last executing test programs: 13.67255495s ago: executing program 0 (id=904): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1132200345c010203010902630002040828072406020000000524001c620d240f0100000000020005f29011cc03080353ee97050a2401f90a00020102092403060703020208"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x45, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000"], 0x6c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) 10.915020329s ago: executing program 4 (id=922): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="75b84f37074c6e2269d90aade9b0234e716cbbfe9d4095dd1bd3918c76581ba30948c447dfb6c6551bd815b138c89fe14941abc5c93555d449aae877ba46e5af423c13a3d1d54bf897d9495166cb083331ba990849308415a756b8695dbb4c1e941fa7", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendto$inet6(r5, &(0x7f0000000040)="cb", 0x1, 0x24004090, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_pidfd_open(0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000005b80)={0x2020}, 0x2020) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, 0x0, 0x880) r11 = dup(r9) write$UHID_INPUT(r11, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 10.638147121s ago: executing program 0 (id=926): r0 = fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000007e40)={'wpan0\x00'}) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000084) fsmount(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.5104812s ago: executing program 0 (id=928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getnetconf={0x24, 0x52, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7f}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4080) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "000000000000ae270000c2041a02003d00"}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002"], 0x104}}, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000057c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES64=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) 9.509677718s ago: executing program 2 (id=933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x800) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setreuid(0xee01, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x9606, 0x100, 0x2, 0x13}, &(0x7f0000000680)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0xf, {0x0, r1}, 0x7, 0x8, 0x1, {0x0, r5, r2}}) io_uring_enter(r2, 0x700d, 0x2004c7, 0x69, 0x0, 0x0) 9.412189395s ago: executing program 2 (id=934): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000004880)=ANY=[@ANYBLOB="40840220f8b602"], 0x7) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x4000}) 9.310045318s ago: executing program 2 (id=935): r0 = dup(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, 'e,\b', 0x8, 0x0, 0x0, @private0, @loopback, {[@dstopts={0x2b}]}}}}}, 0x0) r3 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)='0', 0x1}], 0x1) write$uinput_user_dev(r4, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x2, 0x73) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008001f00"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) fremovexattr(r6, &(0x7f0000002940)=@random={'security.', '%$-]\x00'}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmmsg$inet6(r3, &(0x7f0000002700)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000940)="bd720d68beb2dcda4f2d8764d3c778ff5e91340dcb324d481168e51b87a2793414d518dd02238b4fab2c9ab7e34e82aeb83c29699f5542a62b8f3502ac0c15274a91022e67919a152284b2d6aeb64a5f0d2c47741e699e6d4aafdd953761b645c34c60e74dc7e02329b5b3d26df20dd68677b5a308ed18bae3142cf798840560aa70c521a33759950a6ebd0d6b9b6546f39a42053b63f16115bc4141d3b0f152e2a972689d2d50ac1d62b0f38731270894aea7d7c3824fa09bf9d3c87d8207e644240ab91acdc303ca990f633482ea1bd5078cdcd2f0df9d97daafb4ae5b8a5445921f433000e35142709f79f18c6d463f316a6f5d2dece3c340dd3d05ab408d1861c85bc4937ce68175c759032e4b1f8ced546798c39b165a87ac288d65024b81ba8e750de45e48d01a44ddb4f652170e5f24aab1dd26f4a024c3201ec6a976d4b6a091a47a8bc1a8e9b51668a79283f9a5a4b20ac80897e6a36221491603b89e6a2b3682ccae432aa5065fe04db53aefc1688f2d235f5ff462a3bdff3a2cee7086ceab38a2cb642bf5f542b2a7a9e56f4de19afc0ed8c9711043c47db3b33d910962963759e17e17404473c27c6a235603136926a14e662316f599f3ccbdf2091d035115876cf601e7bafda04c5d4834074d45ec50010650cf90b9a52404ac1c989b39c205baeb6f93689db949bfa831dd5e8940bfb6883fd0b5a83a0bf897a09b8532f687137d1f04d46a43944def58bec5eb063017471bf7f04f926b5164a556f2af227762b240b071c25c2a6cc09262a2a0878c841b2670d5e28c78113ec2a7c04b03f47b28f7220cbd98f20947198f7943b9d83eeac8177fc2b92f7750f6070d6264e6a357c56d0835e9c216624ad377f668d014c0ab0fc08d025a82c910089e6bb3b9730a8b8f19870b82e8e52a9af06e017a48f6f461f8a14ec8cff477717b492b9723fa4d24e7f27ac712c06ad87e80ffd6c62c2df5d67cd479c22d6fb7ea603007c4781bd7e9638b00a3446abfc00b3e2e424f0a2dde5382a6ad07b8fa28f17c46e50b750edcfb540b6bf8475e9dd69db466d0a8b1d43c4daa9ca152a445fcb6906bd3eaf0c33dda62138c45487348b54527ae76f3cc52ed4b7b92136377e0b8ca34e2e12b5b25d17c87276c3233c4a00114fa8cf064201ee77fb152b2a6d3a16adec68bc5eac66ffabf516f2d171e78efd73f69d5601169d97f21a8e2eb3ed735bec0608f7183f1044f033d4b6ea62600fdfedf7195959aeb0d971dd94885dac718e4daf0ed75835571902935b24f48d9ad132f4fb0384db4f8bd9bcb2b94e98c3cf1dfaa776049e14cc8991b238611342f099daf4631097e80b12b950f004cae19f0d13354b7ca89b3b2efd74618848f67b9dabf94e89db8ef14ca396bf9ad09926d45007091fb2c8c1d559a9425ff540f571cb8d259ae0749fc01a9f4d52f7e327e11ed2497b8b7cef2a5650d6c9d05f78feae08ab70997551daa489989cf213c289631f16d9f4a93af9a61a86330bad085b171e4004ad529a3bf076cf6c95bed848df48d1d69dd90b18fb13be69258f31e97416e24d2679260edf5600ea58c6df7433e3fa4a6b7c8d8e06ecdf26eee7cdab851df03ef4269f45a2ffa911d89b23dae5134f2c006ab9ff9bf7acf125fe33f55b0d379ee95933437ea80b544c401a4363b0d482a57fc114d150fe56d287704095e6d318fc03142cfa77e886cb58bf577a6e52ff31fe0cb84a28b77d1606ec50091c157114c53c3ba8d42f9d1f799f248f446a06a869d1aafbaa76c73f6ff87ce3da2bf59ca20048fd0e3c0bc234f5c7b04ab4d21c1c7b3d57f2af4acf5aa5f73e76af8107be53eaa90c53d74617d1266d34315b8addbbfdd6a54d7b711704656748473144d524caac25224a915c545938d6d380cb5ce70025ddd09aa302b95366231dbc8057fe255d5adf277fe2bde0e5b7e4887e5f4d8a8613d1553cc3be4ea10902cef2149dc3b584e86bca3d05e051376b080766ad6278df49b9331833e2d127152d93fb8fe51a0921c3af1266e0540764274ade703614f08f9a51b036a79974c7622aa79a4f33853e61a2ce8d7947ae25e36dec46f8e3e4da5886ab36b660c3b7f1b00b7fda4cd28663fea4549b6ed0745ac83dc7cf86ddd8bd27e0bc841f82c9454634338e5db4f91f9afe8df32469eeba0a592ba20b257f5f4eb2dec0cc235b4cba172f348e48076a2c5e67c93c89e3482c32dd416f1a849ccdc1a57d2fbbbe1cea7c1a6f8486302e04a7fb547c6057fa0a06aa7e63fe75279b96de2fe66e71c4055b2cf1af7320c88dcae3d835af9e99297f8244762424bf86e8d15be981288e0dc039e2141ea0c378ff5d115db7e2f7782d1e33de3bb7f408d2981cfea14c086a91a29dd9383bdf680b61033ba30da306af047b08d8624742e0fbdb0736549aa060dd5f8c25dae85131347a8b93bf32dea825913c12bc2d59706a128737ed1a1a0d31f9e88d06a2e3aa761bc9bfefc86c7a0b1bd1e9d3bc522299bf98967f5da3fb7146679232150d42341044f4157eb5174904ef5c0bcb970b4f13e9f772eacd2e862619e3ac3aa80e1a493f1f128d4ac6cf795d45c51d7118be60d551fb081d587e76259eb7a4066cf634c199b26686bc27061a0b4d7f8e0d14ef3e9855f49c0a5f978caffa475c815e8e6a9b408dd0809884f44ebde02333c2225ed530a6478d5a2b50d9fb6ad7581f4e802aeca35bc9be0097518a11ea7d64b45994f927dc9cf7ca69008659506d2bc0f3d222076541a1c86ba9c2eed2216ec726495f9e0af4c461c5d80fe229f0c1e182fbbec2f9fdeb63635d7b17ac1f7fd5839e62a1577c6beb16247e765a6f50cb49f24fe470b76fbac9224639cb179d5742dedd83b3ec5f2514f3ad82ceb912edb6fccdba3c24219636f73c83d543f9dd951c5630165f668c9a1dbdbe9a248486b20fead0d714176a1af44c32d5dec48b0ce710c298caa11c4be3a9b3c1c5a41d4159acb335e51805440e4bef94c2f115c78adf089aca4a84bb031ad87e1c0049491d52604dc7bc5accfbff490a2b522aa1b5e80aa4ffb516ccfba8ea4e8afd0eac422d5ce924deb945d576c93c8cd54efa4e47c72f76294286d77f9eb9e5d1d124b19f033e771b6bb8ee3811f02e8d023f659637629233413b9c7250a9c5f99476c4e2890d8d494a85fa9786db0b4cbb72ab89cc8323efff721420e416f920dd9d6695dade75a04a16de187748e28c5f6c860aaa86135538f30501be453c1ac90a4081e422c86757fd874ae063ca841a240b976e2b1973bdbc11df9dc509be8561444f24e83be0929f463b173ef4371bce9f19f4de090e0ff711972fdd5bfa8e3afcbf7d3c93d672f62f900bd66b753cb3b0a750beb72b8fa776235921c8d33609ecf9941fe3cf29d0b6deb1e3bd2fea30cbf82f8ed3edc64e7936a75714648149c44332c16479126c921929f30cfbd250a74a3ab5579b0447fd898d2622b196d8bcb4ce83467c434dd4570dabdec500797aa62b0d8e1e980bb32584935ebcf7ad8fe376b7fb17378fe97ca5847be85879b76b2a1657b8aa1481556eeeea59dce66f5ee586413477510c361b617bad8a72968e6277d630195aad3778e474b370319e9d7ffc27dbb0e2c5e3e3dfa403410269ee9ce8f73a3d300d6974e125bc1705e2ce816c167ce70b37298bad34ef4213c3f5a6a1541706b71dcc95769fcf810e0e839abc4dc3d7224d4b62376aa33d6d188063699bb8eb66a3a26ec4e9593c39717ae374e04d6286d409f89d2b967842502d1ff3766069378e7568e66843e1ea1b9ccf33a64e08ba8aac1c861b9f71785a96dbfd6270b4f61645daffa71a4d2c0d6a701fdd6cdf0293dd1e4017388921b7b54f88cdcb374658acc519ac180e1dcbeaf3e2b9e8eb83fb0c3fbfe5796ead958a88666d11e42338d3cb30717a949a9714444ee5010e7f8b4a91ebb429442b2e368e5bbf83cb5ec0aaeff1335cc23c0199cce98331e8f782bf27976186f2d5c7c5f0023f69174d65169da9d9487a15e4e2ec1a2231b027d79434803de13ec29faf51a54c05fefb3c2b3074ce128ca8a99ec41c41ae3dd4df951587f2ef2c1718a909ae0176c6ec33fb80ae5233ad8dfefca33bd0f3b662b194063949037d37c0ef95fcf89e09845661cf025ba107bc8185054bd4090fbf7295a46d2d74128104107ad841a6451a51aa896870a9da7e27d7c37fc3d576e496122c3674e3ddfdd35e19274b5d045525ed0ee7234d32661b5bc53357f7abfe251a8082498658ca15fb79d7d0802754caa253541476b322f0c84bfcdf7f7e764c52d6c83c43db4bd4c1c9abe9e958fc090870b4ad4b01f0dffcb9c4d7f2c19fa5de46ceb643d64ce22ca74af82b3dac2d17527644592472c93e7dfb2966f900ca0a9b099221c231711ef933d2cc46418d36732eda1ac79e117535a2e9c356fb21479cbc22488513371c169a4c5b08db1c48798a4b6320cab488953189c2698cd017db34a1a336077c8bd5aa660e33b3dc36753be560095006424bbc69df9930add20f03f19db4cba238266962eac01d8c181c342cae8211049edcc8ac18d88265c3d1f40bbe16e2fe9b416f28bf4c1a86f4d7158fa11d5f78b6d30974ade3d85f2e8a2a8d9b8f82833b4f3ba3c13f2a638df0f8d63b707466d52f1015d94ab200d7287ef395ef1db9ccc5be7d947584cc17427de2796fd8a654e19718c8ebecc9174887ed366cc9b62f8587900f492a4c7af7f2e6c4619237d61f6123d3bf38a85cc747ffb306c9fd51a4db0d0d8a21d4853b0c8436cc5945c56dee44d14bd19c1f2227581e35e5c4afc0f526a51227a61138d018f48486bcf3f599dc35529b9a33efeb013e48f880a49ad4aaa11fcea36dc1a48d2bb92afa58a607dc26360b5810b6b32d1422a90f57f797b258cad56bee56cd167e366e6a76447807a0cfafa291900f2358c5aaca1e4cee3f62f50c7df6623437b94c15dfa1c71252df220dbe9d3e20190cd8ee3f1ea3cb977e224a3a1e30d5cb8548111798872344a370a1c007eb2e7ce8bc7494e1bd60b66af3ac5c9a3f9928ce0406e58d3c9993f4890ba6e85db761b0674336cf8c2cf41d1e11c9d80e7bd51f9c88157b52ed7f3bfd6e44ccfd31793f9e778da1bdeff15b3879db0bb0ebbea2d5f782495e845a7b73c684bb4d77505f72912b0f6147c79ddd44ea0cc3df625a1f15e28e6498e7f834c7f5ecefff13ef4166b3544eedc509e17fa2fcba343435b10236feafb43b93a1d9d93e7763d64f5d3a49f39c78d42267b331cb3f80cde4b2441e450ad15b1953fc1cf8aa8915ab917d7a711090c3007bdbf81c2bdb7244137a336f4fc6b0a8efc524593b13d77dc0b891a54c3d2096930e3423d91380226cef208acb0d9b30bed01c492222738050fa593e01ea0e14c10cb9ec4c17ccfef9b11371aa59898efd59703e9e4b573fa1029226fc6548e00f00008dfded687f0feffa09c8f0cad7f56d4043f28c0764a22fb364b6f6aeae6650fc35b5c36cf9b4055cbcb1d3c93c0d4941038aa481adb09fc45807cc28c0004fedc7392fe0c03828f60c968a00b38a966c3284a105df23c5356806049831227132fddfc6c38581794cc2c562c1744299dc7a34a9e74affae63dbd9acc1b5b5866f144afb9a9298a2ffa7d1e15a2ff403d263e287af03da76e3df3a21767d40fa0d55d8b37daa224e61701aecd6259c161fd7f73d19bb3c942ece33ea67c0678332e5fdb83f8098bb0147bd18535691eb1eeae6f637b2cb7c4728128d66660", 0x1000}], 0x1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="eddb4f65"], 0xc8}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)="75432bc197e48f71a2d683ebce869e3809ca36295a4a61d00e1abb0a1cba7384b8e9ae058036ef872298a971ec5547e6aae69c0a25739408845754095af674e202f5906620d1f1afab2b6ce09ee2d958d65f35cbd4281f7b2603418458c3a31ac8b9b5b1d33c3a260ff998f2764ee00964354e1be19bcf558782229bb3546e6ed54eca2bf10d5a2a06ddff6c7954", 0x8e}, {&(0x7f0000000300)="c3b62cacd7392ce826f8e09aa40c1ba59d4079ccad2aeadc0813acb19c3b64e6ba4dae9f6d9b141f97d96ba52232368fc3be44227693c714e891a0699bc8fca355db3740cdd232f171092ac53afc47af64a33c54be735e09669e5d77921e176523e3957108dc9c9ab60913dcd3e78bda39d4e6249def7ca2486106b2c0a12b4ff2121b5da81baa163b6e72c0658a871cbe3e3139846cd09662a9bcfb1dc252628f", 0xa1}, {&(0x7f00000003c0)="7fd78c", 0x3}, {&(0x7f0000000400)="28c8c15a860f6a5ce62c21a9df78ee423b6f69bad03f39c52ba6759cbccce7be2db532f211031e7910d4d16da0f8e98f428856a016adc6c6b833629c038eaf04d09cdd1109", 0x45}, {&(0x7f0000000480)="405834f14fb5d10534c2c6834c6b4186224385da868132f44395161c93773f3866279215f7c6b4425439009551cb5f476a03fba8a708f1aa13edeec37a8d60aa8b560daa8eb637feae7a46f78fc2c79d6169088d9576e14aeb62cb98486f74f18f0183b9b67098ee0fa3f9695b23335dadc705d3ee308f9c077c2880cd87c99f0f4c357b5ec4701d6a7588ba18ef654473d2db", 0x93}, {&(0x7f0000000600)="3bf53d4deca640e245fc3cb79b9e21a9b20357297563b1b37c08738943ca01658ba95898d5f1ad33d1328673f369b4e21e1e164cc1796c22f07f5541c8a552603291373fd6f730136bfb5d1036e73f9350d38cb4536afcdc3947d35b36a17bbab3f3acfcfbdb59ff5bcb46ee22e9be9c3821f125e3c4bceff17eb9b4ed3d76a70ada5f2a37a98642fba7a6f4343585b1ee1393266e6ff2f3ac0b0c8e470d3bfa08389a18dc1b5d0b80101aa63e21b7a1a0e42161cdf827b0dc7c8b2625623210d8d2b202e9b4ccdd8cf28e6fc3339373754dc34052f73a0c25a09d663b", 0xdd}, {&(0x7f0000000700)="697988b3af140ff964ad295af2f0aff6443c4da4b78d6787d5773e7ce74a9bf69edcc28ca7bf49dbada967e966a3bbb26edc5ed816e84996be7d3c0a8acd9092b2ddc99225bd121657b85d32fda2d46703e921eab7ed56d11766a48f4f8f046bec32fbea334c54a6f6d6a4f23145479bc13844f7e0014622268659062ce0fe7a02c294f13eda87bb1a6b8057c70738de6370efc9bf4e3de870facfc5c5ae01eee261eab27f6ad3264cd7abda5eccb565e94549c9e407e9bf07274e1c90f1026d701bc9c6198072106cbce0ddfce70525894ac1f1b8f2c824d138437d", 0xdc}], 0x7}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x100, @private2, 0x8000}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001a40)="68b9e2da5ce66e79458cc82f7b3276571fbdb2894901df6e40ceb025029af8a1a158293c67321bc83260cd4b277600d2f44c570983368110790f126f77fb199dfc5a3e29715f57bd874e7fbfc4403e2880c180c2fc81e1457404806205ebd364030a65496b84751f7026b3da0aae53758856a784a44c3bb9eb69a8809afb228290ff86309d21e48c1f633ef4a44e89b07e5aec0955f08e04c38ef5c422c96cc388bb09c5bb6d820f1bf76dc22f7991200cf9adab2cec8cc3a6a119747fb02de7f6208420c014", 0xc6}, {&(0x7f0000001940)="65388404d0845241fdd01c31155cac583f17177f77a1b9193647bccc12f223ef1727666701dee888979664c32fc63e1afcd1c2fd8e1d22dd7537cd220c771bb60ba36a49cffba2dafbdf51494ed91a85521a0f3cb72c7e8fb9d58ea4a60c5f7e5b74ee47ba3b9985c2baf7348fe2f745be86f3ae5a86d9a5a64f40bd50140d03077ed6a20b6f8febbf9a9121ab6b7d5e24b5ba6f661da7a2097530d60b7a45f29d5f7253b5e217a051af1dd7d30c4a97afa39a24a5a4f2514be24f", 0xbb}, {&(0x7f0000000880)="e96352530f2456ad915eefd89c18e6b7a20a5b6dc8c134e13b8e47ec11c76707e6bc20c0f266f630", 0x28}, {&(0x7f0000001b40)="a6c1b3113f9976c086bd5133e57d5208e3e1f78092829a4b934ab9c74cef203a186521073741db146b6465024b8714d5ef0ef7b8d07717d997df1eb856052a0800060a0afb621ebedded1468efc049734a15ce96561216c6d7308fb2f40668273e1cd50ccc7f430528345c4b3d6cbea3c2f8d2bc5f45d7653017f642dcb6c951ab8e816ccadd98c2d8b731f721e10a05c12dcd822b25141a7e9f69c65d9ce63b1fd576de5f79bc3a1b", 0xa9}, {&(0x7f0000001c00)="d2d748ce99f6779025b109265331ede5bd3c645592be31b67abb13a3c3610d4b56846fca8d164ff29b3eaa65fbcb102578993fa9546585c5ffa2f876c2cb0a3df4a9eb9c1949fb70a43ef1891b3109ff5d62fd0e0ae993", 0x57}, {&(0x7f0000001c80)="ea3d83c6de395a347b12f311462831afbf299b906ca5a86dd3f98d872e32397dec42cc2e46dc49dceea76bb686059356a419080fb2eeb3c9e101df44ff86bc94060c9dbaa98b7bdec133cdbb738c1a17598b810c67a688fcbaf71e76015a5afdb3303a57e1bc9aeb27ec47ff31f06187e47b8a2c04e19d7e698ec0", 0x7b}, {&(0x7f00000008c0)="68b785ef7caf8f98fbf5ed100d77a17390baf4c0283fb90fe0aa79a06a855d944522a6dd7b2e86e83b121e0842e2", 0x2e}, {&(0x7f0000001d00)="845fa465971cf9acd3271fe34451abaa03243690e9", 0x15}, {&(0x7f0000001d40)="f639e436653d16f81788920a1c48e5db472ac1c1a532e9e1fd3158a92597ff1d3f8ee912b699d203a9764c65d67accdf69862e3af567ed0262a6448b9727a7ff6b733fe1f50eeda01949b0d67b", 0x4d}, {&(0x7f0000001dc0)="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", 0xfb}], 0xa, &(0x7f0000002980)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts={{0x48, 0x29, 0x37, {0x87, 0x5, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x0, [0xf]}}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x14}}}}, @hopopts={{0x88, 0x29, 0x36, {0x0, 0xd, '\x00', [@generic={0xa1, 0x11, "c9361476c1d068099a6291f6d96f9abfd6"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x7, [0x80000001, 0x4]}}, @generic={0x7, 0x3a, "fade14e330a58a203b3ab89375b05a074651f829c80eb53dab4f6bceaf3552b9a4d998e24e53f2460f882e21075b1d728de3cac5cdbbbd3eac19"}, @padn={0x1, 0x1, [0x0]}, @pad1]}}}, @dstopts={{0x1a8, 0x29, 0x37, {0x4, 0x32, '\x00', [@pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x1ee3, [0x1, 0x9, 0x3, 0xb, 0x3]}}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x8, 0xf8, "ad1a1afe6cee950051da6e5c8ac019e83eb6bbe4d3a89d407a4da2ca8c89ab0a3e0187ae7f521d4fcb7353a857099ab9fece728a4055e2efd3c6d0f07080baf30a457208531977f614bacf64443695643dd87821e2b47e9bd9c8d33ab1efd18f842d62eb075434f1a5f6f94e84e104f16302551aa247535afc691d354f5e336c3c3294c109cd1199784be90502c253a296514e80f9ac9e57aa37f29d982bc5b01cfe768def4600f9933183d879d3639f37e40528ba7fc19d8954c5ebbf25b4c5cd1f1ff03678ade03a66b29d617fb391c46f67f3074fd709b82ee9f66d8a4ff5d8adae45295951de0dbed1edc4a5996a2c36c9ea3cad5865"}, @generic={0x3, 0x3b, "d27495843c5900b3d64156ae1c48b8d9e02323b8c22efd9ddc19ad0c8560092eaf6ae801589c7c6b2fe2da16eb6fa38b588a0f5dca114e623acfb1"}]}}}], 0x2d0}}, {{&(0x7f0000002100)={0xa, 0x4e23, 0xd25e, @dev={0xfe, 0x80, '\x00', 0xb}, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000002140)="3ccde7c1f776c51c1a6045c04bd6a25a45393497aead68e189d6e6c70608ad8ceb87d5e7b2", 0x25}, {&(0x7f0000002180)="4f8603536ce4ccea658d1fd1686979a38b60f6e1d6fa5807df732006a7e144df406c5ada1270a1619a8efdacb43df99aa0670f099e8f0794a16b455d8d1bc6c1497e34a7c610e472ac1d649c5d65cde1098804fbb53e10d561a6159417183872e8386ea32707222b17c6da49a3aae227748c318952210c4cc64e4c753ecb2d8d1083cd1f61060aaa28f951304c70", 0x8e}], 0x2}}, {{&(0x7f0000002280)={0xa, 0x4e24, 0x4, @local, 0x4}, 0x1c, &(0x7f0000002580)=[{&(0x7f00000022c0)="01a64be3c7340dc887eb3b42284baf63f3b9ab55c49b06b0e263e11c20d7a1a40c05674784a968cadc2375fb462422d7a921963e40eff4bc28454482e3dbaa126ea4bb5cc086658ff9d6", 0x4a}, {&(0x7f0000002340)="18861b0441fb0d9ed8c7c85b23d1c99ae80430f78e95431719b80aa45d09204872d6a0ca2549c9ed0fe77bf8b668c9cdb389280f060b5c19eb20c0d86e94179dcb30767cf65fccff941b7e3e3d774b2531dbe350cda7e3ec01de1f39f31b7853195670e7877fc7ecfb125779e17314e53273539756ba71e509d694b160402b2338441d2e7247ce6c29a3250199", 0x8d}, {&(0x7f0000002400)="6f95619947c73e8af574a0b1e700813946081bfddf3d4eff9a615e3aa00e18440ad82f6fe5c5ec6a84f094d64275022c71e90293b5dae980059d8075151913bb4e2e74c24d8554e06938bbe01c5dbf310407472f2d41a1ff171f1924e469c7f46fed308ce7cce6aa0e9f", 