.903472][ T30] audit: type=1400 audit(1762790645.546:15628): avc: denied { read write } for pid=19431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1318.003397][ T30] audit: type=1400 audit(1762790645.546:15629): avc: denied { open } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1318.088321][ T30] audit: type=1400 audit(1762790645.546:15630): avc: denied { ioctl } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1318.136243][T23708] netlink: 'syz.3.3950': attribute type 2 has an invalid length. [ 1318.287101][ T30] audit: type=1400 audit(1762790645.716:15631): avc: denied { prog_load } for pid=23706 comm="syz.3.3950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1318.344307][ T1052] Bluetooth: Error in BCSP hdr checksum [ 1318.430984][T23715] ip6t_srh: unknown srh match flags 4000 [ 1318.665438][ T3558] Bluetooth: Error in BCSP hdr checksum [ 1318.728427][ T30] audit: type=1400 audit(1762790645.716:15632): avc: denied { bpf } for pid=23706 comm="syz.3.3950" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1318.782675][ T30] audit: type=1400 audit(1762790645.716:15633): avc: denied { perfmon } for pid=23706 comm="syz.3.3950" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1318.875085][ T30] audit: type=1400 audit(1762790645.766:15634): avc: denied { create } for pid=23698 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1319.253447][ T30] audit: type=1400 audit(1762790645.766:15635): avc: denied { write } for pid=23698 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1319.450426][ T30] audit: type=1400 audit(1762790645.766:15636): avc: denied { read } for pid=23698 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1320.133373][T18458] Bluetooth: hci4: command 0x1003 tx timeout [ 1320.216549][T22408] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1320.600015][T23731] SELinux: failed to load policy [ 1321.220136][T23741] netlink: 'syz.4.3958': attribute type 2 has an invalid length. [ 1322.699354][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 1322.699369][ T30] audit: type=1400 audit(1762790650.346:15733): avc: denied { execmem } for pid=23740 comm="syz.4.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1323.139949][ T30] audit: type=1400 audit(1762790650.386:15734): avc: denied { read write } for pid=19431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1323.235256][ T30] audit: type=1400 audit(1762790650.386:15735): avc: denied { read write open } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1323.404573][ T30] audit: type=1400 audit(1762790650.386:15736): avc: denied { ioctl } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1324.157861][ T30] audit: type=1400 audit(1762790650.406:15737): avc: denied { create } for pid=23755 comm="syz.5.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1324.220883][T23775] Bluetooth: Invalid byte 02 after esc byte [ 1324.245745][ T30] audit: type=1400 audit(1762790650.406:15738): avc: denied { map_create } for pid=23755 comm="syz.5.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1324.274167][ T30] audit: type=1400 audit(1762790650.416:15739): avc: denied { read } for pid=23755 comm="syz.5.3964" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1324.298656][ T30] audit: type=1400 audit(1762790650.416:15740): avc: denied { open } for pid=23755 comm="syz.5.3964" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1324.405687][ T30] audit: type=1400 audit(1762790650.516:15741): avc: denied { write } for pid=23755 comm="syz.5.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1324.493850][ T30] audit: type=1400 audit(1762790650.516:15742): avc: denied { nlmsg_write } for pid=23755 comm="syz.5.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1325.370583][T23796] wg1: entered promiscuous mode [ 1325.375739][T23796] wg1: entered allmulticast mode [ 1325.737376][T23793] mkiss: ax0: crc mode is auto. [ 1326.363616][T18458] Bluetooth: hci4: command 0x1003 tx timeout [ 1326.417950][T22408] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1327.114536][T23815] fuse: Bad value for 'fd' [ 1327.493560][T23825] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1327.753422][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 1328.084888][ T30] audit: type=1400 audit(1762790655.366:15895): avc: denied { prog_load } for pid=23822 comm="syz.5.3981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1328.133564][ T30] audit: type=1400 audit(1762790655.366:15896): avc: denied { bpf } for pid=23822 comm="syz.5.3981" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1328.471131][ T30] audit: type=1400 audit(1762790655.366:15897): avc: denied { perfmon } for pid=23822 comm="syz.5.3981" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1328.492386][ T30] audit: type=1400 audit(1762790655.366:15898): avc: denied { prog_run } for pid=23822 comm="syz.5.3981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1328.527701][ T30] audit: type=1400 audit(1762790655.646:15899): avc: denied { execmem } for pid=23822 comm="syz.5.3981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1328.617970][ T30] audit: type=1400 audit(1762790655.856:15900): avc: denied { read write } for pid=23822 comm="syz.5.3981" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1328.683587][ T30] audit: type=1400 audit(1762790655.866:15901): avc: denied { open } for pid=23822 comm="syz.5.3981" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1328.763035][ T30] audit: type=1400 audit(1762790655.876:15902): avc: denied { ioctl } for pid=23822 comm="syz.5.3981" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1328.833319][ T30] audit: type=1400 audit(1762790656.176:15903): avc: denied { read write } for pid=19431 comm="syz-executor" name="loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1328.903311][ T30] audit: type=1400 audit(1762790656.176:15904): avc: denied { open } for pid=19431 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1330.903347][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1331.075473][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1331.149067][ T9] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1331.160376][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1331.275596][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1331.285434][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1331.295778][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.563848][ T9] usb 4-1: config 0 descriptor?? [ 1331.591874][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1332.268599][T13371] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1332.427766][T13371] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1332.446932][T13371] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1332.456174][T13371] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1332.475844][T13371] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1332.494856][T13371] usb 3-1: Product: syz [ 1332.508112][T13371] usb 3-1: Manufacturer: syz [ 1332.512942][T13371] usb 