0x6a}, {&(0x7f0000002480)="ea1e1bc62afd05b4b4438be18ec0ad6c63332053e542d942ed1477780cb2d8ca0700c26dcbecd488da23f83b1ecf858936002092cb94e6ce88eb103bf91213e799939f5769de4e4cd4f21d1162e6ddf3cedad8e8a1d2d0c22f9463ad41845fc7145d132b39886f3b557cca9ea740ad887a1fccc0fe235a4d159e9955648bfa05416af6bc2dcc5b77c9da778dea1a73f1cc9b0535a9e57ec801447a20669cc0a1006f0b08fe9df53ab30d9c17113a62fb663529ff56ec8da9fda2ea5dff2e4044291313f948e905d08bda81819c2806be7ae3a554790c2eab7cb43223b07fa8e9a1", 0xe1}], 0x4, &(0x7f00000025c0)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x2, 0x13, '\x00', [@generic={0x3, 0x78, "98a916ace8af8c7ed0b6d9fc8497b2b07d28ee15b9e728d86411d7f13ccf5ecd6105faf2fa857d25436974b57d0dc8da04f82257586a7c6f4969d78309a9947982a05cbc2d495bf35f04a514cbcfce6c2b769da83091ae46185c3117047e6d9582a94b9db7a9c291a260c949a41702ad80d05c4262cf0f1d"}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x23}}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}], 0xe8}}], 0x5, 0x80040) 8.977737084s ago: executing program 3 (id=937): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) dup(r0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r6, 0x0, r7, 0x0, 0x10000000000016, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x2001}) mount$9p_fd(0x0, 0x0, 0x0, 0x400, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@afid={'afid', 0x3d, 0x4}}, {@access_any}, {@debug}, {@cache_none}, {@directio}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cpu/#/msr\x00'}}, {@measure}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}, {@obj_user={'obj_user', 0x3d, '![%0'}}, {@fowner_eq}]}}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004300)={0x50, 0x0, r10}, 0x50) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r11, &(0x7f0000006e80)={0x2020}, 0x2082) write$FUSE_INIT(r11, &(0x7f00000021c0)={0x50, 0xffffffffffffffda, r10, {0x7, 0x29, 0x2, 0xffffffffa1400b00, 0x0, 0x0, 0x9c7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) 8.576911211s ago: executing program 2 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 8.071852386s ago: executing program 3 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) getrlimit(0x9, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) 6.622857521s ago: executing program 3 (id=940): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe2(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 6.583044729s ago: executing program 2 (id=941): write(0xffffffffffffffff, &(0x7f0000000280)="0f03000019002551075c0166090ffc02800000030011000500e1000cee2003001a000000020000000000000090b9281c994b53d15436c2d341c90d73273e9b51", 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000a1e3724b7d077000"/31], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000004b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000256efb7728b72f0b5e0517ca565864b7050000080000004608f0ff76200000bf9800000000000056080000000000008500000007ae7d49fc40b98ec3f3000000b7000000000000009500000000000000a7a56bbddd8eb9f4473883f3e6a7ae1db6ddf6672f5cc447c13e1159d1e2627ecd3514f4137e1de348b7945d6f"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000f0000000000000000000000fb384b9a86f131cd8548308dce401492dd1e383acf2a49957c2ced9ebc320919d19fdb3296abdaad1428d54fbdaed25f1822c331ccd7058e866092565141799bad28e5dee5752a1edd2e6be92ffbfdad072f045c9e4152421f02e3c040b302e92edfe1e14da95b3364999e01e492ad20b25f6c4be89a2f3684576f2403154e4302e26feb95a7e20211"], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r3, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 6.545002609s ago: executing program 4 (id=942): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8141) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x9, {0x6, 0xce7, 0x89f, 0x8000}, {0x4, 0x4, 0x2, 0xfff}, {0x0, 0x24}}) syz_io_uring_setup(0x4c08, &(0x7f00000000c0)={0x0, 0x755b, 0x8000, 0x2, 0x353}, &(0x7f0000000140), &(0x7f0000000180)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) map_shadow_stack(&(0x7f00002bd000/0x4000)=nil, 0x4000, 0x0) r3 = syz_io_uring_setup(0x1841, &(0x7f0000000f80)={0x0, 0xfffffffb, 0x10100, 0x0, 0x80}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9088000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00 ', @ANYRES16=r2, @ANYBLOB="00032cbd7000fedbdf252000000008000300", @ANYRES32=r7, @ANYBLOB="0c009900060000005e000000"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x8000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)) 6.149361118s ago: executing program 4 (id=944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x800) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setreuid(0xee01, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x9606, 0x100, 0x2, 0x13}, &(0x7f0000000680)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0xf, {0x0, r1}, 0x7, 0x8, 0x1, {0x0, r5, r2}}) io_uring_enter(r2, 0x700d, 0x2004c7, 0x69, 0x0, 0x0) 5.987890186s ago: executing program 0 (id=945): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r2) (async) syz_clone(0x2c001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x1080840, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e73ff66642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000280)={'geneve1\x00'}) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 4.744615917s ago: executing program 1 (id=946): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x64, 0x4, 0x368, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x7, 0x5, 0xfff, 0x200, 0x5}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='scmi_xfer_end\x00', r8, 0x0, 0x4}, 0x18) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.381794735s ago: executing program 0 (id=947): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, @any, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r2, 0x1) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x5, 0x4, 0xc, 0x0}) 4.217022535s ago: executing program 4 (id=948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r2 = socket$inet(0x2, 0x5, 0x7fff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000240)) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f00000000c0)=""/62, 0x3e}], 0x2}, 0x23) syz_pidfd_open(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) 3.602196664s ago: executing program 1 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 3.17243527s ago: executing program 0 (id=950): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001300), 0x440202, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000014c0)={0x28, 0xc, 0x0, 0x0, &(0x7f00000013c0), 0x0, 0xfffffffffffffff8}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 2.917261071s ago: executing program 1 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 2.493874103s ago: executing program 4 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000000001010400000000000000000200000004001880240001801400018008000100e000000108000200e0050001000000000042bed51aa3595310b8ce80e23b68e695313b9e8c667e2eafd78a82b9d02cbce413e305b419ef2e8b5a1980f9771237c3d336c4594cbd0ef6c8b4f4ea65be811b7a8be2630f565ffa181fc83ac136364eb1f2ec641c7ae9"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) (fail_nth: 2) 2.361524814s ago: executing program 2 (id=953): r0 = dup(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x1c, 0x2, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048890}, 0xc5) r3 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)='0', 0x1}], 0x1) write$uinput_user_dev(r4, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x2, 0x73) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008001f00"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) fremovexattr(r6, &(0x7f0000002940)=@random={'security.', '%$-]\x00'}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmmsg$inet6(r3, &(0x7f0000002700)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000940)="bd720d68beb2dcda4f2d8764d3c778ff5e91340dcb324d481168e51b87a2793414d518dd02238b4fab2c9ab7e34e82aeb83c29699f5542a62b8f3502ac0c15274a91022e67919a152284b2d6aeb64a5f0d2c47741e699e6d4aafdd953761b645c34c60e74dc7e02329b5b3d26df20dd68677b5a308ed18bae3142cf798840560aa70c521a33759950a6ebd0d6b9b6546f39a42053b63f16115bc4141d3b0f152e2a972689d2d50ac1d62b0f38731270894aea7d7c3824fa09bf9d3c87d8207e644240ab91acdc303ca990f633482ea1bd5078cdcd2f0df9d97daafb4ae5b8a5445921f433000e35142709f79f18c6d463f316a6f5d2dece3c340dd3d05ab408d1861c85bc4937ce68175c759032e4b1f8ced546798c39b165a87ac288d65024b81ba8e750de45e48d01a44ddb4f652170e5f24aab1dd26f4a024c3201ec6a976d4b6a091a47a8bc1a8e9b51668a79283f9a5a4b20ac80897e6a36221491603b89e6a2b3682ccae432aa5065fe04db53aefc1688f2d235f5ff462a3bdff3a2cee7086ceab38a2cb642bf5f542b2a7a9e56f4de19afc0ed8c9711043c47db3b33d910962963759e17e17404473c27c6a235603136926a14e662316f599f3ccbdf2091d035115876cf601e7bafda04c5d4834074d45ec50010650cf90b9a52404ac1c989b39c205baeb6f93689db949bfa831dd5e8940bfb6883fd0b5a83a0bf897a09b8532f687137d1f04d46a43944def58bec5eb063017471bf7f04f926b5164a556f2af227762b240b071c25c2a6cc09262a2a0878c841b2670d5e28c78113ec2a7c04b03f47b28f7220cbd98f20947198f7943b9d83eeac8177fc2b92f7750f6070d6264e6a357c56d0835e9c216624ad377f668d014c0ab0fc08d025a82c910089e6bb3b9730a8b8f19870b82e8e52a9af06e017a48f6f461f8a14ec8cff477717b492b9723fa4d24e7f27ac712c06ad87e80ffd6c62c2df5d67cd479c22d6fb7ea603007c4781bd7e9638b00a3446abfc00b3e2e424f0a2dde5382a6ad07b8fa28f17c46e50b750edcfb540b6bf8475e9dd69db466d0a8b1d43c4daa9ca152a445fcb6906bd3eaf0c33dda62138c45487348b54527ae76f3cc52ed4b7b92136377e0b8ca34e2e12b5b25d17c87276c3233c4a00114fa8cf064201ee77fb152b2a6d3a16adec68bc5eac66ffabf516f2d171e78efd73f69d5601169d97f21a8e2eb3ed735bec0608f7183f1044f033d4b6ea62600fdfedf7195959aeb0d971dd94885dac718e4daf0ed75835571902935b24f48d9ad132f4fb0384db4f8bd9bcb2b94e98c3cf1dfaa776049e14cc8991b238611342f099daf4631097e80b12b950f004cae19f0d13354b7ca89b3b2efd74618848f67b9dabf94e89db8ef14ca396bf9ad09926d45007091fb2c8c1d559a9425ff540f571cb8d259ae0749fc01a9f4d52f7e327e11ed2497b8b7cef2a5650d6c9d05f78feae08ab70997551daa489989cf213c289631f16d9f4a93af9a61a86330bad085b171e4004ad529a3bf076cf6c95bed848df48d1d69dd90b18fb13be69258f31e97416e24d2679260edf5600ea58c6df7433e3fa4a6b7c8d8e06ecdf26eee7cdab851df03ef4269f45a2ffa911d89b23dae5134f2c006ab9ff9bf7acf125fe33f55b0d379ee95933437ea80b544c401a4363b0d482a57fc114d150fe56d287704095e6d318fc03142cfa77e886cb58bf577a6e52ff31fe0cb84a28b77d1606ec50091c157114c53c3ba8d42f9d1f799f248f446a06a869d1aafbaa76c73f6ff87ce3da2bf59ca20048fd0e3c0bc234f5c7b04ab4d21c1c7b3d57f2af4acf5aa5f73e76af8107be53eaa90c53d74617d1266d34315b8addbbfdd6a54d7b711704656748473144d524caac25224a915c545938d6d380cb5ce70025ddd09aa302b95366231dbc8057fe255d5adf277fe2bde0e5b7e4887e5f4d8a8613d1553cc3be4ea10902cef2149dc3b584e86bca3d05e051376b080766ad6278df49b9331833e2d127152d93fb8fe51a0921c3af1266e0540764274ade703614f08f9a51b036a79974c7622aa79a4f33853e61a2ce8d7947ae25e36dec46f8e3e4da5886ab36b660c3b7f1b00b7fda4cd28663fea4549b6ed0745ac83dc7cf86ddd8bd27e0bc841f82c9454634338e5db4f91f9afe8df32469eeba0a592ba20b257f5f4eb2dec0cc235b4cba172f348e48076a2c5e67c93c89e3482c32dd416f1a849ccdc1a57d2fbbbe1cea7c1a6f8486302e04a7fb547c6057fa0a06aa7e63fe75279b96de2fe66e71c4055b2cf1af7320c88dcae3d835af9e99297f8244762424bf86e8d15be981288e0dc039e2141ea0c378ff5d115db7e2f7782d1e33de3bb7f408d2981cfea14c086a91a29dd9383bdf680b61033ba30da306af047b08d8624742e0fbdb0736549aa060dd5f8c25dae85131347a8b93bf32dea825913c12bc2d59706a128737ed1a1a0d31f9e88d06a2e3aa761bc9bfefc86c7a0b1bd1e9d3bc522299bf98967f5da3fb7146679232150d42341044f4157eb5174904ef5c0bcb970b4f13e9f772eacd2e862619e3ac3aa80e1a493f1f128d4ac6cf795d45c51d7118be60d551fb081d587e76259eb7a4066cf634c199b26686bc27061a0b4d7f8e0d14ef3e9855f49c0a5f978caffa475c815e8e6a9b408dd0809884f44ebde02333c2225ed530a6478d5a2b50d9fb6ad7581f4e802aeca35bc9be0097518a11ea7d64b45994f927dc9cf7ca69008659506d2bc0f3d222076541a1c86ba9c2eed2216ec726495f9e0af4c461c5d80fe229f0c1e182fbbec2f9fdeb63635d7b17ac1f7fd5839e62a1577c6beb16247e765a6f50cb49f24fe470b76fbac9224639cb179d5742dedd83b3ec5f2514f3ad82ceb912edb6fccdba3c24219636f73c83d543f9dd951c5630165f668c9a1dbdbe9a248486b20fead0d714176a1af44c32d5dec48b0ce710c298caa11c4be3a9b3c1c5a41d4159acb335e51805440e4bef94c2f115c78adf089aca4a84bb031ad87e1c0049491d52604dc7bc5accfbff490a2b522aa1b5e80aa4ffb516ccfba8ea4e8afd0eac422d5ce924deb945d576c93c8cd54efa4e47c72f76294286d77f9eb9e5d1d124b19f033e771b6bb8ee3811f02e8d023f659637629233413b9c7250a9c5f99476c4e2890d8d494a85fa9786db0b4cbb72ab89cc8323efff721420e416f920dd9d6695dade75a04a16de187748e28c5f6c860aaa86135538f30501be453c1ac90a4081e422c86757fd874ae063ca841a240b976e2b1973bdbc11df9dc509be8561444f24e83be0929f463b173ef4371bce9f19f4de090e0ff711972fdd5bfa8e3afcbf7d3c93d672f62f900bd66b753cb3b0a750beb72b8fa776235921c8d33609ecf9941fe3cf29d0b6deb1e3bd2fea30cbf82f8ed3edc64e7936a75714648149c44332c16479126c921929f30cfbd250a74a3ab5579b0447fd898d2622b196d8bcb4ce83467c434dd4570dabdec500797aa62b0d8e1e980bb32584935ebcf7ad8fe376b7fb17378fe97ca5847be85879b76b2a1657b8aa1481556eeeea59dce66f5ee586413477510c361b617bad8a72968e6277d630195aad3778e474b370319e9d7ffc27dbb0e2c5e3e3dfa403410269ee9ce8f73a3d300d6974e125bc1705e2ce816c167ce70b37298bad34ef4213c3f5a6a1541706b71dcc95769fcf810e0e839abc4dc3d7224d4b62376aa33d6d188063699bb8eb66a3a26ec4e9593c39717ae374e04d6286d409f89d2b967842502d1ff3766069378e7568e66843e1ea1b9ccf33a64e08ba8aac1c861b9f71785a96dbfd6270b4f61645daffa71a4d2c0d6a701fdd6cdf0293dd1e4017388921b7b54f88cdcb374658acc519ac180e1dcbeaf3e2b9e8eb83fb0c3fbfe5796ead958a88666d11e42338d3cb30717a949a9714444ee5010e7f8b4a91ebb429442b2e368e5bbf83cb5ec0aaeff1335cc23c0199cce98331e8f782bf27976186f2d5c7c5f0023f69174d65169da9d9487a15e4e2ec1a2231b027d79434803de13ec29faf51a54c05fefb3c2b3074ce128ca8a99ec41c41ae3dd4df951587f2ef2c1718a909ae0176c6ec33fb80ae5233ad8dfefca33bd0f3b662b194063949037d37c0ef95fcf89e09845661cf025ba107bc8185054bd4090fbf7295a46d2d74128104107ad841a6451a51aa896870a9da7e27d7c37fc3d576e496122c3674e3ddfdd35e19274b5d045525ed0ee7234d32661b5bc53357f7abfe251a8082498658ca15fb79d7d0802754caa253541476b322f0c84bfcdf7f7e764c52d6c83c43db4bd4c1c9abe9e958fc090870b4ad4b01f0dffcb9c4d7f2c19fa5de46ceb643d64ce22ca74af82b3dac2d17527644592472c93e7dfb2966f900ca0a9b099221c231711ef933d2cc46418d36732eda1ac79e117535a2e9c356fb21479cbc22488513371c169a4c5b08db1c48798a4b6320cab488953189c2698cd017db34a1a336077c8bd5aa660e33b3dc36753be560095006424bbc69df9930add20f03f19db4cba238266962eac01d8c181c342cae8211049edcc8ac18d88265c3d1f40bbe16e2fe9b416f28bf4c1a86f4d7158fa11d5f78b6d30974ade3d85f2e8a2a8d9b8f82833b4f3ba3c13f2a638df0f8d63b707466d52f1015d94ab200d7287ef395ef1db9ccc5be7d947584cc17427de2796fd8a654e19718c8ebecc9174887ed366cc9b62f8587900f492a4c7af7f2e6c4619237d61f6123d3bf38a85cc747ffb306c9fd51a4db0d0d8a21d4853b0c8436cc5945c56dee44d14bd19c1f2227581e35e5c4afc0f526a51227a61138d018f48486bcf3f599dc35529b9a33efeb013e48f880a49ad4aaa11fcea36dc1a48d2bb92afa58a607dc26360b5810b6b32d1422a90f57f797b258cad56bee56cd167e366e6a76447807a0cfafa291900f2358c5aaca1e4cee3f62f50c7df6623437b94c15dfa1c71252df220dbe9d3e20190cd8ee3f1ea3cb977e224a3a1e30d5cb8548111798872344a370a1c007eb2e7ce8bc7494e1bd60b66af3ac5c9a3f9928ce0406e58d3c9993f4890ba6e85db761b0674336cf8c2cf41d1e11c9d80e7bd51f9c88157b52ed7f3bfd6e44ccfd31793f9e778da1bdeff15b3879db0bb0ebbea2d5f782495e845a7b73c684bb4d77505f72912b0f6147c79ddd44ea0cc3df625a1f15e28e6498e7f834c7f5ecefff13ef4166b3544eedc509e17fa2fcba343435b10236feafb43b93a1d9d93e7763d64f5d3a49f39c78d42267b331cb3f80cde4b2441e450ad15b1953fc1cf8aa8915ab917d7a711090c3007bdbf81c2bdb7244137a336f4fc6b0a8efc524593b13d77dc0b891a54c3d2096930e3423d91380226cef208acb0d9b30bed01c492222738050fa593e01ea0e14c10cb9ec4c17ccfef9b11371aa59898efd59703e9e4b573fa1029226fc6548e00f00008dfded687f0feffa09c8f0cad7f56d4043f28c0764a22fb364b6f6aeae6650fc35b5c36cf9b4055cbcb1d3c93c0d4941038aa481adb09fc45807cc28c0004fedc7392fe0c03828f60c968a00b38a966c3284a105df23c5356806049831227132fddfc6c38581794cc2c562c1744299dc7a34a9e74affae63dbd9acc1b5b5866f144afb9a9298a2ffa7d1e15a2ff403d263e287af03da76e3df3a21767d40fa0d55d8b37daa224e61701aecd6259c161fd7f73d19bb3c942ece33ea67c0678332e5fdb83f8098bb0147bd18535691eb1eeae6f637b2cb7c4728128d66660", 0x1000}], 0x1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="eddb4f65"], 0xc8}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)="75432bc197e48f71a2d683ebce869e3809ca36295a4a61d00e1abb0a1cba7384b8e9ae058036ef872298a971ec5547e6aae69c0a25739408845754095af674e202f5906620d1f1afab2b6ce09ee2d958d65f35cbd4281f7b2603418458c3a31ac8b9b5b1d33c3a260ff998f2764ee00964354e1be19bcf558782229bb3546e6ed54eca2bf10d5a2a06ddff6c7954", 0x8e}, {&(0x7f0000000300)="c3b62cacd7392ce826f8e09aa40c1ba59d4079ccad2aeadc0813acb19c3b64e6ba4dae9f6d9b141f97d96ba52232368fc3be44227693c714e891a0699bc8fca355db3740cdd232f171092ac53afc47af64a33c54be735e09669e5d77921e176523e3957108dc9c9ab60913dcd3e78bda39d4e6249def7ca2486106b2c0a12b4ff2121b5da81baa163b6e72c0658a871cbe3e3139846cd09662a9bcfb1dc252628f", 0xa1}, {&(0x7f00000003c0)="7fd78c", 0x3}, {&(0x7f0000000400)="28c8c15a860f6a5ce62c21a9df78ee423b6f69bad03f39c52ba6759cbccce7be2db532f211031e7910d4d16da0f8e98f428856a016adc6c6b833629c038eaf04d09cdd1109", 0x45}, {&(0x7f0000000480)="405834f14fb5d10534c2c6834c6b4186224385da868132f44395161c93773f3866279215f7c6b4425439009551cb5f476a03fba8a708f1aa13edeec37a8d60aa8b560daa8eb637feae7a46f78fc2c79d6169088d9576e14aeb62cb98486f74f18f0183b9b67098ee0fa3f9695b23335dadc705d3ee308f9c077c2880cd87c99f0f4c357b5ec4701d6a7588ba18ef654473d2db", 0x93}, {&(0x7f0000000600)="3bf53d4deca640e245fc3cb79b9e21a9b20357297563b1b37c08738943ca01658ba95898d5f1ad33d1328673f369b4e21e1e164cc1796c22f07f5541c8a552603291373fd6f730136bfb5d1036e73f9350d38cb4536afcdc3947d35b36a17bbab3f3acfcfbdb59ff5bcb46ee22e9be9c3821f125e3c4bceff17eb9b4ed3d76a70ada5f2a37a98642fba7a6f4343585b1ee1393266e6ff2f3ac0b0c8e470d3bfa08389a18dc1b5d0b80101aa63e21b7a1a0e42161cdf827b0dc7c8b2625623210d8d2b202e9b4ccdd8cf28e6fc3339373754dc34052f73a0c25a09d663b", 0xdd}, {&(0x7f0000000700)="697988b3af140ff964ad295af2f0aff6443c4da4b78d6787d5773e7ce74a9bf69edcc28ca7bf49dbada967e966a3bbb26edc5ed816e84996be7d3c0a8acd9092b2ddc99225bd121657b85d32fda2d46703e921eab7ed56d11766a48f4f8f046bec32fbea334c54a6f6d6a4f23145479bc13844f7e0014622268659062ce0fe7a02c294f13eda87bb1a6b8057c70738de6370efc9bf4e3de870facfc5c5ae01eee261eab27f6ad3264cd7abda5eccb565e94549c9e407e9bf07274e1c90f1026d701bc9c6198072106cbce0ddfce70525894ac1f1b8f2c824d138437d", 0xdc}], 0x7}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x100, @private2, 0x8000}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001a40)="68b9e2da5ce66e79458cc82f7b3276571fbdb2894901df6e40ceb025029af8a1a158293c67321bc83260cd4b277600d2f44c570983368110790f126f77fb199dfc5a3e29715f57bd874e7fbfc4403e2880c180c2fc81e1457404806205ebd364030a65496b84751f7026b3da0aae53758856a784a44c3bb9eb69a8809afb228290ff86309d21e48c1f633ef4a44e89b07e5aec0955f08e04c38ef5c422c96cc388bb09c5bb6d820f1bf76dc22f7991200cf9adab2cec8cc3a6a119747fb02de7f6208420c014", 0xc6}, {&(0x7f0000001940)="65388404d0845241fdd01c31155cac583f17177f77a1b9193647bccc12f223ef1727666701dee888979664c32fc63e1afcd1c2fd8e1d22dd7537cd220c771bb60ba36a49cffba2dafbdf51494ed91a85521a0f3cb72c7e8fb9d58ea4a60c5f7e5b74ee47ba3b9985c2baf7348fe2f745be86f3ae5a86d9a5a64f40bd50140d03077ed6a20b6f8febbf9a9121ab6b7d5e24b5ba6f661da7a2097530d60b7a45f29d5f7253b5e217a051af1dd7d30c4a97afa39a24a5a4f2514be24f", 0xbb}, {&(0x7f0000000880)="e96352530f2456ad915eefd89c18e6b7a20a5b6dc8c134e13b8e47ec11c76707e6bc20c0f266f630", 0x28}, {&(0x7f0000001b40)="a6c1b3113f9976c086bd5133e57d5208e3e1f78092829a4b934ab9c74cef203a186521073741db146b6465024b8714d5ef0ef7b8d07717d997df1eb856052a0800060a0afb621ebedded1468efc049734a15ce96561216c6d7308fb2f40668273e1cd50ccc7f430528345c4b3d6cbea3c2f8d2bc5f45d7653017f642dcb6c951ab8e816ccadd98c2d8b731f721e10a05c12dcd822b25141a7e9f69c65d9ce63b1fd576de5f79bc3a1b", 0xa9}, {&(0x7f0000001c00)="d2d748ce99f6779025b109265331ede5bd3c645592be31b67abb13a3c3610d4b56846fca8d164ff29b3eaa65fbcb102578993fa9546585c5ffa2f876c2cb0a3df4a9eb9c1949fb70a43ef1891b3109ff5d62fd0e0ae993", 0x57}, {&(0x7f0000001c80)="ea3d83c6de395a347b12f311462831afbf299b906ca5a86dd3f98d872e32397dec42cc2e46dc49dceea76bb686059356a419080fb2eeb3c9e101df44ff86bc94060c9dbaa98b7bdec133cdbb738c1a17598b810c67a688fcbaf71e76015a5afdb3303a57e1bc9aeb27ec47ff31f06187e47b8a2c04e19d7e698ec0", 0x7b}, {&(0x7f00000008c0)="68b785ef7caf8f98fbf5ed100d77a17390baf4c0283fb90fe0aa79a06a855d944522a6dd7b2e86e83b121e0842e2", 0x2e}, {&(0x7f0000001d00)="845fa465971cf9acd3271fe34451abaa03243690e9", 0x15}, {&(0x7f0000001d40)="f639e436653d16f81788920a1c48e5db472ac1c1a532e9e1fd3158a92597ff1d3f8ee912b699d203a9764c65d67accdf69862e3af567ed0262a6448b9727a7ff6b733fe1f50eeda01949b0d67b", 0x4d}, {&(0x7f0000001dc0)="852a30cae45272c85f63c4c0361098fab8b549d176571c9dcf3f51f084f36da8cbc643839d3ea89eb211e2ca4394294111cd12a6ac066c79b4c7ff04b1d9fb288867f580cdb22690d8e049d3404c23da059dd815f694ddf448477bf31e2dabbb264052690668313c9b4fe0ef2e5068b253599db7abdea780901dcf9b67e59d25feed1718829cd6ae79d1ad3da7a8d0291dc3b6381bb3a6d70cfa166c2e228d5063503add4eae6e3d1aad9301b0d488b84f9520f29fa3978310333b2dd2c5d02d9ea1c865a3301aaebbef40c3023d2aefe108578f44d158fefb7bd1c26f8234e5595f6460f015138f3dc53e6dbca85114ad037ca6cb1a19f629b5d7", 0xfb}], 0xa, &(0x7f0000002980)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts={{0x48, 0x29, 0x37, {0x87, 0x5, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x0, [0xf]}}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x14}}}}, @hopopts={{0x88, 0x29, 0x36, {0x0, 0xd, '\x00', [@generic={0xa1, 0x11, "c9361476c1d068099a6291f6d96f9abfd6"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x7, [0x80000001, 0x4]}}, @generic={0x7, 0x3a, "fade14e330a58a203b3ab89375b05a074651f829c80eb53dab4f6bceaf3552b9a4d998e24e53f2460f882e21075b1d728de3cac5cdbbbd3eac19"}, @padn={0x1, 0x1, [0x0]}, @pad1]}}}, @dstopts={{0x1a8, 0x29, 0x37, {0x4, 0x32, '\x00', [@pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x1ee3, [0x1, 0x9, 0x3, 0xb, 0x3]}}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x8, 0xf8, "ad1a1afe6cee950051da6e5c8ac019e83eb6bbe4d3a89d407a4da2ca8c89ab0a3e0187ae7f521d4fcb7353a857099ab9fece728a4055e2efd3c6d0f07080baf30a457208531977f614bacf64443695643dd87821e2b47e9bd9c8d33ab1efd18f842d62eb075434f1a5f6f94e84e104f16302551aa247535afc691d354f5e336c3c3294c109cd1199784be90502c253a296514e80f9ac9e57aa37f29d982bc5b01cfe768def4600f9933183d879d3639f37e40528ba7fc19d8954c5ebbf25b4c5cd1f1ff03678ade03a66b29d617fb391c46f67f3074fd709b82ee9f66d8a4ff5d8adae45295951de0dbed1edc4a5996a2c36c9ea3cad5865"}, @generic={0x3, 0x3b, "d27495843c5900b3d64156ae1c48b8d9e02323b8c22efd9ddc19ad0c8560092eaf6ae801589c7c6b2fe2da16eb6fa38b588a0f5dca114e623acfb1"}]}}}], 0x2d0}}, {{&(0x7f0000002100)={0xa, 0x4e23, 0xd25e, @dev={0xfe, 0x80, '\x00', 0xb}, 0x6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000002140)="3ccde7c1f776c51c1a6045c04bd6a25a45393497aead68e189d6e6c70608ad8ceb87d5e7b2", 0x25}, {&(0x7f0000002180)="4f8603536ce4ccea658d1fd1686979a38b60f6e1d6fa5807df732006a7e144df406c5ada1270a1619a8efdacb43df99aa0670f099e8f0794a16b455d8d1bc6c1497e34a7c610e472ac1d649c5d65cde1098804fbb53e10d561a6159417183872e8386ea32707222b17c6da49a3aae227748c318952210c4cc64e4c753ecb2d8d1083cd1f61060aaa28f951304c70", 0x8e}], 0x2}}, {{&(0x7f0000002280)={0xa, 0x4e24, 0x4, @local, 0x4}, 0x1c, &(0x7f0000002580)=[{&(0x7f00000022c0)="01a64be3c7340dc887eb3b42284baf63f3b9ab55c49b06b0e263e11c20d7a1a40c05674784a968cadc2375fb462422d7a921963e40eff4bc28454482e3dbaa126ea4bb5cc086658ff9d6", 0x4a}, {&(0x7f0000002340)="18861b0441fb0d9ed8c7c85b23d1c99ae80430f78e95431719b80aa45d09204872d6a0ca2549c9ed0fe77bf8b668c9cdb389280f060b5c19eb20c0d86e94179dcb30767cf65fccff941b7e3e3d774b2531dbe350cda7e3ec01de1f39f31b7853195670e7877fc7ecfb125779e17314e53273539756ba71e509d694b160402b2338441d2e7247ce6c29a3250199", 0x8d}, {&(0x7f0000002400)="6f95619947c73e8af574a0b1e700813946081bfddf3d4eff9a615e3aa00e18440ad82f6fe5c5ec6a84f094d64275022c71e90293b5dae980059d8075151913bb4e2e74c24d8554e06938bbe01c5dbf310407472f2d41a1ff171f1924e469c7f46fed308ce7cce6aa0e9f", 0x6a}, {&(0x7f0000002480)="ea1e1bc62afd05b4b4438be18ec0ad6c63332053e542d942ed1477780cb2d8ca0700c26dcbecd488da23f83b1ecf858936002092cb94e6ce88eb103bf91213e799939f5769de4e4cd4f21d1162e6ddf3cedad8e8a1d2d0c22f9463ad41845fc7145d132b39886f3b557cca9ea740ad887a1fccc0fe235a4d159e9955648bfa05416af6bc2dcc5b77c9da778dea1a73f1cc9b0535a9e57ec801447a20669cc0a1006f0b08fe9df53ab30d9c17113a62fb663529ff56ec8da9fda2ea5dff2e4044291313f948e905d08bda81819c2806be7ae3a554790c2eab7cb43223b07fa8e9a1", 0xe1}], 0x4, &(0x7f00000025c0)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x2, 0x13, '\x00', [@generic={0x3, 0x78, "98a916ace8af8c7ed0b6d9fc8497b2b07d28ee15b9e728d86411d7f13ccf5ecd6105faf2fa857d25436974b57d0dc8da04f82257586a7c6f4969d78309a9947982a05cbc2d495bf35f04a514cbcfce6c2b769da83091ae46185c3117047e6d9582a94b9db7a9c291a260c949a41702ad80d05c4262cf0f1d"}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x23}}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}], 0xe8}}], 0x5, 0x80040) 2.335188855s ago: executing program 3 (id=954): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f}}], 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100182000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000000800000000005f"], 0x0, 0x4f}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$tun(r4, &(0x7f0000000300)={@val={0x0, 0x88e7}, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@x25={0x805, {0x2, 0x7, 0x1, "ed61617933769dde8f569bf76915ce43aaee5113a1096f31e714404f1f9ada4b5ad3b518bfc5dc6738714eaa0ee471c53f9f176979fbb44f1498229892f9ce8f7700ceb9f0a33d1036b15ca9e3eace02aadb884c82c9c293ced7dc813def380cdbc52511912b451634b0bfcbece416804b34abed4bc2a8b1a8449053ed174f4f5fced89604fe3c841c437bb40c4a6a14ac0b0a1cd912fef0e51b1e63eb77dcd61b00"/172}}}}}, 0xc5) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0xdb, 0x8784}, 0x90) setsockopt$inet6_buf(r2, 0x29, 0x2e, &(0x7f0000000540), 0x0) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r6, 0x40445637, &(0x7f0000000100)={0x81, "a8dc89fafde66e820a7bd31a42df473af053d20d81a24a456539fa288a93e1a1", 0x20, 0x6, 0x74, 0x2, 0x3}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.241463719s ago: executing program 4 (id=955): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x3, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0x8, 0x3906, 0xfffc, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x7279, &(0x7f00000000c0)={0x0, 0xfe67, 0x200, 0xfffffffc, 0x30f}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000280)=0x8, 0x0, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x0, 0x18, 0x2, "8bbd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.240890141s ago: executing program 1 (id=956): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x3) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 1.051446546s ago: executing program 1 (id=957): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=""/22, 0x16) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x65b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0xb1, 0x7fffffffffffffff, 0x3, 0x4000000000001, 0x10001, 0x3, 0x200, 0x2}, &(0x7f0000000280)={0xe000000000000, 0x100, 0x3, 0x1, 0x8000000000000bc, 0x8, 0x6, 0x6}, &(0x7f0000000300)={0x7075, 0x2, 0x7, 0x4, 0xe, 0x100000001, 0xff, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x401]}, 0x8}) syz_emit_ethernet(0x96, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x60, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x1, "000000050000"}]}}}}}}, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[0x1], [], 0x0, 0x0, 0x8, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.050385322s ago: executing program 3 (id=958): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180c0000000000405ccfd936860da347000c0000000c00"], 0x0, 0x28}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000001480)=[{&(0x7f0000000140)="ec", 0x1}], 0x1, 0x9, 0x26d0d5f1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x20048005) syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180), 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009", 0x3, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'pcl818\x00', [0x9e1, 0x2566, 0xfffffffe, 0x3, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x2, 0x5, 0x344, 0x1, 0x7, 0x1, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400007, 0x1]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000f3987015d3fbe308000500000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x5}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x101301) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) 1.063834ms ago: executing program 1 (id=959): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0910300ffffffffffff08021100000050505050505457f99eb3c401010003005c0200000600cd000000000004008e00b6"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 3 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) accept4(r2, 0x0, &(0x7f00000002c0), 0x80800) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@newtfilter={0x878, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0x7, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x8002a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x9, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x481, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x7, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0x85, 0x40000080, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x21, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0xffffffff, 0x307, 0xda, 0x1ff, 0xa, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x2, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x1, 0x7fffffff, 0x4, 0xd98, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x800, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x4, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) cachestat(r4, &(0x7f0000000040), 0x0, 0x0) getitimer(0x0, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): avc: denied { watch } for pid=6531 comm="syz.1.145" path="/25/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 129.493100][ T30] audit: type=1326 audit(1753121772.557:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a08f8e9a9 code=0x7ffc0000 [ 129.601688][ T93] usb 1-1: Using ep0 maxpacket: 8 [ 129.724248][ T30] audit: type=1326 audit(1753121772.557:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a08f8e9a9 code=0x7ffc0000 [ 129.886097][ T93] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 130.311663][ T93] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.406714][ T30] audit: type=1326 audit(1753121772.557:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a08f8e9a9 code=0x7ffc0000 [ 130.430967][ T30] audit: type=1326 audit(1753121772.557:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a08f8e9a9 code=0x7ffc0000 [ 130.454725][ T30] audit: type=1326 audit(1753121772.557:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8a08f8e9a9 code=0x7ffc0000 [ 130.478123][ T30] audit: type=1326 audit(1753121772.557:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a08f8e9a9 code=0x7ffc0000 [ 130.517860][ T93] pvrusb2: Hardware description: Terratec Grabster AV400 [ 130.535734][ T93] pvrusb2: ********** [ 130.541236][ T93] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 130.560705][ T93] pvrusb2: Important functionality might not be entirely working. [ 130.683228][ T93] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 130.718966][ T55] usb 5-1: USB disconnect, device number 8 [ 131.024111][ T93] pvrusb2: ********** [ 131.060739][ T2334] pvrusb2: Invalid write control endpoint [ 131.179026][ T6556] SELinux: unknown common  [ 131.183745][ T6556] SELinux: failed to load policy [ 131.761473][ T2334] pvrusb2: Invalid write control endpoint [ 131.784115][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 131.796747][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 131.806244][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 131.985585][ T6571] FAULT_INJECTION: forcing a failure. [ 131.985585][ T6571] name failslab, interval 1, probability 0, space 0, times 1 [ 131.998544][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.4.154 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 131.998567][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.998577][ T6571] Call Trace: [ 131.998583][ T6571] [ 131.998590][ T6571] dump_stack_lvl+0x16c/0x1f0 [ 131.998625][ T6571] should_fail_ex+0x512/0x640 [ 131.998651][ T6571] ? __kvmalloc_node_noprof+0x124/0x620 [ 131.998680][ T6571] should_failslab+0xc2/0x120 [ 131.998697][ T6571] __kvmalloc_node_noprof+0x137/0x620 [ 131.998723][ T6571] ? hhf_init+0x600/0x8c0 [ 131.998744][ T6571] ? hhf_init+0x600/0x8c0 [ 131.998758][ T6571] hhf_init+0x600/0x8c0 [ 131.998771][ T6571] ? __pfx_hhf_init+0x10/0x10 [ 131.998789][ T6571] qdisc_create+0x457/0xfc0 [ 131.998817][ T6571] tc_modify_qdisc+0x11d8/0x2170 [ 131.998846][ T6571] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 131.998867][ T6571] ? __mutex_lock+0x1ca/0xb90 [ 131.998907][ T6571] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 131.998932][ T6571] rtnetlink_rcv_msg+0x3c9/0xe90 [ 131.998954][ T6571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.998971][ T6571] ? __lock_acquire+0xb8a/0x1c90 [ 131.999000][ T6571] netlink_rcv_skb+0x155/0x420 [ 131.999019][ T6571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.999038][ T6571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.999056][ T6571] ? rcu_is_watching+0x12/0xc0 [ 131.999096][ T6571] netlink_unicast+0x58d/0x850 [ 131.999132][ T6571] ? __pfx_netlink_unicast+0x10/0x10 [ 131.999152][ T6571] ? selinux_netlink_send+0x578/0x830 [ 131.999179][ T6571] ? security_netlink_send+0x1e3/0x210 [ 131.999207][ T6571] netlink_sendmsg+0x8d1/0xdd0 [ 131.999231][ T6571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.999261][ T6571] ____sys_sendmsg+0xa95/0xc70 [ 131.999284][ T6571] ? copy_msghdr_from_user+0x10a/0x160 [ 131.999311][ T6571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.999346][ T6571] ___sys_sendmsg+0x134/0x1d0 [ 131.999374][ T6571] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.999399][ T6571] ? __lock_acquire+0x622/0x1c90 [ 131.999450][ T6571] __sys_sendmsg+0x16d/0x220 [ 131.999467][ T6571] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.999501][ T6571] do_syscall_64+0xcd/0x4c0 [ 131.999523][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.999541][ T6571] RIP: 0033:0x7f8a08f8e9a9 [ 131.999556][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.999571][ T6571] RSP: 002b:00007f8a09e1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.999588][ T6571] RAX: ffffffffffffffda RBX: 00007f8a091b6080 RCX: 00007f8a08f8e9a9 [ 131.999599][ T6571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 131.999609][ T6571] RBP: 00007f8a09e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 131.999619][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.999628][ T6571] R13: 0000000000000000 R14: 00007f8a091b6080 R15: 00007fffb8694598 [ 131.999653][ T6571] [ 132.289845][ T2334] pvrusb2: Device being rendered inoperable [ 132.327573][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 132.544426][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 132.545260][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.556632][ T2334] pvrusb2: Attached sub-driver cx25840 [ 132.591442][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 132.601583][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 132.698441][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.830494][ T6588] qrtr: Invalid version 0 [ 134.669776][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 134.669802][ T30] audit: type=1400 audit(1753121777.677:385): avc: denied { watch } for pid=6585 comm="syz.2.158" path="/32/bus/file1" dev="overlay" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 135.322584][ T30] audit: type=1400 audit(1753121777.677:386): avc: denied { watch_sb watch_reads } for pid=6585 comm="syz.2.158" path="/32/bus/file1" dev="overlay" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.456327][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 135.500991][ T30] audit: type=1400 audit(1753121778.867:387): avc: denied { read write } for pid=6592 comm="syz.4.159" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.543693][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 135.591160][ T30] audit: type=1400 audit(1753121778.867:388): avc: denied { open } for pid=6592 comm="syz.4.159" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.035428][ T30] audit: type=1400 audit(1753121779.177:389): avc: denied { connect } for pid=6597 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.037905][ T5947] usb 1-1: USB disconnect, device number 5 [ 136.088917][ T30] audit: type=1400 audit(1753121779.207:390): avc: denied { read } for pid=6597 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.140359][ T30] audit: type=1400 audit(1753121779.457:391): avc: denied { write } for pid=6600 comm="syz.2.164" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.194838][ T6603] wg1 speed is unknown, defaulting to 1000 [ 136.592742][ T6611] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.466740][ T5921] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.681737][ T30] audit: type=1400 audit(1753121781.927:392): avc: denied { shutdown } for pid=6624 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.887315][ T5921] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.926375][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.972570][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 138.991745][ T5921] usb 2-1: Product: syz [ 138.995955][ T5921] usb 2-1: Manufacturer: syz [ 139.000550][ T5921] usb 2-1: SerialNumber: syz [ 139.081831][ T5912] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.109622][ T5921] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.126689][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.269155][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 139.280289][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.305527][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 139.319072][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 140.212870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.672080][ T5912] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 140.833471][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.845813][ T5912] usb 1-1: Product: syz [ 140.855361][ T5912] usb 1-1: Manufacturer: syz [ 140.867974][ T5912] usb 1-1: SerialNumber: syz [ 141.364583][ T5912] usb 1-1: config 0 descriptor?? [ 141.558389][ T10] usb 2-1: Service connection timeout for: 257 [ 141.569008][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 141.630863][ T10] ath9k_htc: Failed to initialize the device [ 141.645057][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 141.838923][ T6680] wg1 speed is unknown, defaulting to 1000 [ 141.870630][ T5912] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 141.892840][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 142.863933][ T6682] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 142.903436][ T6682] netlink: 'syz.2.180': attribute type 2 has an invalid length. [ 142.906570][ T5921] usb 2-1: USB disconnect, device number 6 [ 143.056564][ T5912] usb 1-1: USB disconnect, device number 6 [ 144.114468][ T30] audit: type=1400 audit(1753121787.497:393): avc: denied { append } for pid=6684 comm="syz.1.181" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 144.225420][ T6706] Invalid ELF header magic: != ELF [ 145.573222][ T6708] netlink: 200 bytes leftover after parsing attributes in process `syz.1.187'. [ 145.989279][ T5921] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 146.794412][ T30] audit: type=1400 audit(1753121789.707:394): avc: denied { setopt } for pid=6713 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.944289][ T5921] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 147.099438][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.108272][ T30] audit: type=1400 audit(1753121790.217:395): avc: denied { read } for pid=6715 comm="syz.0.192" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 147.136002][ T5921] usb 4-1: config 0 descriptor?? [ 147.166205][ T5921] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 147.178257][ T30] audit: type=1400 audit(1753121790.217:396): avc: denied { open } for pid=6715 comm="syz.0.192" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 147.427068][ T30] audit: type=1400 audit(1753121790.527:397): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 147.451855][ T30] audit: type=1400 audit(1753121790.627:398): avc: denied { ioctl } for pid=6730 comm="syz.1.193" path="socket:[10923]" dev="sockfs" ino=10923 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 147.553973][ T6735] syz.1.194: attempt to access beyond end of device [ 147.553973][ T6735] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 147.567510][ T6735] EXT4-fs (nbd1): unable to read superblock [ 147.691281][ T6736] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 147.699069][ T6736] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.194'. [ 147.732892][ T6736] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 147.740650][ T6736] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.194'. [ 147.915260][ T6724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.922321][ T6724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.940129][ T6724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.976620][ T6724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.987955][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.061103][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.240982][ T6724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.261058][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 148.285653][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 148.307112][ T6724] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 148.314407][ T6724] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 148.334286][ T6724] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 148.355454][ T6724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.365056][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 148.375540][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 148.476238][ T6748] input: syz1 as /devices/virtual/input/input7 [ 148.857883][ T30] audit: type=1400 audit(1753121792.187:399): avc: denied { read } for pid=5188 comm="acpid" name="event4" dev="devtmpfs" ino=2848 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.124670][ T30] audit: type=1400 audit(1753121792.187:400): avc: denied { open } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2848 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.331818][ T30] audit: type=1400 audit(1753121792.187:401): avc: denied { ioctl } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2848 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.029791][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.051770][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.174936][ T30] audit: type=1400 audit(1753121793.557:402): avc: denied { bind } for pid=6768 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.295146][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.371906][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 150.381963][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.636039][ T6777] FAULT_INJECTION: forcing a failure. [ 150.636039][ T6777] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 150.649642][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.2.204 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 150.649663][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.649672][ T6777] Call Trace: [ 150.649678][ T6777] [ 150.649685][ T6777] dump_stack_lvl+0x16c/0x1f0 [ 150.649715][ T6777] should_fail_ex+0x512/0x640 [ 150.649748][ T6777] should_fail_alloc_page+0xe7/0x130 [ 150.649767][ T6777] prepare_alloc_pages+0x3c2/0x610 [ 150.649790][ T6777] ? rcu_is_watching+0x12/0xc0 [ 150.649815][ T6777] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 150.649852][ T6777] ? __pfx___might_resched+0x10/0x10 [ 150.649878][ T6777] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 150.649903][ T6777] ? __lock_acquire+0x622/0x1c90 [ 150.649929][ T6777] ? __lock_acquire+0x622/0x1c90 [ 150.649947][ T6777] ? __lock_acquire+0x622/0x1c90 [ 150.649963][ T6777] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.649985][ T6777] ? policy_nodemask+0xea/0x4e0 [ 150.650005][ T6777] alloc_pages_mpol+0x1fb/0x550 [ 150.650024][ T6777] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 150.650049][ T6777] folio_alloc_mpol_noprof+0x36/0x2f0 [ 150.650077][ T6777] vma_alloc_folio_noprof+0xed/0x1e0 [ 150.650096][ T6777] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 150.650115][ T6777] ? find_held_lock+0x2b/0x80 [ 150.650137][ T6777] ? __handle_mm_fault+0x1092/0x5490 [ 150.650165][ T6777] __handle_mm_fault+0x2f21/0x5490 [ 150.650196][ T6777] ? __pfx___handle_mm_fault+0x10/0x10 [ 150.650217][ T6777] ? __pfx_mt_find+0x10/0x10 [ 150.650251][ T6777] ? find_vma+0xbf/0x140 [ 150.650269][ T6777] ? __pfx_find_vma+0x10/0x10 [ 150.650290][ T6777] handle_mm_fault+0x589/0xd10 [ 150.650314][ T6777] ? __pkru_allows_pkey+0x51/0xb0 [ 150.650341][ T6777] do_user_addr_fault+0x7a6/0x1370 [ 150.650370][ T6777] ? rcu_is_watching+0x12/0xc0 [ 150.650395][ T6777] exc_page_fault+0x5c/0xb0 [ 150.650421][ T6777] asm_exc_page_fault+0x26/0x30 [ 150.650439][ T6777] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 150.650460][ T6777] Code: c9 75 f6 e9 12 1e 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 150.650477][ T6777] RSP: 0018:ffffc9000453fcd0 EFLAGS: 00050246 [ 150.650493][ T6777] RAX: 0000000000000000 RBX: 000000007f4c9000 RCX: 0000000000000040 [ 150.650503][ T6777] RDX: ffff888028b8c880 RSI: ffffffff855e39b6 RDI: 0000200000b37000 [ 150.650514][ T6777] RBP: 0000000000001000 R08: a23edf14cf8df726 R09: 0000000000000000 [ 150.650525][ T6777] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888028b8c880 [ 150.650535][ T6777] R13: 00007ffffffff000 R14: ffffed1005171910 R15: 0000200000b36040 [ 150.650555][ T6777] ? read_zero+0xc6/0x250 [ 150.650577][ T6777] read_zero+0xd6/0x250 [ 150.650596][ T6777] ? __pfx_read_zero+0x10/0x10 [ 150.650615][ T6777] vfs_read+0x1e1/0xc60 [ 150.650646][ T6777] ? __pfx_vfs_read+0x10/0x10 [ 150.650669][ T6777] ? find_held_lock+0x2b/0x80 [ 150.650691][ T6777] ? __fget_files+0x204/0x3c0 [ 150.650711][ T6777] ? __fget_files+0x20e/0x3c0 [ 150.650734][ T6777] ksys_read+0x12a/0x250 [ 150.650759][ T6777] ? __pfx_ksys_read+0x10/0x10 [ 150.650791][ T6777] do_syscall_64+0xcd/0x4c0 [ 150.650810][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.650826][ T6777] RIP: 0033:0x7f689e58e9a9 [ 150.650840][ T6777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.650855][ T6777] RSP: 002b:00007f689c3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.650870][ T6777] RAX: ffffffffffffffda RBX: 00007f689e7b6160 RCX: 00007f689e58e9a9 [ 150.650880][ T6777] RDX: 00000000ffffff96 RSI: 0000200000000040 RDI: 0000000000000007 [ 150.650891][ T6777] RBP: 00007f689c3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 150.650901][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.650910][ T6777] R13: 0000000000000000 R14: 00007f689e7b6160 R15: 00007fff4d1fd478 [ 150.650935][ T6777] [ 151.039820][ T5905] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 151.065706][ T5962] usb 4-1: USB disconnect, device number 7 [ 151.261772][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 151.263780][ T30] audit: type=1400 audit(1753121794.637:403): avc: denied { watch_reads } for pid=6784 comm="syz.3.211" path="/39" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.337787][ T5905] usb 5-1: config 0 has an invalid interface number: 162 but max is 0 [ 151.347162][ T5905] usb 5-1: config 0 has no interface number 0 [ 151.357663][ T5905] usb 5-1: config 0 interface 162 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 151.401972][ T5905] usb 5-1: config 0 interface 162 has no altsetting 0 [ 151.559577][ T5905] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 151.560504][ T30] audit: type=1400 audit(1753121794.637:404): avc: denied { read } for pid=6781 comm="syz.0.208" path="socket:[10120]" dev="sockfs" ino=10120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.593908][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.593969][ T5905] usb 5-1: Product: syz [ 151.594107][ T5905] usb 5-1: Manufacturer: syz [ 151.594158][ T5905] usb 5-1: SerialNumber: syz [ 151.626203][ T5905] usb 5-1: config 0 descriptor?? [ 152.849481][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.855784][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.861894][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.867984][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 152.879637][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 152.891734][ T5905] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 153.461307][ T5905] gspca_topro: reg_w err -71 [ 153.518304][ T5905] gspca_topro: Sensor soi763a [ 153.679693][ T5905] usb 5-1: USB disconnect, device number 9 [ 154.931647][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 154.937764][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.941605][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.943894][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.949757][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 155.071682][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 155.117648][ T30] audit: type=1400 audit(1753121798.497:405): avc: denied { create } for pid=6823 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 155.295836][ T24] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 155.315321][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.338580][ T24] usb 5-1: Product: syz [ 155.348600][ T24] usb 5-1: Manufacturer: syz [ 155.359206][ T24] usb 5-1: SerialNumber: syz [ 155.463771][ T24] usb 5-1: config 0 descriptor?? [ 157.684435][ T5912] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.021869][ T5912] usb 2-1: device descriptor read/64, error -71 [ 158.044937][ T6841] syz.4.219 (6841) used greatest stack depth: 17320 bytes left [ 158.053513][ T5962] usb 5-1: USB disconnect, device number 10 [ 158.252326][ T30] audit: type=1400 audit(1753121801.627:406): avc: denied { setattr } for pid=6854 comm="syz.0.228" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 158.641620][ T5912] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 159.102720][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 159.249354][ T5912] usb 2-1: device descriptor read/64, error -71 [ 159.782165][ T30] audit: type=1400 audit(1753121803.167:407): avc: denied { bind } for pid=6861 comm="syz.2.230" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.814085][ T30] audit: type=1400 audit(1753121803.167:408): avc: denied { name_bind } for pid=6861 comm="syz.2.230" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 159.898339][ T5912] usb usb2-port1: attempt power cycle [ 160.128721][ T30] audit: type=1400 audit(1753121803.167:409): avc: denied { node_bind } for pid=6861 comm="syz.2.230" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 160.636142][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.641666][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 160.670075][ T5962] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 161.063910][ T5912] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 161.192626][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 161.207261][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.222159][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 161.233453][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 161.252282][ T5962] usb 4-1: Using ep0 maxpacket: 8 [ 161.261866][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 161.261983][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.271227][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.271252][ T10] usb 1-1: Product: syz [ 161.271266][ T10] usb 1-1: Manufacturer: syz [ 161.288555][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.307438][ T10] usb 1-1: SerialNumber: syz [ 161.313133][ T5912] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.317862][ T5962] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 161.333112][ T10] usb 1-1: config 0 descriptor?? [ 161.336101][ T5962] usb 4-1: config 0 has no interface number 0 [ 161.342960][ T5912] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.350241][ T5962] usb 4-1: config 0 interface 34 altsetting 3 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 161.371641][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.377123][ T5962] usb 4-1: config 0 interface 34 has no altsetting 0 [ 161.387480][ T24] usb 3-1: config 0 descriptor?? [ 161.389380][ T5912] usb 2-1: Product: syz [ 161.395611][ T5962] usb 4-1: New USB device found, idVendor=0403, idProduct=d071, bcdDevice= 0.1a [ 161.406802][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.414225][ T5912] usb 2-1: Manufacturer: syz [ 161.435382][ T5912] usb 2-1: SerialNumber: syz [ 161.447470][ T5962] usb 4-1: config 0 descriptor?? [ 161.458588][ T5912] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 161.459864][ T5962] ftdi_sio 4-1:0.34: FTDI USB Serial Device converter detected [ 161.475600][ T5843] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 161.643024][ T10] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 161.647041][ T5962] usb 4-1: Detected SIO [ 161.669440][ T24] usb 3-1: can't set config #0, error -71 [ 161.970491][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.983467][ T30] audit: type=1400 audit(1753121805.347:410): avc: denied { shutdown } for pid=6881 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.010372][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.055363][ T24] usb 3-1: USB disconnect, device number 7 [ 162.066507][ T5962] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 162.078940][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 162.093371][ T5947] usb 1-1: USB disconnect, device number 7 [ 162.708841][ T30] audit: type=1400 audit(1753121806.087:411): avc: denied { write } for pid=6908 comm="syz.0.242" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 163.011801][ T5843] usb 2-1: Service connection timeout for: 256 [ 163.026557][ T5843] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 163.057593][ T6917] overlayfs: missing 'workdir' [ 163.061943][ T5843] ath9k_htc: Failed to initialize the device [ 163.085709][ T5843] usb 2-1: ath9k_htc: USB layer deinitialized [ 163.199361][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'. [ 163.270664][ T6923] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 163.293655][ T6923] FAULT_INJECTION: forcing a failure. [ 163.293655][ T6923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.309656][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.2.245 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 163.309681][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.309692][ T6923] Call Trace: [ 163.309698][ T6923] [ 163.309705][ T6923] dump_stack_lvl+0x16c/0x1f0 [ 163.309739][ T6923] should_fail_ex+0x512/0x640 [ 163.309770][ T6923] should_fail_alloc_page+0xe7/0x130 [ 163.309790][ T6923] prepare_alloc_pages+0x3c2/0x610 [ 163.309816][ T6923] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 163.309843][ T6923] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 163.309868][ T6923] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.309894][ T6923] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 163.309919][ T6923] ? stack_depot_save_flags+0x3e0/0xa40 [ 163.309954][ T6923] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 163.309979][ T6923] ? __kasan_slab_alloc+0x89/0x90 [ 163.310005][ T6923] ? security_inode_alloc+0x3b/0x2b0 [ 163.310031][ T6923] ? alloc_inode+0x86/0x240 [ 163.310050][ T6923] ? new_inode+0x22/0x1c0 [ 163.310068][ T6923] ? debugfs_create_dir+0xdd/0x5f0 [ 163.310084][ T6923] ? ieee80211_debugfs_recreate_netdev+0x1d1/0x17e0 [ 163.310111][ T6923] ? drv_remove_interface+0x2bf/0x640 [ 163.310133][ T6923] ? ieee80211_do_stop+0x18a1/0x2520 [ 163.310158][ T6923] ? ieee80211_stop+0x165/0x300 [ 163.310184][ T6923] ? register_lock_class+0x41/0x4c0 [ 163.310199][ T6923] ? netlink_rcv_skb+0x155/0x420 [ 163.310220][ T6923] ? netlink_sendmsg+0x8d1/0xdd0 [ 163.310243][ T6923] ? __lock_acquire+0xb8a/0x1c90 [ 163.310257][ T6923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.310279][ T6923] ? policy_nodemask+0xea/0x4e0 [ 163.310299][ T6923] alloc_pages_mpol+0x1fb/0x550 [ 163.310318][ T6923] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 163.310336][ T6923] ? find_held_lock+0x2b/0x80 [ 163.310363][ T6923] alloc_pages_noprof+0x131/0x390 [ 163.310381][ T6923] get_free_pages_noprof+0x10/0xb0 [ 163.310399][ T6923] inode_doinit_with_dentry+0x8d6/0x12e0 [ 163.310434][ T6923] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 163.310462][ T6923] ? new_inode+0x15a/0x1c0 [ 163.310487][ T6923] selinux_d_instantiate+0x26/0x30 [ 163.310513][ T6923] security_d_instantiate+0x142/0x1a0 [ 163.310535][ T6923] d_instantiate+0x5c/0x90 [ 163.310556][ T6923] debugfs_create_dir+0x1b5/0x5f0 [ 163.310576][ T6923] ieee80211_debugfs_recreate_netdev+0x1d1/0x17e0 [ 163.310605][ T6923] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 163.310643][ T6923] ? __pfx___might_resched+0x10/0x10 [ 163.310672][ T6923] drv_remove_interface+0x2bf/0x640 [ 163.310698][ T6923] ieee80211_do_stop+0x18a1/0x2520 [ 163.310736][ T6923] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 163.310767][ T6923] ? do_raw_spin_lock+0x12c/0x2b0 [ 163.310797][ T6923] ? mark_held_locks+0x49/0x80 [ 163.310826][ T6923] ? __pfx_ieee80211_stop+0x10/0x10 [ 163.310852][ T6923] ieee80211_stop+0x165/0x300 [ 163.310879][ T6923] ? __pfx_ieee80211_stop+0x10/0x10 [ 163.310903][ T6923] __dev_close_many+0x29b/0x770 [ 163.310934][ T6923] ? __pfx___dev_close_many+0x10/0x10 [ 163.310964][ T6923] __dev_change_flags+0x4d8/0x720 [ 163.310995][ T6923] ? __pfx___dev_change_flags+0x10/0x10 [ 163.311021][ T6923] ? __pfx___schedule+0x10/0x10 [ 163.311046][ T6923] ? __pfx_validate_linkmsg+0x10/0x10 [ 163.311066][ T6923] netif_change_flags+0x8d/0x160 [ 163.311103][ T6923] do_setlink.constprop.0+0xb53/0x4380 [ 163.311130][ T6923] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 163.311148][ T6923] ? __wake_up_klogd.part.0+0x99/0xf0 [ 163.311168][ T6923] ? vprintk_emit+0x1e6/0x6d0 [ 163.311191][ T6923] ? __lock_acquire+0xb8a/0x1c90 [ 163.311210][ T6923] ? find_held_lock+0x2b/0x80 [ 163.311236][ T6923] ? __mutex_trylock_common+0xe9/0x250 [ 163.311254][ T6923] ? __pfx___mutex_trylock_common+0x10/0x10 [ 163.311274][ T6923] ? __pfx___might_resched+0x10/0x10 [ 163.311297][ T6923] ? rcu_is_watching+0x12/0xc0 [ 163.311319][ T6923] ? trace_contention_end+0xdd/0x130 [ 163.311337][ T6923] ? __mutex_lock+0x1ca/0xb90 [ 163.311356][ T6923] ? rtnl_newlink+0x600/0x2000 [ 163.311375][ T6923] ? __pfx___mutex_lock+0x10/0x10 [ 163.311392][ T6923] ? cap_capable+0xb3/0x250 [ 163.311430][ T6923] rtnl_newlink+0x1446/0x2000 [ 163.311456][ T6923] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.311472][ T6923] ? find_held_lock+0x2b/0x80 [ 163.311494][ T6923] ? avc_has_perm_noaudit+0x117/0x3b0 [ 163.311520][ T6923] ? avc_has_perm_noaudit+0x149/0x3b0 [ 163.311546][ T6923] ? __lock_acquire+0x622/0x1c90 [ 163.311574][ T6923] ? find_held_lock+0x2b/0x80 [ 163.311594][ T6923] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.311610][ T6923] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.311624][ T6923] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 163.311649][ T6923] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.311668][ T6923] rtnetlink_rcv_msg+0x95e/0xe90 [ 163.311688][ T6923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.311712][ T6923] ? ref_tracker_free+0x37c/0x830 [ 163.311732][ T6923] netlink_rcv_skb+0x155/0x420 [ 163.311752][ T6923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.311772][ T6923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.311803][ T6923] ? netlink_deliver_tap+0x1ae/0xd30 [ 163.311827][ T6923] netlink_unicast+0x58d/0x850 [ 163.311851][ T6923] ? __pfx_netlink_unicast+0x10/0x10 [ 163.311868][ T6923] ? __build_skb_around+0x278/0x3b0 [ 163.311911][ T6923] netlink_sendmsg+0x8d1/0xdd0 [ 163.311937][ T6923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.311967][ T6923] ____sys_sendmsg+0xa95/0xc70 [ 163.311989][ T6923] ? copy_msghdr_from_user+0x10a/0x160 [ 163.312016][ T6923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.312050][ T6923] ___sys_sendmsg+0x134/0x1d0 [ 163.312080][ T6923] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.312105][ T6923] ? __lock_acquire+0x622/0x1c90 [ 163.312154][ T6923] __sys_sendmsg+0x16d/0x220 [ 163.312172][ T6923] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.312206][ T6923] do_syscall_64+0xcd/0x4c0 [ 163.312226][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.312244][ T6923] RIP: 0033:0x7f689e58e9a9 [ 163.312258][ T6923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.312274][ T6923] RSP: 002b:00007f689f31c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.312292][ T6923] RAX: ffffffffffffffda RBX: 00007f689e7b5fa0 RCX: 00007f689e58e9a9 [ 163.312303][ T6923] RDX: 0000000000000110 RSI: 00002000000000c0 RDI: 0000000000000003 [ 163.312313][ T6923] RBP: 00007f689f31c090 R08: 0000000000000000 R09: 0000000000000000 [ 163.312323][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.312332][ T6923] R13: 0000000000000000 R14: 00007f689e7b5fa0 R15: 00007fff4d1fd478 [ 163.312357][ T6923] [ 163.943104][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.004393][ T6923] team0: Port device wlan1 added [ 164.327179][ T5962] usb 2-1: USB disconnect, device number 10 [ 164.528790][ T5843] usb 4-1: USB disconnect, device number 8 [ 165.381259][ T5843] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 165.439385][ T5843] ftdi_sio 4-1:0.34: device disconnected [ 165.653880][ T6941] process 'syz.2.249' launched '/dev/fd/5' with NULL argv: empty string added [ 165.686504][ T30] audit: type=1400 audit(1753121809.047:412): avc: denied { execute_no_trans } for pid=6933 comm="syz.2.249" path=2F6D656D66643A5B0BDB58AE5B1AA9202864656C6574656429 dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.112795][ T5832] block device autoloading is deprecated and will be removed. [ 166.182588][ T6945] FAULT_INJECTION: forcing a failure. [ 166.182588][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 166.242226][ T30] audit: type=1400 audit(1753121809.057:413): avc: denied { bind } for pid=6933 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.261491][ T30] audit: type=1400 audit(1753121809.057:414): avc: denied { name_bind } for pid=6933 comm="syz.2.249" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 166.295204][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.1.251 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 166.295231][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.295241][ T6945] Call Trace: [ 166.295247][ T6945] [ 166.295254][ T6945] dump_stack_lvl+0x16c/0x1f0 [ 166.295287][ T6945] should_fail_ex+0x512/0x640 [ 166.295313][ T6945] ? fs_reclaim_acquire+0xae/0x150 [ 166.295337][ T6945] ? tomoyo_encode2+0x100/0x3e0 [ 166.295353][ T6945] should_failslab+0xc2/0x120 [ 166.295371][ T6945] __kmalloc_noprof+0xd2/0x510 [ 166.295404][ T6945] tomoyo_encode2+0x100/0x3e0 [ 166.295424][ T6945] tomoyo_encode+0x29/0x50 [ 166.295439][ T6945] tomoyo_mount_acl+0x314/0x850 [ 166.295464][ T6945] ? kernel_text_address+0x8d/0x100 [ 166.295499][ T6945] ? __kernel_text_address+0xd/0x40 [ 166.295523][ T6945] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 166.295555][ T6945] ? stack_trace_save+0x8e/0xc0 [ 166.295599][ T6945] ? tomoyo_domain+0xbb/0x150 [ 166.295617][ T6945] ? tomoyo_profile+0x47/0x60 [ 166.295645][ T6945] tomoyo_mount_permission+0x16d/0x420 [ 166.295670][ T6945] ? tomoyo_mount_permission+0x14f/0x420 [ 166.295698][ T6945] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 166.295740][ T6945] security_sb_mount+0x9b/0x260 [ 166.295767][ T6945] path_mount+0x128/0x2020 [ 166.295789][ T6945] ? kmem_cache_free+0x2d1/0x4d0 [ 166.295814][ T6945] ? __pfx_path_mount+0x10/0x10 [ 166.295836][ T6945] ? putname+0x154/0x1a0 [ 166.295858][ T6945] __x64_sys_mount+0x28d/0x310 [ 166.295879][ T6945] ? __pfx___x64_sys_mount+0x10/0x10 [ 166.295906][ T6945] do_syscall_64+0xcd/0x4c0 [ 166.295925][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.295942][ T6945] RIP: 0033:0x7f8e5fb8e9a9 [ 166.295956][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.295972][ T6945] RSP: 002b:00007f8e60a7d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.295989][ T6945] RAX: ffffffffffffffda RBX: 00007f8e5fdb5fa0 RCX: 00007f8e5fb8e9a9 [ 166.296000][ T6945] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000200000000200 [ 166.296011][ T6945] RBP: 00007f8e60a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 166.296020][ T6945] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 166.296030][ T6945] R13: 0000000000000001 R14: 00007f8e5fdb5fa0 R15: 00007ffd54948378 [ 166.296054][ T6945] [ 166.571707][ T30] audit: type=1400 audit(1753121809.057:415): avc: denied { node_bind } for pid=6933 comm="syz.2.249" saddr=172.30.0.3 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 166.593910][ T30] audit: type=1400 audit(1753121809.057:416): avc: denied { write } for pid=6933 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.613225][ T30] audit: type=1400 audit(1753121809.057:417): avc: denied { create } for pid=6933 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.652319][ T6955] netlink: 'syz.2.254': attribute type 32 has an invalid length. [ 166.871769][ T6962] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 166.878811][ T6962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.954310][ T6962] vhci_hcd vhci_hcd.0: Device attached [ 166.987915][ T6969] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(18) [ 166.994563][ T6969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.015498][ T6969] vhci_hcd vhci_hcd.0: Device attached [ 167.023660][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 167.133686][ T6969] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 167.156538][ T6962] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 167.163189][ T6962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 167.184280][ T6978] 9pnet_fd: Insufficient options for proto=fd [ 167.214332][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 167.301827][ T24] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 167.327794][ T6962] vhci_hcd vhci_hcd.0: Device attached [ 167.418140][ T6969] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(24) [ 167.424782][ T6969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.542047][ T6987] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(27) [ 167.548684][ T6987] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 167.565213][ T6983] wg1 speed is unknown, defaulting to 1000 [ 167.618408][ T5843] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.627968][ T6969] vhci_hcd vhci_hcd.0: Device attached [ 167.642427][ T6962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 167.670713][ T6962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 167.676200][ T6987] vhci_hcd vhci_hcd.0: Device attached [ 167.711860][ T6962] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(34) [ 167.718512][ T6962] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 167.776886][ T6962] vhci_hcd vhci_hcd.0: Device attached [ 167.782693][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 167.797181][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.812345][ T30] audit: type=1400 audit(1753121811.197:418): avc: denied { getopt } for pid=6995 comm="syz.2.261" lport=48927 faddr=fc00::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 167.866384][ T6986] vhci_hcd: connection closed [ 167.867107][ T6979] vhci_hcd: connection closed [ 167.872205][ T6966] vhci_hcd: connection reset by peer [ 167.889989][ T2912] vhci_hcd: stop threads [ 167.894579][ T6970] vhci_hcd: connection closed [ 167.905033][ T2912] vhci_hcd: release socket [ 167.922065][ T6989] vhci_hcd: connection closed [ 167.922284][ T5843] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.942753][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.959293][ T5843] usb 4-1: config 0 descriptor?? [ 168.166550][ T2912] vhci_hcd: disconnect device [ 168.283474][ T5843] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 168.330155][ T2912] vhci_hcd: stop threads [ 168.349422][ T2912] vhci_hcd: release socket [ 168.384437][ T2912] vhci_hcd: disconnect device [ 168.407810][ T2912] vhci_hcd: stop threads [ 168.415331][ T2912] vhci_hcd: release socket [ 168.425510][ T2912] vhci_hcd: disconnect device [ 168.455068][ T2912] vhci_hcd: stop threads [ 168.481624][ T2912] vhci_hcd: release socket [ 168.481707][ T2912] vhci_hcd: disconnect device [ 168.487183][ T2912] vhci_hcd: stop threads [ 168.487199][ T2912] vhci_hcd: release socket [ 168.487304][ T2912] vhci_hcd: disconnect device [ 168.681941][ T6993] vhci_hcd: connection closed [ 168.690964][ T49] vhci_hcd: stop threads [ 168.707513][ T49] vhci_hcd: release socket [ 168.731852][ T49] vhci_hcd: disconnect device [ 168.792299][ T7008] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.212347][ T7016] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 169.525131][ T7025] netlink: 'syz.4.270': attribute type 32 has an invalid length. [ 169.860075][ T5843] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.031783][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 170.044923][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.085463][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.214265][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 170.346984][ T5843] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 170.371656][ T55] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.376349][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.410307][ T5962] usb 4-1: USB disconnect, device number 9 [ 170.412554][ T5843] usb 2-1: config 0 descriptor?? [ 170.531782][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 170.559901][ T55] usb 1-1: config index 0 descriptor too short (expected 41, got 36) [ 170.592253][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.641783][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.665213][ T5843] usbhid 2-1:0.0: can't add hid device: -71 [ 170.668187][ T55] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.0c [ 170.671228][ T5843] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 170.698276][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.752116][ T5843] usb 2-1: USB disconnect, device number 11 [ 170.851938][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.904782][ T55] usb 1-1: config 0 descriptor?? [ 171.133896][ T7053] ip6erspan0: entered promiscuous mode [ 171.378449][ T7032] fuse: Bad value for 'fd' [ 171.432200][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 171.442989][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.462293][ T10] usb 3-1: config 0 has no interface number 0 [ 171.473753][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 171.487310][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.503783][ T10] usb 3-1: Product: syz [ 171.512455][ T10] usb 3-1: Manufacturer: syz [ 171.522589][ T10] usb 3-1: SerialNumber: syz [ 171.538003][ T10] usb 3-1: config 0 descriptor?? [ 171.561452][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 171.579076][ T10] usb 3-1: selecting invalid altsetting 1 [ 171.591816][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 171.679672][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.714842][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 171.734182][ T10] usb 3-1: media controller created [ 171.817252][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.766053][ T24] vhci_hcd: vhci_device speed not set [ 173.179994][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 173.237660][ T55] usbhid 1-1:0.0: can't add hid device: -71 [ 173.246138][ T55] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 173.252048][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 173.265239][ T55] usb 1-1: USB disconnect, device number 8 [ 173.423313][ T43] IPVS: starting estimator thread 0... [ 173.512030][ T7078] IPVS: using max 46 ests per chain, 110400 per kthread [ 173.818145][ T10] usb 3-1: USB disconnect, device number 8 [ 174.164792][ T5153] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 174.298150][ T30] audit: type=1400 audit(1753121817.667:419): avc: denied { ioctl } for pid=7092 comm="syz.2.288" path="socket:[11839]" dev="sockfs" ino=11839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.345572][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 174.361827][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.363335][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.504164][ T5947] usb usb36-port1: attempt power cycle [ 174.786907][ T7085] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 174.904790][ T7085] bond1: entered promiscuous mode [ 174.935060][ T7085] bond1: entered allmulticast mode [ 174.956516][ T7085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.178383][ T5947] usb usb36-port1: unable to enumerate USB device [ 175.937058][ T30] audit: type=1400 audit(1753121819.307:420): avc: denied { connect } for pid=7112 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.053893][ T7120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.294'. [ 176.100601][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 176.111639][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.729728][ T30] audit: type=1400 audit(1753121820.107:421): avc: denied { listen } for pid=7126 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.792885][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 176.824198][ T10] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 176.869788][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.896004][ T10] usb 2-1: Product: syz [ 176.900209][ T10] usb 2-1: Manufacturer: syz [ 176.911653][ T10] usb 2-1: SerialNumber: syz [ 177.213465][ T10] usb 2-1: config 0 descriptor?? [ 177.703302][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 177.918095][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.943730][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 177.956727][ T10] usb 2-1: media controller created [ 178.014675][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.047270][ T30] audit: type=1400 audit(1753121821.427:422): avc: denied { append } for pid=7110 comm="syz.1.293" name="i2c-1" dev="devtmpfs" ino=2896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.070969][ T7140] dtv5100: wlen = 0, aborting. [ 178.702259][ T30] audit: type=1400 audit(1753121822.087:423): avc: denied { ioctl } for pid=7110 comm="syz.1.293" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 179.583247][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 179.590647][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 179.737732][ T7152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.801630][ T7151] wg1 speed is unknown, defaulting to 1000 [ 180.011600][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 180.346957][ T30] audit: type=1400 audit(1753121823.727:424): avc: denied { name_bind } for pid=7156 comm="syz.4.306" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 180.570736][ T7166] FAULT_INJECTION: forcing a failure. [ 180.570736][ T7166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.602170][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.4.307 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 180.602196][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.602206][ T7166] Call Trace: [ 180.602212][ T7166] [ 180.602219][ T7166] dump_stack_lvl+0x16c/0x1f0 [ 180.602253][ T7166] should_fail_ex+0x512/0x640 [ 180.602283][ T7166] _copy_to_user+0x32/0xd0 [ 180.602304][ T7166] simple_read_from_buffer+0xcb/0x170 [ 180.602333][ T7166] proc_fail_nth_read+0x197/0x270 [ 180.602359][ T7166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.602386][ T7166] ? rw_verify_area+0xcf/0x680 [ 180.602408][ T7166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.602434][ T7166] vfs_read+0x1e1/0xc60 [ 180.602463][ T7166] ? __pfx___mutex_lock+0x10/0x10 [ 180.602480][ T7166] ? __pfx_vfs_read+0x10/0x10 [ 180.602511][ T7166] ? __fget_files+0x20e/0x3c0 [ 180.602534][ T7166] ksys_read+0x12a/0x250 [ 180.602558][ T7166] ? __pfx_ksys_read+0x10/0x10 [ 180.602589][ T7166] do_syscall_64+0xcd/0x4c0 [ 180.602608][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.602625][ T7166] RIP: 0033:0x7f8a08f8d3bc [ 180.602640][ T7166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 180.602655][ T7166] RSP: 002b:00007f8a09e1c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.602672][ T7166] RAX: ffffffffffffffda RBX: 00007f8a091b6080 RCX: 00007f8a08f8d3bc [ 180.602683][ T7166] RDX: 000000000000000f RSI: 00007f8a09e1c0a0 RDI: 0000000000000005 [ 180.602692][ T7166] RBP: 00007f8a09e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 180.602702][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.602712][ T7166] R13: 0000000000000000 R14: 00007f8a091b6080 R15: 00007fffb8694598 [ 180.602736][ T7166] [ 180.842261][ T5843] usb 2-1: USB disconnect, device number 12 [ 180.912160][ T5843] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 180.916672][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 180.930490][ T7169] netlink: 'syz.4.308': attribute type 18 has an invalid length. [ 180.938359][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 181.118028][ T30] audit: type=1400 audit(1753121824.297:425): avc: denied { append } for pid=7168 comm="syz.4.308" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.205141][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 181.371169][ T30] audit: type=1400 audit(1753121824.747:426): avc: denied { listen } for pid=7176 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.387249][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 182.317429][ T30] audit: type=1400 audit(1753121825.397:427): avc: denied { create } for pid=7176 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.351831][ T30] audit: type=1400 audit(1753121825.697:428): avc: denied { bind } for pid=7176 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.352401][ T7180] netlink: 348 bytes leftover after parsing attributes in process `syz.4.312'. [ 182.392387][ T30] audit: type=1400 audit(1753121825.697:429): avc: denied { ioctl } for pid=7176 comm="syz.0.311" path="socket:[11972]" dev="sockfs" ino=11972 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.420727][ T30] audit: type=1400 audit(1753121825.697:430): avc: denied { accept } for pid=7176 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.448138][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 183.414604][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 186.211410][ T7222] Invalid ELF header magic: != ELF [ 188.781214][ T30] audit: type=1400 audit(1753121832.157:431): avc: denied { getopt } for pid=7227 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.152849][ T7238] bad cache= option: no%e [ 189.152849][ T7238] [ 189.159647][ T7238] CIFS: VFS: bad cache= option: no%e [ 189.966323][ T30] audit: type=1400 audit(1753121833.347:432): avc: denied { name_connect } for pid=7244 comm="syz.0.330" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 189.991399][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 190.103528][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 190.128833][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'. [ 192.292968][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.505104][ T5912] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 192.548864][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.561463][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.595407][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 192.626047][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.490467][ T5912] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.504595][ T10] usb 1-1: config 0 descriptor?? [ 193.521630][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.684577][ T5912] usb 2-1: Product: syz [ 193.851111][ T5912] usb 2-1: Manufacturer: syz [ 193.851303][ T5912] usb 2-1: SerialNumber: syz [ 193.983260][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.983328][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.184271][ T5912] usb 2-1: can't set config #1, error -71 [ 194.263891][ T5912] usb 2-1: USB disconnect, device number 13 [ 194.431196][ T10] usb 1-1: string descriptor 0 read error: -71 [ 194.431509][ T10] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 194.431589][ T10] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 194.431608][ T10] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 194.431649][ T10] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 194.431730][ T10] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 194.433803][ T10] usb 1-1: USB disconnect, device number 9 [ 196.024479][ T7295] 9pnet_fd: Insufficient options for proto=fd [ 196.438746][ T7295] netlink: 348 bytes leftover after parsing attributes in process `syz.0.341'. [ 196.484454][ T30] audit: type=1400 audit(1753121839.857:433): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 196.828624][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 197.517906][ T7308] xt_hashlimit: size too large, truncated to 1048576 [ 197.571910][ T7311] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 197.581779][ T55] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 197.899682][ T55] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 198.168286][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 198.238625][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 198.272673][ T55] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 198.282808][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.394132][ T55] usb 3-1: Product: syz [ 198.394153][ T55] usb 3-1: Manufacturer: syz [ 198.394169][ T55] usb 3-1: SerialNumber: syz [ 198.401041][ T55] usb 3-1: config 0 descriptor?? [ 198.861814][ T5912] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.609257][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 199.613464][ T55] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 199.636850][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.667321][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 199.807803][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 200.039099][ T5912] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 200.041862][ T55] usb 3-1: USB disconnect, device number 9 [ 200.241079][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.452417][ T5912] usb 5-1: Product: syz [ 200.456733][ T5912] usb 5-1: Manufacturer: syz [ 200.461392][ T5912] usb 5-1: SerialNumber: syz [ 200.474133][ T5912] usb 5-1: config 0 descriptor?? [ 200.704041][ T5912] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 200.836127][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.353'. [ 200.854967][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.353'. [ 201.017749][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 201.027204][ T5912] usb 5-1: USB disconnect, device number 11 [ 202.036056][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 203.091133][ T7360] wg1 speed is unknown, defaulting to 1000 [ 204.040182][ T7366] xt_hashlimit: size too large, truncated to 1048576 [ 204.757755][ T7374] netlink: 'syz.1.361': attribute type 10 has an invalid length. [ 204.814808][ T7373] C: renamed from lo (while UP) [ 204.947249][ T7373] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.498137][ T7374] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 205.623545][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 206.254979][ T7390] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 206.403521][ T7393] kvm: pic: non byte read [ 206.511759][ T7393] kvm: pic: level sensitive irq not supported [ 206.511867][ T7393] kvm: pic: non byte read [ 207.330035][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 207.774482][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 207.886836][ T5947] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.343604][ T7422] macvlan0: entered promiscuous mode [ 208.455522][ T5947] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.851688][ T5947] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.926860][ T5947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.943209][ T5947] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 209.046664][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.060027][ T5947] usb 5-1: config 0 descriptor?? [ 210.906230][ T7436] xt_hashlimit: size too large, truncated to 1048576 [ 210.964230][ T7438] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 210.977366][ T7438] netlink: 172 bytes leftover after parsing attributes in process `syz.0.375'. [ 211.025572][ T7439] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 211.893817][ T7452] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 212.030126][ T30] audit: type=1400 audit(1753121855.307:434): avc: denied { accept } for pid=7446 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 212.163226][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.446846][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 212.814232][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 212.827721][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.850981][ T10] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 212.876346][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.463568][ T5947] usbhid 5-1:0.0: can't add hid device: -71 [ 213.478546][ T30] audit: type=1400 audit(1753121856.817:435): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 213.499721][ T10] usb 1-1: Product: syz [ 213.506327][ T10] usb 1-1: Manufacturer: syz [ 213.510949][ T10] usb 1-1: SerialNumber: syz [ 213.511707][ T5947] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 213.517628][ T10] usb 1-1: config 0 descriptor?? [ 213.547544][ T10] usb 1-1: bad CDC descriptors [ 213.555432][ T10] usb 1-1: unsupported MDLM descriptors [ 213.600570][ T5947] usb 5-1: USB disconnect, device number 12 [ 213.607999][ T7460] netlink: 'syz.3.381': attribute type 32 has an invalid length. [ 213.953675][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 214.085385][ T5912] usb 1-1: USB disconnect, device number 10 [ 214.453518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.684627][ T7472] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 214.699554][ T7472] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 214.837475][ T7479] xt_hashlimit: size too large, truncated to 1048576 [ 215.031770][ T30] audit: type=1400 audit(1753121858.267:436): avc: denied { read } for pid=7471 comm="syz.3.385" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 215.127621][ T7481] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 215.238391][ T30] audit: type=1400 audit(1753121858.277:437): avc: denied { open } for pid=7471 comm="syz.3.385" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 216.319755][ T7498] Invalid ELF header magic: != ELF [ 218.765085][ T7496] FAULT_INJECTION: forcing a failure. [ 218.765085][ T7496] name fail_futex, interval 1, probability 0, space 0, times 1 [ 218.785386][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz.3.391 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 218.785412][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.785421][ T7496] Call Trace: [ 218.785427][ T7496] [ 218.785433][ T7496] dump_stack_lvl+0x16c/0x1f0 [ 218.785465][ T7496] should_fail_ex+0x512/0x640 [ 218.785492][ T7496] get_futex_key+0x1d0/0x1540 [ 218.785520][ T7496] ? __pfx_get_futex_key+0x10/0x10 [ 218.785543][ T7496] ? __mutex_trylock_common+0xe9/0x250 [ 218.785567][ T7496] futex_wake+0xe7/0x4e0 [ 218.785586][ T7496] ? __pfx_futex_wake+0x10/0x10 [ 218.785600][ T7496] ? __lock_acquire+0xb8a/0x1c90 [ 218.785627][ T7496] do_futex+0x1e3/0x350 [ 218.785653][ T7496] ? __pfx_do_futex+0x10/0x10 [ 218.785675][ T7496] ? __might_fault+0xe3/0x190 [ 218.785707][ T7496] mm_release+0x24e/0x300 [ 218.785728][ T7496] do_exit+0x68b/0x2bd0 [ 218.785751][ T7496] ? __pfx___might_resched+0x10/0x10 [ 218.785777][ T7496] ? __pfx_do_exit+0x10/0x10 [ 218.785800][ T7496] ? do_raw_spin_lock+0x12c/0x2b0 [ 218.785818][ T7496] ? find_held_lock+0x2b/0x80 [ 218.785842][ T7496] do_group_exit+0xd3/0x2a0 [ 218.785868][ T7496] get_signal+0x2673/0x26d0 [ 218.785889][ T7496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.785909][ T7496] ? task_work_add+0x1d5/0x360 [ 218.785927][ T7496] ? __pfx_task_work_add+0x10/0x10 [ 218.785945][ T7496] ? __pfx_get_signal+0x10/0x10 [ 218.785973][ T7496] arch_do_signal_or_restart+0x8f/0x7d0 [ 218.785995][ T7496] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 218.786025][ T7496] ? ksys_write+0x1ac/0x250 [ 218.786049][ T7496] ? __pfx_ksys_write+0x10/0x10 [ 218.786078][ T7496] exit_to_user_mode_loop+0x84/0x110 [ 218.786099][ T7496] do_syscall_64+0x3f6/0x4c0 [ 218.786118][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.786135][ T7496] RIP: 0033:0x7f4349b8e9a9 [ 218.786149][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.786166][ T7496] RSP: 002b:00007f434a916038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.786182][ T7496] RAX: 0000000000000012 RBX: 00007f4349db6080 RCX: 00007f4349b8e9a9 [ 218.786193][ T7496] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000005 [ 218.786203][ T7496] RBP: 00007f434a916090 R08: 0000000000000000 R09: 0000000000000000 [ 218.786212][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.786222][ T7496] R13: 0000000000000000 R14: 00007f4349db6080 R15: 00007ffec4bac398 [ 218.786252][ T7496] [ 219.042858][ T7497] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.390'. [ 219.549057][ T7514] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.693942][ T5912] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 220.053113][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 220.064142][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.073899][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 220.084959][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 220.102729][ T5912] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 220.112107][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.120133][ T5912] usb 2-1: Product: syz [ 220.126509][ T5912] usb 2-1: Manufacturer: syz [ 220.180770][ T5912] usb 2-1: SerialNumber: syz [ 220.214916][ T5912] usb 2-1: config 0 descriptor?? [ 220.425060][ T5912] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 220.716148][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 220.726892][ T5912] usb 2-1: USB disconnect, device number 14 [ 221.110666][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 221.844481][ T30] audit: type=1400 audit(1753121865.187:438): avc: denied { append } for pid=7533 comm="syz.0.402" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 221.963528][ T7538] syz.4.403: attempt to access beyond end of device [ 221.963528][ T7538] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 222.115926][ T7545] Invalid ELF header magic: != ELF [ 222.831819][ T5947] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 222.997754][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 223.532209][ T7558] wg1 speed is unknown, defaulting to 1000 [ 224.146686][ T30] audit: type=1404 audit(1753121867.527:439): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 224.231003][ T30] audit: type=1400 audit(1753121867.607:440): avc: denied { execmem } for pid=7570 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 224.331030][ T30] audit: type=1400 audit(1753121867.637:441): avc: denied { read } for pid=7568 comm="syz.4.411" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 224.935355][ T30] audit: type=1400 audit(1753121867.757:442): avc: denied { read } for pid=7568 comm="syz.4.411" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 225.090418][ T30] audit: type=1400 audit(1753121867.757:443): avc: denied { create } for pid=7568 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 225.214929][ T30] audit: type=1400 audit(1753121867.757:444): avc: denied { create } for pid=7568 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 225.445195][ T30] audit: type=1400 audit(1753121867.757:445): avc: denied { watch watch_reads } for pid=7568 comm="syz.4.411" path="/81" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 225.589159][ T24] libceph: connect (1)[c::]:6789 error -101 [ 225.598860][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 225.620354][ T5947] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.633232][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 225.646184][ T5947] usb 4-1: can't read configurations, error -71 [ 225.674305][ T30] audit: type=1400 audit(1753121867.767:446): avc: denied { read open } for pid=7570 comm="syz.2.412" path="net:[4026533380]" dev="nsfs" ino=4026533380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 225.741764][ T30] audit: type=1400 audit(1753121867.787:447): avc: denied { create } for pid=7570 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 225.863576][ T24] libceph: connect (1)[c::]:6789 error -101 [ 225.883857][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 226.309804][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 226.323074][ T7586] ceph: No mds server is up or the cluster is laggy [ 226.416943][ T24] libceph: connect (1)[c::]:6789 error -101 [ 226.462549][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 226.512821][ T7600] ALSA: mixer_oss: invalid OSS volume '' [ 226.860864][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 226.860881][ T30] audit: type=1400 audit(1753121870.237:527): avc: denied { execmem } for pid=7616 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 226.908524][ T30] audit: type=1400 audit(1753121870.287:528): avc: denied { read } for pid=7622 comm="syz.1.429" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 226.986029][ T30] audit: type=1400 audit(1753121870.347:529): avc: denied { read open } for pid=7616 comm="syz.3.428" path="net:[4026532949]" dev="nsfs" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 227.017140][ T30] audit: type=1400 audit(1753121870.357:530): avc: denied { create } for pid=7616 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 227.068967][ T30] audit: type=1400 audit(1753121870.357:531): avc: denied { create } for pid=7616 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 227.231939][ T30] audit: type=1400 audit(1753121870.367:532): avc: denied { create } for pid=7616 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 227.285232][ T30] audit: type=1400 audit(1753121870.437:533): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.357488][ T30] audit: type=1400 audit(1753121870.587:534): avc: denied { read } for pid=7624 comm="syz.1.430" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 227.410653][ T30] audit: type=1400 audit(1753121870.587:535): avc: denied { read } for pid=7624 comm="syz.1.430" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 