3-1: SerialNumber: syz [ 1332.527866][T13371] usb 3-1: config 0 descriptor?? [ 1332.571505][T13371] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1332.632624][T23857] udevd[23857]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.778748][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 1332.778764][ T30] audit: type=1400 audit(1762790660.426:16089): avc: denied { search } for pid=23887 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.810899][ T30] audit: type=1400 audit(1762790660.426:16090): avc: denied { search } for pid=23887 comm="rm" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.853593][ T30] audit: type=1400 audit(1762790660.426:16091): avc: denied { search } for pid=23887 comm="rm" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.900327][ T30] audit: type=1400 audit(1762790660.546:16092): avc: denied { search } for pid=23890 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.945565][ T30] audit: type=1400 audit(1762790660.576:16093): avc: denied { search } for pid=23891 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.992124][ T30] audit: type=1400 audit(1762790660.576:16094): avc: denied { search } for pid=23891 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.030659][ T30] audit: type=1400 audit(1762790660.576:16095): avc: denied { search } for pid=23891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.059040][ T30] audit: type=1400 audit(1762790660.576:16096): avc: denied { search } for pid=23891 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.112308][ T30] audit: type=1400 audit(1762790660.586:16097): avc: denied { read open } for pid=23892 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.141712][ T30] audit: type=1400 audit(1762790660.586:16098): avc: denied { getattr } for pid=23892 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.343358][T22408] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1333.379405][T13371] usb 4-1: USB disconnect, device number 104 [ 1334.878242][T23907] ceph: No mds server is up or the cluster is laggy [ 1335.133656][T20410] usb 3-1: USB disconnect, device number 113 [ 1335.435113][T23941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1337.821053][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 1337.831226][ T30] audit: type=1400 audit(1762790665.416:16325): avc: denied { bind } for pid=23961 comm="syz.0.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1338.023485][ T30] audit: type=1400 audit(1762790665.426:16326): avc: denied { accept } for pid=23961 comm="syz.0.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1338.085767][ T30] audit: type=1400 audit(1762790665.426:16327): avc: denied { write } for pid=23961 comm="syz.0.4005" path="socket:[83802]" dev="sockfs" ino=83802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1338.212562][T23969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1338.283522][ T5884] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1338.422316][ T30] audit: type=1400 audit(1762790665.516:16328): avc: denied { write } for pid=23961 comm="syz.0.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1338.451552][ T30] audit: type=1400 audit(1762790665.686:16329): avc: denied { create } for pid=23954 comm="syz.2.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1338.522640][ T30] audit: type=1400 audit(1762790665.686:16330): avc: denied { write } for pid=23954 comm="syz.2.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1338.543204][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.644539][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 1338.654935][ T30] audit: type=1400 audit(1762790665.686:16331): avc: denied { read write } for pid=23954 comm="syz.2.4004" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1338.678616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.699968][ T5884] usb 3-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1338.710817][ T5884] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1338.790066][ T30] audit: type=1400 audit(1762790665.686:16332): avc: denied { open } for pid=23954 comm="syz.2.4004" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1338.813775][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.863346][ T10] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1338.901574][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1338.909839][ T5884] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1338.919341][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.932266][ T30] audit: type=1400 audit(1762790665.686:16333): avc: denied { ioctl } for pid=23954 comm="syz.2.4004" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1338.961980][ T5884] usb 3-1: config 0 descriptor?? [ 1339.049594][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1339.059672][ T10] usb 4-1: config 0 has an invalid interface number: 91 but max is 2 [ 1339.070712][ T10] usb 4-1: config 0 has an invalid interface number: 210 but max is 2 [ 1339.078993][ T10] usb 4-1: config 0 has an invalid interface number: 179 but max is 2 [ 1339.104346][T23980] FAULT_INJECTION: forcing a failure. [ 1339.104346][T23980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.453700][T23978] SELinux: failed to load policy [ 1339.608936][ T10] usb 4-1: config 0 has an invalid interface number: 226 but max is 2 [ 1339.703306][ T10] usb 4-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 1339.710129][T23980] CPU: 1 UID: 0 PID: 23980 Comm: syz.5.4010 Not tainted syzkaller #0 PREEMPT(full) [ 1339.710156][T23980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1339.710165][T23980] Call Trace: [ 1339.710171][T23980] [ 1339.710177][T23980] dump_stack_lvl+0x16c/0x1f0 [ 1339.710207][T23980] should_fail_ex+0x512/0x640 [ 1339.710228][T23980] _copy_from_iter+0x29f/0x1720 [ 1339.710249][T23980] ? __alloc_skb+0x200/0x380 [ 1339.710268][T23980] ? __pfx__copy_from_iter+0x10/0x10 [ 1339.710285][T23980] ? netlink_autobind.isra.0+0x158/0x370 [ 1339.710314][T23980] netlink_sendmsg+0x820/0xdd0 [ 1339.710338][T23980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1339.710367][T23980] ____sys_sendmsg+0xa98/0xc70 [ 1339.710382][T23980] ? copy_msghdr_from_user+0x10a/0x160 [ 1339.710400][T23980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1339.710424][T23980] ___sys_sendmsg+0x134/0x1d0 [ 1339.710444][T23980] ? __pfx____sys_sendmsg+0x10/0x10 [ 1339.710461][T23980] ? __lock_acquire+0x622/0x1c90 [ 1339.710510][T23980] __sys_sendmsg+0x16d/0x220 [ 1339.710529][T23980] ? __pfx___sys_sendmsg+0x10/0x10 [ 1339.710547][T23980] ? rcu_is_watching+0x12/0xc0 [ 1339.710575][T23980] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1339.710599][T23980] do_syscall_64+0xcd/0xfa0 [ 1339.710614][T23980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.710629][T23980] RIP: 0033:0x7f4a1638f6c9 [ 1339.710642][T23980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.710655][T23980] RSP: 002b:00007f4a1718f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1339.710670][T23980] RAX: ffffffffffffffda RBX: 00007f4a165e6090 RCX: 00007f4a1638f6c9 [ 1339.710680][T23980] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 1339.710689][T23980] RBP: 00007f4a1718f090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.710698][T23980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.710707][T23980] R13: 00007f4a165e6128 R14: 00007f4a165e6090 R15: 00007ffe76bd7cb8 [ 1339.710728][T23980] [ 1339.917083][ T30] audit: type=1400 audit(1762790665.736:16334): avc: denied { prog_load } for pid=23965 comm="syz.3.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1339.991010][ T5884] usb 3-1: can't set config #0, error -71 [ 1340.057000][ T5884] usb 3-1: USB disconnect, device number 114 [ 1340.257381][ T10] usb 4-1: config 0 has 4 interfaces, different from the descriptor's value: 3 [ 1340.318538][ T10] usb 4-1: config 0 has no interface number 0 [ 1340.335121][ T10] usb 4-1: config 0 has no interface number 1 [ 1340.350924][ T10] usb 4-1: config 0 has no interface number 2 [ 1340.383460][ T10] usb 4-1: config 0 has no interface number 3 [ 1340.389769][ T10] usb 4-1: config 0 interface 91 altsetting 9 endpoint 0x1 has invalid maxpacket 1144, setting to 64 [ 1340.405482][ T10] usb 4-1: config 0 interface 91 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 1340.417752][ T10] usb 4-1: config 0 interface 91 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1340.440906][ T10] usb 4-1: config 0 interface 210 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1340.451432][ T10] usb 4-1: config 0 interface 210 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1340.465097][ T10] usb 4-1: too many endpoints for config 0 interface 179 altsetting 111: 146, using maximum allowed: 30 [ 1340.480987][ T10] usb 4-1: config 0 interface 179 altsetting 111 has an invalid descriptor for endpoint zero, skipping [ 1340.492892][ T10] usb 4-1: config 0 interface 179 altsetting 111 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1340.505773][ T10] usb 4-1: config 0 interface 179 altsetting 111 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1340.517202][ T10] usb 4-1: config 0 interface 179 altsetting 111 has a duplicate endpoint with address 0xF, skipping [ 1340.528744][ T10] usb 4-1: config 0 interface 179 altsetting 111 has a duplicate endpoint with address 0x4, skipping [ 1340.540129][ T10] usb 4-1: config 0 interface 179 altsetting 111 has a duplicate endpoint with address 0x5, skipping [ 1340.551690][ T10] usb 4-1: config 0 interface 179 altsetting 111 has 7 endpoint descriptors, different from the interface descriptor's value: 146 [ 1340.565505][ T10] usb 4-1: config 0 interface 226 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1340.578857][ T10] usb 4-1: config 0 interface 91 has no altsetting 0 [ 1340.588354][ T10] usb 4-1: config 0 interface 210 has no altsetting 0 [ 1340.597803][ T10] usb 4-1: config 0 interface 179 has no altsetting 0 [ 1340.614144][ T10] usb 4-1: config 0 interface 226 has no altsetting 0 [ 1340.629786][ T10] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=74.2e [ 1340.639862][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.649932][ T10] usb 4-1: Product: syz [ 1340.658454][ T10] usb 4-1: Manufacturer: syz [ 1340.688410][ T10] usb 4-1: SerialNumber: syz [ 1340.727908][ T10] usb 4-1: config 0 descriptor?? [ 1341.217393][T23973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.265583][T23973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.293731][T23973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.333682][T23973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.408045][T23973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.456209][T23973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.567074][T24010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4018'. [ 1341.783484][ T10] as10x_usb: device has been detected [ 1341.789243][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1341.866491][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1342.161121][ T5884] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1342.199959][ T10] as10x_usb: error during firmware upload part1 [ 1342.208716][ T10] Registered device Sky IT Digital Key (green led) [ 1342.231950][ T10] as10x_usb: device has been detected [ 1342.267181][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1342.297559][ T10] usb 4-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1342.330922][ T10] as10x_usb: error during firmware upload part1 [ 1342.338471][ T10] Registered device Sky IT Digital Key (green led) [ 1342.345736][ T5884] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1342.364339][ T10] as10x_usb: device has been detected [ 1342.378345][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1342.380192][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.421646][ T5884] usb 1-1: config 0 descriptor?? [ 1342.437656][ T5884] cp210x 1-1:0.0: cp210x converter detected [ 1342.444416][ T10] usb 4-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 1342.469313][ T10] as10x_usb: error during firmware upload part1 [ 1342.542064][ T10] Registered device Sky IT Digital Key (green led) [ 1342.573939][ T10] as10x_usb: device has been detected [ 1342.659965][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1342.694396][ T10] usb 4-1: DVB: registering adapter 4 frontend 0 (Sky IT Digital Key (green led))... [ 1343.065448][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 1343.065479][ T30] audit: type=1400 audit(1762790670.486:16527): avc: denied { create } for pid=24016 comm="syz.0.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.092313][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.659713][T24037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.669394][T24037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.895776][ T30] audit: type=1400 audit(1762790670.486:16528): avc: denied { write } for pid=24016 comm="syz.0.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.917442][ T5884] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1343.927487][ T30] audit: type=1400 audit(1762790670.486:16529): avc: denied { read } for pid=24016 comm="syz.0.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.979409][ T10] as10x_usb: error during firmware upload part1 [ 1343.996140][ T30] audit: type=1400 audit(1762790670.496:16530): avc: denied { execmem } for pid=24016 comm="syz.0.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1344.017352][ T30] audit: type=1400 audit(1762790670.626:16531): avc: denied { map_create } for pid=24029 comm="syz.3.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1344.046214][ T30] audit: type=1400 audit(1762790670.626:16532): avc: denied { map_read map_write } for pid=24029 comm="syz.3.