227.461438][ T30] audit: type=1400 audit(1753121870.587:536): avc: denied { prog_load } for pid=7627 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 230.051204][ T7713] mmap: syz.0.466 (7713) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.195215][ T7724] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 230.237879][ T7724] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 231.391840][ T5153] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 231.428000][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 231.872865][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 231.872881][ T30] audit: type=1400 audit(1753121875.257:752): avc: denied { create } for pid=7773 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 231.899995][ T30] audit: type=1400 audit(1753121875.257:753): avc: denied { create } for pid=7773 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 231.923212][ T30] audit: type=1400 audit(1753121875.257:754): avc: denied { execmem } for pid=7773 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 231.944662][ T30] audit: type=1400 audit(1753121875.327:755): avc: denied { prog_load } for pid=7773 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 231.966057][ T30] audit: type=1400 audit(1753121875.327:756): avc: denied { prog_load } for pid=7773 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 232.010753][ T30] audit: type=1400 audit(1753121875.327:757): avc: denied { map_create } for pid=7773 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 232.032712][ T30] audit: type=1400 audit(1753121875.327:758): avc: denied { create } for pid=7773 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 232.053971][ T30] audit: type=1400 audit(1753121875.327:759): avc: denied { create } for pid=7773 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 232.124344][ T30] audit: type=1400 audit(1753121875.387:760): avc: denied { create } for pid=7773 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 232.151846][ T30] audit: type=1400 audit(1753121875.387:761): avc: denied { read write } for pid=7773 comm="syz.3.489" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 232.319208][ T7783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.492'. [ 232.329778][ T7783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7783 comm=syz.1.492 [ 232.633445][ T7803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.501'. [ 232.650628][ T7803] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7803 comm=syz.0.501 [ 233.222339][ T7825] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 233.241317][ T7825] team0: Port device wlan1 removed [ 233.251196][ T7825] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.895374][ T5153] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 235.918774][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 236.796442][ T7908] FAULT_INJECTION: forcing a failure. [ 236.796442][ T7908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.810064][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.4.538 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 236.810088][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.810099][ T7908] Call Trace: [ 236.810106][ T7908] [ 236.810113][ T7908] dump_stack_lvl+0x16c/0x1f0 [ 236.810146][ T7908] should_fail_ex+0x512/0x640 [ 236.810178][ T7908] _copy_from_user+0x2e/0xd0 [ 236.810197][ T7908] kstrtouint_from_user+0xd6/0x1d0 [ 236.810221][ T7908] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 236.810243][ T7908] ? __lock_acquire+0xb8a/0x1c90 [ 236.810273][ T7908] proc_fail_nth_write+0x83/0x250 [ 236.810301][ T7908] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.810334][ T7908] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.810358][ T7908] vfs_write+0x2a0/0x1150 [ 236.810394][ T7908] ? __pfx___mutex_lock+0x10/0x10 [ 236.810411][ T7908] ? __pfx_vfs_write+0x10/0x10 [ 236.810444][ T7908] ? __fget_files+0x20e/0x3c0 [ 236.810468][ T7908] ksys_write+0x12a/0x250 [ 236.810493][ T7908] ? __pfx_ksys_write+0x10/0x10 [ 236.810526][ T7908] do_syscall_64+0xcd/0x4c0 [ 236.810546][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.810566][ T7908] RIP: 0033:0x7f8a08f8d45f [ 236.810581][ T7908] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 236.810598][ T7908] RSP: 002b:00007f8a09e3d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 236.810615][ T7908] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a08f8d45f [ 236.810627][ T7908] RDX: 0000000000000001 RSI: 00007f8a09e3d0a0 RDI: 0000000000000004 [ 236.810637][ T7908] RBP: 00007f8a09e3d090 R08: 0000000000000000 R09: 0000000000000000 [ 236.810647][ T7908] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 236.810658][ T7908] R13: 0000000000000000 R14: 00007f8a091b5fa0 R15: 00007fffb8694598 [ 236.810682][ T7908] [ 237.026812][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 237.026826][ T30] audit: type=1400 audit(1753121880.407:988): avc: denied { create } for pid=7909 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 237.052421][ T30] audit: type=1400 audit(1753121880.407:989): avc: denied { create } for pid=7909 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 237.072913][ T30] audit: type=1400 audit(1753121880.407:990): avc: denied { create } for pid=7909 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 237.094177][ T30] audit: type=1400 audit(1753121880.407:991): avc: denied { read write } for pid=7909 comm="syz.2.539" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 237.117442][ T30] audit: type=1400 audit(1753121880.407:992): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.141588][ T30] audit: type=1400 audit(1753121880.437:993): avc: denied { create } for pid=7911 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 237.164612][ T30] audit: type=1400 audit(1753121880.547:994): avc: denied { create } for pid=7909 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 237.184009][ T30] audit: type=1400 audit(1753121880.547:995): avc: denied { read } for pid=7909 comm="syz.2.539" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 237.261414][ T30] audit: type=1400 audit(1753121880.637:996): avc: denied { create } for pid=7914 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 237.329078][ T30] audit: type=1400 audit(1753121880.707:997): avc: denied { execmem } for pid=7917 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 239.140756][ T7965] netlink: 'syz.0.560': attribute type 10 has an invalid length. [ 242.060890][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 242.060907][ T30] audit: type=1400 audit(1753121885.437:1197): avc: denied { prog_load } for pid=8037 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.114961][ T30] audit: type=1400 audit(1753121885.437:1198): avc: denied { prog_load } for pid=8037 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.161589][ T30] audit: type=1400 audit(1753121885.467:1199): avc: denied { create } for pid=8037 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 242.196805][ T30] audit: type=1400 audit(1753121885.467:1200): avc: denied { create } for pid=8037 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 242.255877][ T30] audit: type=1400 audit(1753121885.637:1201): avc: denied { create } for pid=8039 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 242.286782][ T30] audit: type=1400 audit(1753121885.637:1202): avc: denied { create } for pid=8039 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 242.330374][ T30] audit: type=1400 audit(1753121885.637:1203): avc: denied { prog_load } for pid=8039 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.346296][ T8040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.369795][ T30] audit: type=1400 audit(1753121885.687:1204): avc: denied { execmem } for pid=8039 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 242.430215][ T30] audit: type=1400 audit(1753121885.707:1205): avc: denied { prog_load } for pid=8041 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.468312][ T30] audit: type=1400 audit(1753121885.707:1206): avc: denied { create } for pid=8041 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 242.726231][ T8052] netlink: 56 bytes leftover after parsing attributes in process `syz.4.595'. [ 245.374575][ T8121] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 247.073313][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 247.073330][ T30] audit: type=1400 audit(1753121890.457:1421): avc: denied { execmem } for pid=8157 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 247.224941][ T30] audit: type=1400 audit(1753121890.547:1422): avc: denied { allowed } for pid=8153 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 247.244454][ T30] audit: type=1400 audit(1753121890.547:1423): avc: denied { create } for pid=8153 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 247.311665][ T30] audit: type=1400 audit(1753121890.687:1424): avc: denied { prog_load } for pid=8157 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 247.341614][ T30] audit: type=1400 audit(1753121890.687:1425): avc: denied { create } for pid=8157 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 247.384676][ T30] audit: type=1400 audit(1753121890.687:1426): avc: denied { create } for pid=8157 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 247.419513][ T30] audit: type=1400 audit(1753121890.747:1427): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 247.507234][ T30] audit: type=1400 audit(1753121890.837:1428): avc: denied { create } for pid=8163 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 247.611641][ T30] audit: type=1400 audit(1753121890.877:1429): avc: denied { read } for pid=8162 comm="syz.0.638" dev="nsfs" ino=4026533226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 247.665128][ T8171] capability: warning: `syz.0.641' uses deprecated v2 capabilities in a way that may be insecure [ 247.678077][ T30] audit: type=1400 audit(1753121890.877:1430): avc: denied { read } for pid=8162 comm="syz.0.638" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 247.777587][ T8175] pim6reg1: entered allmulticast mode [ 247.784963][ T8175] pim6reg1: left allmulticast mode [ 249.239941][ T8214] wg1 speed is unknown, defaulting to 1000 [ 249.812335][ T8236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.823958][ T8236] batadv_slave_0: entered promiscuous mode [ 250.261891][ T8256] netlink: 'syz.4.671': attribute type 29 has an invalid length. [ 250.270746][ T8256] netlink: 'syz.4.671': attribute type 29 has an invalid length. [ 251.004059][ T8269] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 252.115218][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 252.115235][ T30] audit: type=1400 audit(1753122151.496:1642): avc: denied { prog_load } for pid=8288 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 252.171648][ T30] audit: type=1400 audit(1753122151.526:1643): avc: denied { read } for pid=8288 comm="syz.3.685" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 252.271801][ T30] audit: type=1400 audit(1753122151.526:1644): avc: denied { create } for pid=8288 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 252.415806][ T30] audit: type=1400 audit(1753122151.796:1645): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 252.449495][ T30] audit: type=1400 audit(1753122151.826:1646): avc: denied { create } for pid=8292 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 252.471468][ T30] audit: type=1400 audit(1753122151.826:1647): avc: denied { create } for pid=8292 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 252.492626][ T30] audit: type=1400 audit(1753122151.826:1648): avc: denied { name_bind } for pid=8292 comm="syz.4.686" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 252.523072][ T30] audit: type=1400 audit(1753122151.826:1649): avc: denied { read } for pid=8292 comm="syz.4.686" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 252.568734][ T30] audit: type=1400 audit(1753122151.926:1650): avc: denied { read } for pid=8292 comm="syz.4.686" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 252.592763][ T30] audit: type=1400 audit(1753122151.976:1651): avc: denied { create } for pid=8295 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 252.746040][ T8304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 252.752673][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 252.770900][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 252.944276][ T8308] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 252.950917][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 252.970200][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 252.997865][ T8304] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 253.014276][ T5905] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 253.028104][ T8304] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 253.034736][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.046839][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 253.070078][ T8308] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 253.076703][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 253.091795][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 253.110709][ T8304] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 253.117335][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.173864][ T8308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 253.274439][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 253.457374][ T8317] vhci_hcd: connection closed [ 253.458785][ T49] vhci_hcd: stop threads [ 253.468446][ T8305] vhci_hcd: connection reset by peer [ 253.471669][ T8315] vhci_hcd: connection closed [ 253.475698][ T8311] vhci_hcd: connection closed [ 253.483385][ T8309] vhci_hcd: connection closed [ 253.532831][ T49] vhci_hcd: release socket [ 253.611243][ T49] vhci_hcd: disconnect device [ 253.618409][ T49] vhci_hcd: stop threads [ 253.622819][ T49] vhci_hcd: release socket [ 253.627430][ T49] vhci_hcd: disconnect device [ 253.632658][ T49] vhci_hcd: stop threads [ 253.637008][ T49] vhci_hcd: release socket [ 253.642166][ T49] vhci_hcd: disconnect device [ 253.647260][ T49] vhci_hcd: stop threads [ 253.655143][ T49] vhci_hcd: release socket [ 253.660184][ T49] vhci_hcd: disconnect device [ 253.791147][ T49] vhci_hcd: stop threads [ 253.795894][ T49] vhci_hcd: release socket [ 253.800784][ T49] vhci_hcd: disconnect device [ 253.825025][ T8329] syz.0.695 (8329): /proc/8328/oom_adj is deprecated, please use /proc/8328/oom_score_adj instead. [ 254.253390][ T8345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8345 comm=syz.2.701 [ 255.429711][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.436615][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.252476][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 257.252487][ T30] audit: type=1400 audit(1753122156.636:1837): avc: denied { bpf } for pid=8400 comm="syz.2.722" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 257.281614][ T30] audit: type=1400 audit(1753122156.656:1838): avc: denied { create } for pid=8400 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 257.311365][ T30] audit: type=1400 audit(1753122156.686:1839): avc: denied { execmem } for pid=8400 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 257.386500][ T30] audit: type=1400 audit(1753122156.766:1840): avc: denied { map_create } for pid=8400 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.411113][ T30] audit: type=1400 audit(1753122156.766:1841): avc: denied { allowed } for pid=8400 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 257.433530][ T30] audit: type=1400 audit(1753122156.766:1842): avc: denied { read append } for pid=8400 comm="syz.2.722" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 257.457118][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.467762][ T30] audit: type=1400 audit(1753122156.766:1843): avc: denied { prog_load } for pid=8400 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.486729][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.746172][ T30] audit: type=1400 audit(1753122157.126:1844): avc: denied { map_create } for pid=8405 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.774703][ T30] audit: type=1400 audit(1753122157.146:1845): avc: denied { create } for pid=8405 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 257.798407][ T30] audit: type=1400 audit(1753122157.146:1846): avc: denied { read } for pid=8405 comm="syz.3.724" dev="nsfs" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 258.133590][ T5905] vhci_hcd: vhci_device speed not set [ 259.090563][ T8431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8431 comm=syz.0.732 [ 259.270315][ T8435] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 259.276908][ T8435] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 259.310381][ T8435] vhci_hcd vhci_hcd.0: Device attached [ 259.340035][ T8436] vhci_hcd: connection closed [ 259.340965][ T12] vhci_hcd: stop threads [ 259.363229][ T12] vhci_hcd: release socket [ 259.369330][ T12] vhci_hcd: disconnect device [ 259.412563][ T43] usb usb38-port1: attempt power cycle [ 259.984216][ T43] usb usb38-port1: unable to enumerate USB device [ 260.296868][ T8449] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.319378][ T8450] netlink: 'syz.0.737': attribute type 10 has an invalid length. [ 261.575152][ T8476] kernel profiling enabled (shift: 9) [ 262.315069][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 262.315080][ T30] audit: type=1400 audit(1753122161.696:1988): avc: denied { bpf } for pid=8494 comm="syz.2.756" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 262.370520][ T30] audit: type=1400 audit(1753122161.726:1989): avc: denied { create } for pid=8494 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 262.424316][ T30] audit: type=1400 audit(1753122161.726:1990): avc: denied { execmem } for pid=8494 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 262.446226][ T30] audit: type=1400 audit(1753122161.776:1991): avc: denied { map_create } for pid=8494 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.470357][ T30] audit: type=1400 audit(1753122161.776:1992): avc: denied { allowed } for pid=8494 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 262.474298][ T8499] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 262.490338][ T30] audit: type=1400 audit(1753122161.776:1993): avc: denied { read append } for pid=8494 comm="syz.2.756" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 262.521117][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.528136][ T30] audit: type=1400 audit(1753122161.776:1994): avc: denied { prog_load } for pid=8494 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 262.547291][ T30] audit: type=1400 audit(1753122161.796:1995): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.571439][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.581224][ T8501] netlink: 'syz.4.758': attribute type 10 has an invalid length. [ 262.589852][ T30] audit: type=1400 audit(1753122161.846:1996): avc: denied { create } for pid=8497 comm="syz.3.