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1344.066864][ T10] Registered device Sky IT Digital Key (green led) [ 1344.069619][ T10] usb 4-1: USB disconnect, device number 105 [ 1344.087941][ T30] audit: type=1400 audit(1762790670.626:16533): avc: denied { mount } for pid=24029 comm="syz.3.4024" name="/" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1344.123358][ T30] audit: type=1400 audit(1762790670.626:16534): avc: denied { search } for pid=24029 comm="syz.3.4024" name="/" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1344.171774][ T10] Unregistered device Sky IT Digital Key (green led) [ 1344.209900][ T10] as10x_usb: device has been disconnected [ 1344.252808][T24042] usb 1-1: USB disconnect, device number 102 [ 1344.259657][ T30] audit: type=1400 audit(1762790670.626:16535): avc: denied { search } for pid=24029 comm="syz.3.4024" name="/" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1344.575884][ T30] audit: type=1400 audit(1762790670.626:16536): avc: denied { read open } for pid=24029 comm="syz.3.4024" path="/" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1344.607126][ T10] Unregistered device Sky IT Digital Key (green led) [ 1344.607983][ T10] as10x_usb: device has been disconnected [ 1344.628204][T24042] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1344.655828][ T10] Unregistered device Sky IT Digital Key (green led) [ 1344.659365][ T10] as10x_usb: device has been disconnected [ 1344.738773][ T10] Unregistered device Sky IT Digital Key (green led) [ 1344.742662][ T10] as10x_usb: device has been disconnected [ 1344.885830][T24042] cp210x 1-1:0.0: device disconnected [ 1344.930537][T24051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'. [ 1345.043532][T24052] hub 1-0:1.0: USB hub found [ 1345.070229][T24052] hub 1-0:1.0: 1 port detected [ 1346.121628][T24075] wireguard0: entered promiscuous mode [ 1346.127547][T24075] wireguard0: entered allmulticast mode [ 1348.250059][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 1348.250075][ T30] audit: type=1400 audit(1762790675.896:16665): avc: denied { read } for pid=24094 comm="syz.2.4037" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1348.468653][T24103] netlink: 'syz.3.4036': attribute type 33 has an invalid length. [ 1348.476522][T24103] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4036'. [ 1348.486674][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4036'. [ 1349.049277][ T30] audit: type=1400 audit(1762790675.896:16666): avc: denied { open } for pid=24094 comm="syz.2.4037" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1349.143348][ T30] audit: type=1400 audit(1762790675.896:16667): avc: denied { ioctl } for pid=24094 comm="syz.2.4037" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1349.377032][ T30] audit: type=1400 audit(1762790675.936:16668): avc: denied { prog_load } for pid=24091 comm="syz.3.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1349.398876][ T30] audit: type=1400 audit(1762790675.936:16669): avc: denied { bpf } for pid=24091 comm="syz.3.4036" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1349.421507][ T30] audit: type=1400 audit(1762790675.936:16670): avc: denied { perfmon } for pid=24091 comm="syz.3.4036" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1349.443014][T24111] ip6t_srh: unknown srh match flags 4000 [ 1349.467662][ T30] audit: type=1400 audit(1762790675.936:16671): avc: denied { prog_run } for pid=24091 comm="syz.3.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1349.489888][ T30] audit: type=1400 audit(1762790675.946:16672): avc: denied { execmem } for pid=24091 comm="syz.3.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1349.541448][ T30] audit: type=1400 audit(1762790676.006:16673): avc: denied { create } for pid=24098 comm="syz.0.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1349.586640][ T30] audit: type=1400 audit(1762790676.026:16674): avc: denied { module_request } for pid=24091 comm="syz.3.4036" kmod="net-pf-10-proto-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1350.000131][T24127] FAULT_INJECTION: forcing a failure. [ 1350.000131][T24127] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.058692][T24127] CPU: 1 UID: 0 PID: 24127 Comm: syz.2.4046 Not tainted syzkaller #0 PREEMPT(full) [ 1350.058718][T24127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1350.058727][T24127] Call Trace: [ 1350.058732][T24127] [ 1350.058738][T24127] dump_stack_lvl+0x16c/0x1f0 [ 1350.058762][T24127] should_fail_ex+0x512/0x640 [ 1350.058774][T24127] ? __kmalloc_noprof+0xca/0x880 [ 1350.058791][T24127] should_failslab+0xc2/0x120 [ 1350.058804][T24127] __kmalloc_noprof+0xdd/0x880 [ 1350.058817][T24127] ? copy_splice_read+0x1a8/0xc20 [ 1350.058836][T24127] ? copy_splice_read+0x1a8/0xc20 [ 1350.058850][T24127] copy_splice_read+0x1a8/0xc20 [ 1350.058865][T24127] ? __pfx___might_resched+0x10/0x10 [ 1350.058881][T24127] ? trace_contention_end+0xdd/0x130 [ 1350.058891][T24127] ? __pfx_copy_splice_read+0x10/0x10 [ 1350.058906][T24127] ? __mutex_lock+0x1c5/0x1060 [ 1350.058917][T24127] ? file_has_perm+0x27d/0x350 [ 1350.058939][T24127] sock_splice_read+0xe9/0x110 [ 1350.058956][T24127] ? __pfx_sock_splice_read+0x10/0x10 [ 1350.058970][T24127] do_splice_read+0x285/0x370 [ 1350.058981][T24127] splice_file_to_pipe+0x109/0x120 [ 1350.059003][T24127] do_splice+0x118c/0x1fc0 [ 1350.059021][T24127] ? __lock_acquire+0x622/0x1c90 [ 1350.059053][T24127] ? __pfx_do_splice+0x10/0x10 [ 1350.059063][T24127] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1350.059080][T24127] ? find_held_lock+0x2b/0x80 [ 1350.059094][T24127] __do_splice+0x15d/0x360 [ 1350.059105][T24127] ? __pfx___do_splice+0x10/0x10 [ 1350.059120][T24127] __x64_sys_splice+0x187/0x250 [ 1350.059132][T24127] do_syscall_64+0xcd/0xfa0 [ 1350.059143][T24127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.059154][T24127] RIP: 0033:0x7fd69e38f6c9 [ 1350.059163][T24127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.059173][T24127] RSP: 002b:00007fd69f149038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1350.059183][T24127] RAX: ffffffffffffffda RBX: 00007fd69e5e5fa0 RCX: 00007fd69e38f6c9 [ 1350.059190][T24127] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000005 [ 1350.059196][T24127] RBP: 00007fd69f149090 R08: 0000000000000006 R09: 0000000000000000 [ 1350.059202][T24127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.059208][T24127] R13: 00007fd69e5e6038 R14: 00007fd69e5e5fa0 R15: 00007ffcb2ef6b88 [ 1350.059222][T24127] [ 1350.317318][T24135] €Â: renamed from vlan1 (while UP) [ 1350.488336][T24145] FAULT_INJECTION: forcing a failure. [ 1350.488336][T24145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.537050][T24145] CPU: 1 UID: 0 PID: 24145 Comm: syz.0.4055 Not tainted syzkaller #0 PREEMPT(full) [ 1350.537075][T24145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1350.537085][T24145] Call Trace: [ 1350.537092][T24145] [ 1350.537100][T24145] dump_stack_lvl+0x16c/0x1f0 [ 1350.537133][T24145] should_fail_ex+0x512/0x640 [ 1350.537159][T24145] _copy_from_user+0x2e/0xd0 [ 1350.537182][T24145] move_addr_to_kernel+0x65/0x170 [ 1350.537204][T24145] __sys_sendto+0x1be/0x520 [ 1350.537225][T24145] ? __pfx___sys_sendto+0x10/0x10 [ 1350.537251][T24145] ? find_held_lock+0x2b/0x80 [ 1350.537290][T24145] __x64_sys_sendto+0xe0/0x1c0 [ 1350.537310][T24145] ? do_syscall_64+0x91/0xfa0 [ 1350.537325][T24145] ? lockdep_hardirqs_on+0x7c/0x110 [ 1350.537351][T24145] do_syscall_64+0xcd/0xfa0 [ 1350.537367][T24145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.537383][T24145] RIP: 0033:0x7f0d4099155c [ 1350.537397][T24145] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1350.537412][T24145] RSP: 002b:00007f0d418beec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1350.537427][T24145] RAX: ffffffffffffffda RBX: 00007f0d418befc0 RCX: 00007f0d4099155c [ 1350.537437][T24145] RDX: 0000000000000020 RSI: 00007f0d418bf010 RDI: 0000000000000007 [ 1350.537447][T24145] RBP: 0000000000000000 R08: 00007f0d418bef14 R09: 000000000000000c [ 1350.537458][T24145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 1350.537468][T24145] R13: 00007f0d418bef68 R14: 00007f0d418bf010 R15: 0000000000000000 [ 1350.537490][T24145] [ 1352.109560][T24177] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1352.116081][T24177] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1352.253808][T24177] vhci_hcd vhci_hcd.0: Device attached [ 1352.266740][T24181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.274073][T24181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.352868][T24179] vhci_hcd: connection closed [ 1352.364402][ T1052] vhci_hcd: stop threads [ 1352.385002][ T1052] vhci_hcd: release socket [ 1352.394031][ T1052] vhci_hcd: disconnect device [ 1352.433981][ T5884] vhci_hcd: vhci_device speed not set [ 1352.475623][T24181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.488611][T24181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.699619][T17369] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.699634][T13371] syq1: Port: 1 Link DOWN [ 1352.709262][T17369] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.740673][T17369] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.756135][T17369] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.274489][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 1353.274505][ T30] audit: type=1400 audit(1762790680.926:16847): avc: denied { execmem } for pid=24197 comm="syz.5.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1353.330966][ T30] audit: type=1400 audit(1762790680.976:16848): avc: denied { write } for pid=24197 comm="syz.5.4070" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 1353.366129][ T30] audit: type=1400 audit(1762790681.016:16849): avc: denied { prog_load } for pid=24201 comm="syz.2.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1353.430129][ T30] audit: type=1400 audit(1762790681.036:16850): avc: denied { create } for pid=24201 comm="syz.2.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1353.452965][ T30] audit: type=1400 audit(1762790681.036:16851): avc: denied { create } for pid=24201 comm="syz.2.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1353.495892][ T30] audit: type=1400 audit(1762790681.036:16852): avc: denied { execmem } for pid=24201 comm="syz.2.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1353.734703][ T30] audit: type=1400 audit(1762790681.076:16853): avc: denied { read } for pid=24201 comm="syz.2.4071" dev="nsfs" ino=4026533955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1353.809472][ T30] audit: type=1400 audit(1762790681.096:16854): avc: denied { prog_load } for pid=24201 comm="syz.2.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1353.890497][ T30] audit: type=1400 audit(1762790681.096:16855): avc: denied { create } for pid=24201 comm="syz.2.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1354.019143][ T30] audit: type=1400 audit(1762790681.166:16856): avc: denied { map_create } for pid=24193 comm="syz.3.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1354.989284][T24237] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1358.293919][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 1358.293936][ T30] audit: type=1400 audit(1762790685.946:17020): avc: denied { read } for pid=24303 comm="syz.0.4104" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1358.404553][ T30] audit: type=1400 audit(1762790686.026:17021): avc: denied { create } for pid=24303 comm="syz.0.4104" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 1358.842477][ T30] audit: type=1400 audit(1762790686.136:17022): avc: denied { prog_load } for pid=24301 comm="syz.5.4105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1358.884299][ T30] audit: type=1400 audit(1762790686.136:17023): avc: denied { prog_load } for pid=24301 comm="syz.5.4105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1359.010281][ T30] audit: type=1400 audit(1762790686.136:17024): avc: denied { watch } for pid=24301 comm="syz.5.4105" path="/222/file0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 1359.037750][ T30] audit: type=1400 audit(1762790686.456:17025): avc: denied { mac_admin } for pid=24303 comm="syz.0.4104" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 1359.190051][ T30] audit: type=1401 audit(1762790686.456:17026): op=fscreate invalid_context=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1359.190365][ T30] audit: type=1400 audit(1762790686.546:17027): avc: denied { prog_load } for pid=24310 comm="syz.3.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1359.310646][ T30] audit: type=1400 audit(1762790686.546:17028): avc: denied { create } for pid=24293 comm="syz.4.4101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1359.344107][ T30] audit: type=1400 audit(1762790686.546:17029): avc: denied { create } for pid=24293 comm="syz.4.4101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1359.382766][T24314] wg1: entered promiscuous mode [ 1359.391689][T24314] wg1: entered allmulticast mode [ 1361.176667][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.183025][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1466.193162][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1466.200140][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19431/1:b..l P20180/1:b..l P24316/1:b..l P24349/1:b..l [ 1466.212463][ C0] rcu: (detected by 0, t=10502 jiffies, g=116137, q=293 ncpus=2) [ 1466.220316][ C0] task:syz.4.4114 state:R running task stack:28248 pid:24349 tgid:24336 ppid:20475 task_flags:0x400140 flags:0x00080000 [ 1466.234722][ C0] Call Trace: [ 1466.238004][ C0] [ 1466.240927][ C0] __schedule+0x1190/0x5de0 [ 1466.245431][ C0] ? arch_stack_walk+0xa6/0x100 [ 1466.250285][ C0] ? __pfx___schedule+0x10/0x10 [ 1466.255136][ C0] ? mark_held_locks+0x49/0x80 [ 1466.259899][ C0] preempt_schedule_irq+0x51/0x90 [ 1466.264921][ C0] irqentry_exit+0x36/0x90 [ 1466.269328][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1466.274774][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1466.279958][ C0] Code: a6 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 33 e9 0e 0f 82 74 02 00 00 8b 35 9a 63 e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 a6 08 12 0f 85 c7 02 00 00 48 83 c4 [ 1466.299552][ C0] RSP: 0018:ffffc90003cef628 EFLAGS: 00000206 [ 1466.305604][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4720 RCX: 00000000dd23809f [ 1466.313563][ C0] RDX: 0000000000000000 RSI: ffffffff8da05cdf RDI: ffffffff8bf070c0 [ 1466.321522][ C0] RBP: 0000000000000002 R08: 2f7121b6a06eccce R09: 0000000000000000 [ 1466.329481][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1466.337439][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1466.345413][ C0] ? is_module_text_address+0x148/0x220 [ 1466.350950][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1466.357097][ C0] is_bpf_text_address+0x36/0x1a0 [ 1466.362115][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 1466.367304][ C0] kernel_text_address+0x8d/0x100 [ 1466.372316][ C0] __kernel_text_address+0xd/0x40 [ 1466.377329][ C0] unwind_get_return_address+0x59/0xa0 [ 1466.382778][ C0] arch_stack_walk+0xa6/0x100 [ 1466.387454][ C0] stack_trace_save+0x8e/0xc0 [ 1466.392124][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1466.397494][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1466.402429][ C0] kasan_save_stack+0x33/0x60 [ 1466.407094][ C0] ? kasan_save_stack+0x33/0x60 [ 1466.411933][ C0] ? kasan_save_track+0x14/0x30 [ 1466.416767][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1466.421515][ C0] ? __kmalloc_noprof+0x32f/0x880 [ 1466.426529][ C0] ? __netlink_kernel_create+0x17f/0x750 [ 1466.432156][ C0] ? audit_net_init+0x1ae/0x440 [ 1466.436999][ C0] ? ops_init+0x1e2/0x5f0 [ 1466.441318][ C0] ? setup_net+0x100/0x390 [ 1466.445724][ C0] ? copy_net_ns+0x2f8/0x690 [ 1466.450304][ C0] ? create_new_namespaces+0x3ea/0xa90 [ 1466.455760][ C0] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1466.461558][ C0] ? ksys_unshare+0x45b/0xa40 [ 1466.466225][ C0] ? __x64_sys_unshare+0x31/0x40 [ 1466.471152][ C0] ? do_syscall_64+0xcd/0xfa0 [ 1466.475812][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.481895][ C0] kasan_save_track+0x14/0x30 [ 1466.486558][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1466.491139][ C0] __kmalloc_noprof+0x32f/0x880 [ 1466.495989][ C0] ? __init_waitqueue_head+0xca/0x150 [ 1466.501348][ C0] ? __netlink_kernel_create+0x17f/0x750 [ 1466.507409][ C0] ? __netlink_kernel_create+0x17f/0x750 [ 1466.513031][ C0] __netlink_kernel_create+0x17f/0x750 [ 1466.518484][ C0] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1466.524456][ C0] ? find_held_lock+0x2b/0x80 [ 1466.529128][ C0] ? audit_net_init+0x190/0x440 [ 1466.533970][ C0] audit_net_init+0x1ae/0x440 [ 1466.538633][ C0] ? __pfx_audit_net_init+0x10/0x10 [ 1466.543816][ C0] ? rcu_is_watching+0x12/0xc0 [ 1466.548569][ C0] ? __pfx_audit_receive+0x10/0x10 [ 1466.553666][ C0] ? __pfx_audit_multicast_bind+0x10/0x10 [ 1466.559372][ C0] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 1466.565253][ C0] ? __pfx_genl_unbind+0x10/0x10 [ 1466.570184][ C0] ? ops_init+0x77/0x5f0 [ 1466.574421][ C0] ? __pfx_audit_net_init+0x10/0x10 [ 1466.579605][ C0] ops_init+0x1e2/0x5f0 [ 1466.583758][ C0] setup_net+0x100/0x390 [ 1466.587993][ C0] ? __pfx_setup_net+0x10/0x10 [ 1466.592750][ C0] ? debug_mutex_init+0x37/0x70 [ 1466.597594][ C0] copy_net_ns+0x2f8/0x690 [ 1466.602006][ C0] create_new_namespaces+0x3ea/0xa90 [ 1466.607289][ C0] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1466.612918][ C0] ksys_unshare+0x45b/0xa40 [ 1466.617419][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 1466.622436][ C0] ? xfd_validate_state+0x61/0x180 [ 1466.627546][ C0] __x64_sys_unshare+0x31/0x40 [ 1466.632303][ C0] do_syscall_64+0xcd/0xfa0 [ 1466.636796][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.642683][ C0] RIP: 0033:0x7ff728b8f6c9 [ 1466.647085][ C0] RSP: 002b:00007ff72996b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1466.655483][ C0] RAX: ffffffffffffffda RBX: 00007ff728de6090 RCX: 00007ff728b8f6c9 [ 1466.663452][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000 [ 1466.671412][ C0] RBP: 00007ff728c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1466.679366][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1466.687322][ C0] R13: 00007ff728de6128 R14: 00007ff728de6090 R15: 00007ffdae13f8a8 [ 1466.695291][ C0] [ 1466.698297][ C0] task:syz.0.4107 state:R running task stack:23496 pid:24316 tgid:24316 ppid:20180 task_flags:0x400640 flags:0x00080001 [ 1466.711767][ C0] Call Trace: [ 1466.715030][ C0] [ 1466.717950][ C0] __schedule+0x1190/0x5de0 [ 1466.722460][ C0] ? vfs_coredump+0x2b9f/0x5670 [ 1466.727305][ C0] ? __pfx___schedule+0x10/0x10 [ 1466.732158][ C0] ? mark_held_locks+0x49/0x80 [ 1466.736918][ C0] preempt_schedule_irq+0x51/0x90 [ 1466.741943][ C0] irqentry_exit+0x36/0x90 [ 1466.746344][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1466.751790][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1466.757847][ C0] Code: e9 5d 1c 5d 00 be 03 00 00 00 5b e9 02 ab e7 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 38 87 e4 11 65 8b 05 49 87 e4 11 a9 00 01 ff 00 74 1d [ 1466.777448][ C0] RSP: 0018:ffffc90003efe620 EFLAGS: 00000246 [ 1466.783500][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff822fa13f [ 1466.791456][ C0] RDX: ffff888053f9a480 RSI: ffffffff822fa36a RDI: 0000000000000006 [ 1466.799414][ C0] RBP: 0000000000006bbf R08: 0000000000000006 R09: 0000000000000001 [ 1466.807368][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801ce1abb0 [ 1466.815322][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1466.823292][ C0] ? __update_page_owner_handle+0x13f/0x550 [ 1466.829201][ C0] ? __update_page_owner_handle+0x36a/0x550 [ 1466.835082][ C0] __update_page_owner_handle+0x36a/0x550 [ 1466.840796][ C0] __set_page_owner+0x126/0x560 [ 1466.845639][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1466.850998][ C0] ? bad_range+0x261/0x4c0 [ 1466.855401][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1466.860600][ C0] post_alloc_hook+0x1c0/0x230 [ 1466.865359][ C0] get_page_from_freelist+0x10a3/0x3a30 [ 1466.870911][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 1466.876186][ C0] ? rcu_is_watching+0x12/0xc0 [ 1466.880944][ C0] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1466.886831][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1466.891777][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1466.898100][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1466.903117][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1466.908477][ C0] ? find_held_lock+0x2b/0x80 [ 1466.913151][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1466.918081][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1466.923975][ C0] ? policy_nodemask+0xea/0x4e0 [ 1466.928820][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1466.934096][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1466.939467][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1466.944831][ C0] shmem_alloc_folio+0x135/0x160 [ 1466.949761][ C0] shmem_alloc_and_add_folio+0x499/0xc20 [ 1466.955394][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1466.962241][ C0] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1466.968132][ C0] shmem_get_folio_gfp+0x67f/0x1610 [ 1466.973327][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1466.978261][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1466.983896][ C0] shmem_write_begin+0x160/0x300 [ 1466.988835][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 1466.994287][ C0] ? timestamp_truncate+0x21e/0x2d0 [ 1466.999473][ C0] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1467.006315][ C0] generic_perform_write+0x3c4/0x900 [ 1467.011602][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 1467.017408][ C0] ? inode_needs_update_time.part.0+0x191/0x270 [ 1467.023646][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1467.029437][ C0] shmem_file_write_iter+0x10e/0x140 [ 1467.034711][ C0] __kernel_write_iter+0x31a/0xb10 [ 1467.039811][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 1467.045427][ C0] ? cgroup_freezing+0x12c/0x3b0 [ 1467.050357][ C0] ? cgroup_freezing+0x136/0x3b0 [ 1467.055286][ C0] dump_user_range+0x413/0xb70 [ 1467.060042][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 1467.065315][ C0] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 1467.071469][ C0] ? __pfx_writenote+0x10/0x10 [ 1467.076225][ C0] elf_core_dump+0x29c3/0x3c00 [ 1467.081001][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 1467.086101][ C0] ? kasan_save_stack+0x33/0x60 [ 1467.090939][ C0] ? kasan_save_track+0x14/0x30 [ 1467.095771][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1467.100520][ C0] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1467.106050][ C0] ? vfs_coredump+0x1ddc/0x5670 [ 1467.110886][ C0] ? arch_do_signal_or_restart+0x8f/0x7c0 [ 1467.116601][ C0] ? irqentry_exit_to_user_mode+0x176/0x310 [ 1467.122479][ C0] ? asm_exc_page_fault+0x26/0x30 [ 1467.127496][ C0] ? 0xffffffffff600000 [ 1467.131675][ C0] ? vfs_coredump+0x2b9f/0x5670 [ 1467.136511][ C0] vfs_coredump+0x2b9f/0x5670 [ 1467.141182][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 1467.146193][ C0] ? __lock_acquire+0x622/0x1c90 [ 1467.151134][ C0] ? lock_acquire+0x179/0x350 [ 1467.155810][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1467.160999][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 1467.165765][ C0] ? unwind_get_return_address+0x59/0xa0 [ 1467.171384][ C0] ? arch_stack_walk+0xa6/0x100 [ 1467.176230][ C0] ? stack_trace_save+0x8e/0xc0 [ 1467.181073][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1467.186437][ C0] ? stack_depot_save_flags+0x29/0x9c0 [ 1467.191887][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1467.196866][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 1467.202493][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1467.208471][ C0] ? rcu_is_watching+0x12/0xc0 [ 1467.213233][ C0] get_signal+0x22e1/0x26d0 [ 1467.217738][ C0] ? force_sig_fault+0xc4/0x100 [ 1467.222580][ C0] ? __pfx_get_signal+0x10/0x10 [ 1467.227427][ C0] arch_do_signal_or_restart+0x8f/0x7c0 [ 1467.232961][ C0] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1467.239020][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1467.245179][ C0] irqentry_exit_to_user_mode+0x176/0x310 [ 1467.250887][ C0] asm_exc_page_fault+0x26/0x30 [ 1467.255728][ C0] RIP: 0033:0xc6d69271a9 [ 1467.259953][ C0] RSP: 002b:0000200000000528 EFLAGS: 00010217 [ 1467.266004][ C0] RAX: 0000000000000000 RBX: 00007f0d40be6090 RCX: 00007f0d4098f6c9 [ 1467.273959][ C0] RDX: 0000200000000180 RSI: 0000200000000520 RDI: 0000000001000000 [ 1467.281920][ C0] RBP: 00007f0d40a11f91 R08: 0000200000000580 R09: 0000200000000580 [ 1467.289892][ C0] R10: 00002000000003c0 R11: 0000000000000206 R12: 0000000000000000 [ 1467.297853][ C0] R13: 00007f0d40be6128 R14: 00007f0d40be6090 R15: 00007fff081230e8 [ 1467.305824][ C0] [ 1467.308832][ C0] task:syz-executor state:R running task stack:23160 pid:20180 tgid:20180 ppid:20168 task_flags:0x400140 flags:0x00080000 [ 1467.322399][ C0] Call Trace: [ 1467.325680][ C0] [ 1467.328613][ C0] __schedule+0x1190/0x5de0 [ 1467.333129][ C0] ? arch_stack_walk+0xa6/0x100 [ 1467.337992][ C0] ? __pfx___schedule+0x10/0x10 [ 1467.342843][ C0] ? __lock_acquire+0x622/0x1c90 [ 1467.347782][ C0] preempt_schedule_irq+0x51/0x90 [ 1467.352801][ C0] irqentry_exit+0x36/0x90 [ 1467.357203][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1467.363171][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1467.368356][ C0] Code: a6 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 33 e9 0e 0f 82 74 02 00 00 8b 35 9a 63 e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 a6 08 12 0f 85 c7 02 00 00 48 83 c4 [ 1467.387948][ C0] RSP: 0018:ffffc900047b7be0 EFLAGS: 00000206 [ 1467.394000][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4720 RCX: 00000000ef9d33e4 [ 1467.401957][ C0] RDX: 0000000000000000 RSI: ffffffff8da05cdf RDI: ffffffff8bf070c0 [ 1467.409914][ C0] RBP: 0000000000000002 R08: 0ac0d5affe09d4ff R09: 0000000000000000 [ 1467.417869][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1467.425822][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1467.433797][ C0] ? obj_cgroup_charge_account+0x21b/0x500 [ 1467.439598][ C0] __memcg_slab_post_alloc_hook+0x449/0x940 [ 1467.445478][ C0] ? __memcg_slab_post_alloc_hook+0x435/0x940 [ 1467.451538][ C0] ? kasan_save_track+0x14/0x30 [ 1467.456377][ C0] kmem_cache_alloc_noprof+0x550/0x6e0 [ 1467.461829][ C0] ? alloc_empty_file+0x55/0x1e0 [ 1467.466763][ C0] ? alloc_empty_file+0x55/0x1e0 [ 1467.471688][ C0] alloc_empty_file+0x55/0x1e0 [ 1467.476450][ C0] alloc_file_pseudo+0x13a/0x230 [ 1467.481379][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1467.486826][ C0] ? alloc_fd+0x471/0x7d0 [ 1467.491146][ C0] sock_alloc_file+0x50/0x210 [ 1467.495817][ C0] __sys_socket+0x1c0/0x260 [ 1467.500308][ C0] ? __pfx___sys_socket+0x10/0x10 [ 1467.505318][ C0] ? dnotify_flush+0x79/0x4c0 [ 1467.509993][ C0] __x64_sys_socket+0x72/0xb0 [ 1467.514654][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1467.519849][ C0] do_syscall_64+0xcd/0xfa0 [ 1467.524341][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.530218][ C0] RIP: 0033:0x7f0d409915e7 [ 1467.534619][ C0] RSP: 002b:00007fff08122db8 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 1467.543020][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f0d409915e7 [ 1467.550975][ C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1467.558932][ C0] RBP: 00007fff081234ac R08: 00007fff08122dac R09: 00007fff081231b7 [ 1467.566889][ C0] R10: 00007fff08122e30 R11: 0000000000000206 R12: 00000000000000bb [ 1467.574847][ C0] R13: 00000000000927c0 R14: 000000000014bfda R15: 00007fff08123500 [ 1467.582818][ C0] [ 1467.585822][ C0] task:syz-executor state:R running task stack:23976 pid:19431 tgid:19431 ppid:19417 task_flags:0x400140 flags:0x00080000 [ 1467.599294][ C0] Call Trace: [ 1467.602557][ C0] [ 1467.605479][ C0] __schedule+0x1190/0x5de0 [ 1467.609991][ C0] ? __pfx___schedule+0x10/0x10 [ 1467.614846][ C0] ? mark_held_locks+0x49/0x80 [ 1467.619607][ C0] preempt_schedule_irq+0x51/0x90 [ 1467.624644][ C0] irqentry_exit+0x36/0x90 [ 1467.629046][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1467.635012][ C0] RIP: 0010:write_comp_data+0x3c/0x90 [ 1467.640377][ C0] Code: 8b 05 c8 8d e4 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 7c 16 00 00 85 c0 74 4f <8b> 82 58 16 00 00 83 f8 03 75 44 48 8b 82 60 16 00 00 8b 92 5c 16 [ 1467.659970][ C0] RSP: 0018:ffffc9001bb17530 EFLAGS: 00000246 [ 1467.666023][ C0] RAX: 0000000080000000 RBX: 000000000000002e RCX: ffffffff845dcd4f [ 1467.673982][ C0] RDX: ffff888052ce0000 RSI: 000000000000017f RDI: 0000000000000005 [ 1467.681939][ C0] RBP: ffff8880320f01e0 R08: 0000000000000005 R09: 000000000000017f [ 1467.689895][ C0] R10: 000000000000002e R11: 0000000000000001 R12: ffff8880320f01e8 [ 1467.697858][ C0] R13: 0000000000000600 R14: ffffc9001bb178e8 R15: dffffc0000000000 [ 1467.705822][ C0] ? context_struct_compute_av+0x85f/0x1270 [ 1467.711715][ C0] context_struct_compute_av+0x85f/0x1270 [ 1467.717441][ C0] ? __pfx_context_struct_compute_av+0x10/0x10 [ 1467.723590][ C0] security_compute_av+0x5ec/0x11d0 [ 1467.728784][ C0] avc_compute_av+0x83/0x7f0 [ 1467.733366][ C0] ? __lock_acquire+0x622/0x1c90 [ 1467.738302][ C0] avc_perm_nonode+0xab/0x180 [ 1467.742972][ C0] ? __pfx_avc_perm_nonode+0x10/0x10 [ 1467.748252][ C0] ? find_held_lock+0x2b/0x80 [ 1467.752919][ C0] ? avc_has_perm_noaudit+0x2bd/0x3b0 [ 1467.758299][ C0] avc_has_perm_noaudit+0x2de/0x3b0 [ 1467.763494][ C0] selinux_vm_enough_memory+0x12a/0x190 [ 1467.769035][ C0] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 1467.775110][ C0] ? cap_vm_enough_memory+0xcd/0x270 [ 1467.780397][ C0] security_vm_enough_memory_mm+0x96/0x110 [ 1467.786200][ C0] dup_mmap+0x1329/0x2280 [ 1467.790530][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1467.795213][ C0] copy_process+0x3f0c/0x76a0 [ 1467.799886][ C0] ? do_wp_page+0x1c59/0x52b0 [ 1467.804564][ C0] ? __pfx_copy_process+0x10/0x10 [ 1467.809578][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1467.814622][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1467.820006][ C0] kernel_clone+0xfc/0x930 [ 1467.824417][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1467.829441][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 1467.834900][ C0] __do_sys_clone+0xce/0x120 [ 1467.839484][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1467.844676][ C0] ? handle_mm_fault+0x2ab/0xd10 [ 1467.849623][ C0] ? do_user_addr_fault+0x843/0x1370 [ 1467.854907][ C0] do_syscall_64+0xcd/0xfa0 [ 1467.859398][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.865283][ C0] RIP: 0033:0x7f4a16385e13 [ 1467.869687][ C0] RSP: 002b:00007ffe76bd7f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1467.878142][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a16385e13 [ 1467.886118][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1467.894077][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1467.902055][ C0] R10: 000055558c7e17d0 R11: 0000000000000246 R12: 0000000000000000 [ 1467.910015][ C0] R13: 00000000000927c0 R14: 000000000014c476 R15: 00007ffe76bd80d0 [ 1467.917988][ C0] [ 1467.920998][ C0] rcu: rcu_preempt kthread starved for 10339 jiffies! g116137 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1467.932263][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1467.942217][ C0] rcu: RCU grace-period kthread stack dump: [ 1467.948089][ C0] task:rcu_preempt state:R running task stack:27976 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1467.961569][ C0] Call Trace: [ 1467.964840][ C0] [ 1467.967769][ C0] __schedule+0x1190/0x5de0 [ 1467.972284][ C0] ? __pfx___schedule+0x10/0x10 [ 1467.977170][ C0] ? find_held_lock+0x2b/0x80 [ 1467.981873][ C0] ? schedule+0x2d7/0x3a0 [ 1467.986206][ C0] schedule+0xe7/0x3a0 [ 1467.990279][ C0] schedule_timeout+0x123/0x290 [ 1467.995128][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1468.000496][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1468.005779][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1468.011601][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1468.017066][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1468.021837][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1468.027130][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1468.032333][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1468.037265][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1468.042113][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1468.047921][ C0] rcu_gp_kthread+0x26d/0x380 [ 1468.052588][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1468.057775][ C0] ? rcu_is_watching+0x12/0xc0 [ 1468.062544][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1468.067740][ C0] ? __kthread_parkme+0x19e/0x250 [ 1468.072762][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1468.077950][ C0] kthread+0x3c5/0x780 [ 1468.082012][ C0] ? __pfx_kthread+0x10/0x10 [ 1468.086594][ C0] ? rcu_is_watching+0x12/0xc0 [ 1468.091352][ C0] ? __pfx_kthread+0x10/0x10 [ 1468.095931][ C0] ret_from_fork+0x675/0x7d0 [ 1468.100512][ C0] ? __pfx_kthread+0x10/0x10 [ 1468.105093][ C0] ret_from_fork_asm+0x1a/0x30 [ 1468.109865][ C0] [ 1468.112870][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1468.119177][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1468.128098][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1468.138139][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1468.143770][ C0] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 86 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1468.163366][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1468.169434][ C0] RAX: 0000000005f95a35 RBX: 0000000000000000 RCX: ffffffff8b60a2a9 [ 1468.177392][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b6a1 RDI: ffffffff8bf070c0 [ 1468.185349][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 1468.193305][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 1468.201280][ C0] R13: ffffffff8e097a00 R14: ffffffff90820cd0 R15: 0000000000000000 [ 1468.209240][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 1468.218160][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1468.224732][ C0] CR2: 0000200000339000 CR3: 000000007e450000 CR4: 00000000003526f0 [ 1468.232695][ C0] Call Trace: [ 1468.235977][ C0] [ 1468.238896][ C0] default_idle+0x13/0x20 [ 1468.243216][ C0] default_idle_call+0x6c/0xb0 [ 1468.247968][ C0] do_idle+0x38d/0x500 [ 1468.252034][ C0] ? __pfx_do_idle+0x10/0x10 [ 1468.256615][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 1468.261811][ C0] cpu_startup_entry+0x4f/0x60 [ 1468.266564][ C0] rest_init+0x16b/0x2b0 [ 1468.270798][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1468.276091][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1468.281655][ C0] start_kernel+0x3f6/0x4e0 [ 1468.286160][ C0] x86_64_start_reservations+0x18/0x30 [ 1468.291622][ C0] x86_64_start_kernel+0x130/0x190 [ 1468.296735][ C0] common_startup_64+0x13e/0x148 [ 1468.301673][ C0]