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 262.595869][ T8499] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 262.611016][ T30] audit: type=1400 audit(1753122161.856:1997): avc: denied { create } for pid=8497 comm="syz.3.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 262.639302][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.655915][ T8501] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 264.145018][ T8537] wg1 speed is unknown, defaulting to 1000 [ 264.637056][ T8554] FAULT_INJECTION: forcing a failure. [ 264.637056][ T8554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.650344][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.4.778 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 264.650360][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.650366][ T8554] Call Trace: [ 264.650370][ T8554] [ 264.650374][ T8554] dump_stack_lvl+0x16c/0x1f0 [ 264.650398][ T8554] should_fail_ex+0x512/0x640 [ 264.650418][ T8554] _copy_to_user+0x32/0xd0 [ 264.650430][ T8554] simple_read_from_buffer+0xcb/0x170 [ 264.650447][ T8554] proc_fail_nth_read+0x197/0x270 [ 264.650464][ T8554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.650481][ T8554] ? rw_verify_area+0xcf/0x680 [ 264.650495][ T8554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.650510][ T8554] vfs_read+0x1e1/0xc60 [ 264.650528][ T8554] ? __pfx___mutex_lock+0x10/0x10 [ 264.650539][ T8554] ? __pfx_vfs_read+0x10/0x10 [ 264.650557][ T8554] ? __fget_files+0x20e/0x3c0 [ 264.650571][ T8554] ksys_read+0x12a/0x250 [ 264.650586][ T8554] ? __pfx_ksys_read+0x10/0x10 [ 264.650602][ T8554] ? fdget+0x187/0x210 [ 264.650613][ T8554] do_syscall_64+0xcd/0x4c0 [ 264.650625][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.650636][ T8554] RIP: 0033:0x7f8a08f8d3bc [ 264.650645][ T8554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.650656][ T8554] RSP: 002b:00007f8a09e3d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.650667][ T8554] RAX: ffffffffffffffda RBX: 00007f8a091b5fa0 RCX: 00007f8a08f8d3bc [ 264.650674][ T8554] RDX: 000000000000000f RSI: 00007f8a09e3d0a0 RDI: 0000000000000003 [ 264.650680][ T8554] RBP: 00007f8a09e3d090 R08: 0000000000000000 R09: 0000000000000000 [ 264.650686][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.650692][ T8554] R13: 0000000000000000 R14: 00007f8a091b5fa0 R15: 00007fffb8694598 [ 264.650705][ T8554] [ 264.834534][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.085239][ T8563] wg1 speed is unknown, defaulting to 1000 [ 265.374484][ T8584] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 265.891086][ T8599] wg1 speed is unknown, defaulting to 1000 [ 266.504538][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 266.513683][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.803'. [ 266.668485][ T8625] netlink: 'syz.2.807': attribute type 7 has an invalid length. [ 266.680218][ T8625] netlink: 'syz.2.807': attribute type 8 has an invalid length. [ 267.417808][ T30] kauditd_printk_skb: 257 callbacks suppressed [ 267.417824][ T30] audit: type=1400 audit(1753122166.796:2255): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 267.566661][ T30] audit: type=1400 audit(1753122166.936:2256): avc: denied { mounton } for pid=8652 comm="syz.3.819" path="/171/file0" dev="tmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 267.606285][ T30] audit: type=1400 audit(1753122166.976:2257): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 267.688989][ T30] audit: type=1400 audit(1753122167.046:2258): avc: denied { execmem } for pid=8657 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 267.770420][ T30] audit: type=1400 audit(1753122167.056:2259): avc: denied { read write } for pid=8656 comm="syz.4.821" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 267.813582][ T30] audit: type=1400 audit(1753122167.126:2260): avc: denied { bpf } for pid=8660 comm="syz.3.822" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 267.838317][ T30] audit: type=1400 audit(1753122167.126:2261): avc: denied { create } for pid=8660 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 267.889146][ T30] audit: type=1400 audit(1753122167.126:2262): avc: denied { read } for pid=8656 comm="syz.4.821" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 267.996188][ T30] audit: type=1400 audit(1753122167.126:2263): avc: denied { map_create } for pid=8656 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 268.016815][ T30] audit: type=1400 audit(1753122167.126:2264): avc: denied { prog_load } for pid=8656 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 269.043527][ T8692] Cannot find add_set index 0 as target [ 269.399478][ T8703] wg1 speed is unknown, defaulting to 1000 [ 270.558113][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.842'. [ 272.481763][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 272.481781][ T30] audit: type=1400 audit(1753122171.846:2454): avc: denied { sys_module } for pid=8776 comm="syz.1.864" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 272.509506][ T30] audit: type=1400 audit(1753122171.856:2455): avc: denied { create } for pid=8776 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 272.537692][ T30] audit: type=1400 audit(1753122171.856:2456): avc: denied { prog_load } for pid=8776 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.558658][ T30] audit: type=1400 audit(1753122171.856:2457): avc: denied { create } for pid=8776 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 272.589438][ T30] audit: type=1400 audit(1753122171.856:2458): avc: denied { create } for pid=8776 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 272.640800][ T30] audit: type=1400 audit(1753122172.016:2459): avc: denied { prog_load } for pid=8780 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.670260][ T30] audit: type=1400 audit(1753122172.046:2460): avc: denied { read } for pid=8780 comm="syz.1.865" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 272.694599][ T30] audit: type=1400 audit(1753122172.046:2461): avc: denied { create } for pid=8780 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 272.723099][ T30] audit: type=1400 audit(1753122172.106:2462): avc: denied { prog_load } for pid=8782 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 272.742873][ T30] audit: type=1400 audit(1753122172.116:2463): avc: denied { create } for pid=8782 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 273.664644][ T8814] bridge0: port 3(team0) entered blocking state [ 273.671202][ T8814] bridge0: port 3(team0) entered disabled state [ 273.677990][ T8814] team0: entered allmulticast mode [ 273.683416][ T8814] team_slave_0: entered allmulticast mode [ 273.691110][ T8814] team_slave_1: entered allmulticast mode [ 273.699434][ T8814] team0: entered promiscuous mode [ 273.706130][ T8814] team_slave_0: entered promiscuous mode [ 273.713885][ T8814] team_slave_1: entered promiscuous mode [ 273.720522][ T8814] bridge0: port 3(team0) entered blocking state [ 273.727160][ T8814] bridge0: port 3(team0) entered forwarding state [ 274.670802][ T8839] FAULT_INJECTION: forcing a failure. [ 274.670802][ T8839] name failslab, interval 1, probability 0, space 0, times 0 [ 274.684950][ T8839] CPU: 0 UID: 0 PID: 8839 Comm: syz.1.885 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 274.684977][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.684988][ T8839] Call Trace: [ 274.684994][ T8839] [ 274.685001][ T8839] dump_stack_lvl+0x16c/0x1f0 [ 274.685037][ T8839] should_fail_ex+0x512/0x640 [ 274.685064][ T8839] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 274.685091][ T8839] should_failslab+0xc2/0x120 [ 274.685109][ T8839] __kmalloc_cache_noprof+0x6a/0x3e0 [ 274.685134][ T8839] ? cgroup_file_open+0x93/0x330 [ 274.685160][ T8839] cgroup_file_open+0x93/0x330 [ 274.685180][ T8839] ? __pfx_cgroup_file_open+0x10/0x10 [ 274.685204][ T8839] kernfs_fop_open+0x8c6/0xda0 [ 274.685229][ T8839] ? file_set_fsnotify_mode_from_watchers+0x101/0x640 [ 274.685262][ T8839] do_dentry_open+0x744/0x1c10 [ 274.685290][ T8839] ? __pfx_kernfs_fop_open+0x10/0x10 [ 274.685318][ T8839] vfs_open+0x82/0x3f0 [ 274.685342][ T8839] path_openat+0x1de4/0x2cb0 [ 274.685378][ T8839] ? __pfx_path_openat+0x10/0x10 [ 274.685407][ T8839] ? __lock_acquire+0xb8a/0x1c90 [ 274.685428][ T8839] do_filp_open+0x20b/0x470 [ 274.685456][ T8839] ? __pfx_do_filp_open+0x10/0x10 [ 274.685502][ T8839] ? alloc_fd+0x471/0x7d0 [ 274.685537][ T8839] do_sys_openat2+0x11b/0x1d0 [ 274.685558][ T8839] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.685581][ T8839] ? __fget_files+0x20e/0x3c0 [ 274.685603][ T8839] __x64_sys_openat+0x174/0x210 [ 274.685624][ T8839] ? __pfx___x64_sys_openat+0x10/0x10 [ 274.685643][ T8839] ? ksys_write+0x1ac/0x250 [ 274.685678][ T8839] do_syscall_64+0xcd/0x4c0 [ 274.685698][ T8839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.685716][ T8839] RIP: 0033:0x7f8e5fb8e9a9 [ 274.685732][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.685749][ T8839] RSP: 002b:00007f8e60a3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.685767][ T8839] RAX: ffffffffffffffda RBX: 00007f8e5fdb6160 RCX: 00007f8e5fb8e9a9 [ 274.685779][ T8839] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 274.685790][ T8839] RBP: 00007f8e60a3b090 R08: 0000000000000000 R09: 0000000000000000 [ 274.685801][ T8839] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 274.685812][ T8839] R13: 0000000000000000 R14: 00007f8e5fdb6160 R15: 00007ffd54948378 [ 274.685837][ T8839] [ 275.733146][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 275.780688][ T8865] Bluetooth: hci5: Frame reassembly failed (-90) [ 275.811368][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 276.877420][ T8901] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 277.731665][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.797042][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 277.797057][ T30] audit: type=1400 audit(2000000004.910:2670): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 277.828183][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 277.831961][ T5153] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 277.890747][ T30] audit: type=1400 audit(2000000005.000:2671): avc: denied { create } for pid=8913 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 277.891165][ T8914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8914 comm=syz.1.913 [ 277.913007][ T30] audit: type=1400 audit(2000000005.000:2672): avc: denied { create } for pid=8913 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 277.944986][ T30] audit: type=1400 audit(2000000005.060:2673): avc: denied { read } for pid=8913 comm="syz.1.913" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 277.968169][ T30] audit: type=1400 audit(2000000005.060:2674): avc: denied { prog_load } for pid=8913 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 278.019157][ T30] audit: type=1400 audit(2000000005.130:2675): avc: denied { read write } for pid=8917 comm="syz.1.914" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 278.049567][ T8918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32854 sclass=netlink_route_socket pid=8918 comm=syz.1.914 [ 278.066315][ T30] audit: type=1400 audit(2000000005.160:2676): avc: denied { prog_load } for pid=8917 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 278.085747][ T30] audit: type=1400 audit(2000000005.160:2677): avc: denied { create } for pid=8917 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 278.108130][ T30] audit: type=1400 audit(2000000005.160:2678): avc: denied { create } for pid=8917 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 278.133300][ T30] audit: type=1400 audit(2000000005.160:2679): avc: denied { execmem } for pid=8917 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 280.825956][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 281.184534][ T8987] netlink: 348 bytes leftover after parsing attributes in process `syz.3.937'. [ 281.366794][ T43] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 281.893577][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 281.904634][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.915061][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 281.926300][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 281.940630][ T43] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 281.949780][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.957942][ T43] usb 2-1: Product: syz [ 281.962376][ T43] usb 2-1: Manufacturer: syz [ 281.966998][ T43] usb 2-1: SerialNumber: syz [ 281.978234][ T43] usb 2-1: config 0 descriptor?? [ 282.200643][ T43] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 283.179981][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 283.179995][ T30] audit: type=1400 audit(2000000009.400:2860): avc: denied { read open } for pid=8994 comm="syz.3.939" path="net:[4026532949]" dev="nsfs" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.210416][ T30] audit: type=1400 audit(2000000009.410:2861): avc: denied { create } for pid=8994 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.458729][ T30] audit: type=1400 audit(2000000009.410:2862): avc: denied { connect } for pid=8994 comm="syz.3.939" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 283.534327][ T30] audit: type=1400 audit(2000000009.410:2863): avc: denied { create } for pid=8994 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.583973][ T30] audit: type=1400 audit(2000000009.410:2864): avc: denied { setopt } for pid=8994 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.736754][ T30] audit: type=1400 audit(2000000009.410:2865): avc: denied { getopt } for pid=8994 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.758058][ T5912] usb 2-1: USB disconnect, device number 15 [ 283.801692][ T30] audit: type=1400 audit(2000000010.670:2866): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.837386][ T30] audit: type=1400 audit(2000000010.670:2867): avc: denied { open } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.864068][ T30] audit: type=1400 audit(2000000010.670:2868): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.899012][ T30] audit: type=1400 audit(2000000010.700:2869): avc: denied { create } for pid=8982 comm="syz.1.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 285.499465][ T9030] ip6t_REJECT: ECHOREPLY is not supported [ 285.543764][ T9025] ======================================================= [ 285.543764][ T9025] WARNING: The mand mount option has been deprecated and [ 285.543764][ T9025] and is ignored by this kernel. Remove the mand [ 285.543764][ T9025] option from the mount to silence this warning. [ 285.543764][ T9025] ======================================================= [ 285.632831][ T9031] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 287.636245][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 287.835500][ T9056] FAULT_INJECTION: forcing a failure. [ 287.835500][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 287.848279][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.4.952 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 287.848302][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.848312][ T9056] Call Trace: [ 287.848318][ T9056] [ 287.848325][ T9056] dump_stack_lvl+0x16c/0x1f0 [ 287.848358][ T9056] should_fail_ex+0x512/0x640 [ 287.848386][ T9056] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 287.848416][ T9056] should_failslab+0xc2/0x120 [ 287.848433][ T9056] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 287.848460][ T9056] ? __alloc_skb+0x2b2/0x380 [ 287.848490][ T9056] __alloc_skb+0x2b2/0x380 [ 287.848516][ T9056] ? __pfx___alloc_skb+0x10/0x10 [ 287.848544][ T9056] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 287.848569][ T9056] netlink_alloc_large_skb+0x69/0x130 [ 287.848590][ T9056] netlink_sendmsg+0x6a1/0xdd0 [ 287.848615][ T9056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.848637][ T9056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.848661][ T9056] ____sys_sendmsg+0xa95/0xc70 [ 287.848684][ T9056] ? copy_msghdr_from_user+0x10a/0x160 [ 287.848710][ T9056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.848735][ T9056] ? __lock_acquire+0xb8a/0x1c90 [ 287.848759][ T9056] ___sys_sendmsg+0x134/0x1d0 [ 287.848786][ T9056] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.848811][ T9056] ? __lock_acquire+0x622/0x1c90 [ 287.848857][ T9056] __sys_sendmsg+0x16d/0x220 [ 287.848874][ T9056] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.848906][ T9056] do_syscall_64+0xcd/0x4c0 [ 287.848926][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.848943][ T9056] RIP: 0033:0x7f8a08f8e9a9 [ 287.848957][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.848973][ T9056] RSP: 002b:00007f8a09dfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.848990][ T9056] RAX: ffffffffffffffda RBX: 00007f8a091b6160 RCX: 00007f8a08f8e9a9 [ 287.849001][ T9056] RDX: 0000000000000000 RSI: 0000200000001040 RDI: 0000000000000006 [ 287.849011][ T9056] RBP: 00007f8a09dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 287.849029][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.849039][ T9056] R13: 0000000000000000 R14: 00007f8a091b6160 R15: 00007fffb8694598 [ 287.849062][ T9056] [ 288.348957][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 288.348989][ T30] audit: type=1400 audit(2000000015.250:2910): avc: denied { bind } for pid=9057 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.374861][ T30] audit: type=1400 audit(2000000015.250:2911): avc: denied { name_bind } for pid=9057 comm="syz.3.954" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 288.397217][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 288.885826][ T30] audit: type=1400 audit(2000000015.250:2912): avc: denied { node_bind } for pid=9057 comm="syz.3.954" saddr=0:0:ffff:ff7f::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 288.926695][ T30] audit: type=1400 audit(2000000015.460:2913): avc: denied { create } for pid=9057 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 288.948337][ T30] audit: type=1400 audit(2000000015.460:2914): avc: denied { create } for pid=9057 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 288.980206][ T30] audit: type=1400 audit(2000000015.460:2915): avc: denied { connect } for pid=9057 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 289.014332][ T30] audit: type=1400 audit(2000000015.530:2916): avc: denied { read } for pid=9057 comm="syz.3.954" name="radio5" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 289.061990][ T30] audit: type=1400 audit(2000000015.530:2917): avc: denied { write } for pid=9057 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 289.305356][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 289.797339][ T9072] xt_TCPMSS: Only works on TCP SYN packets [ 289.966322][ T30] audit: type=1400 audit(2000000016.460:2918): avc: denied { append } for pid=9067 comm="syz.3.958" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.091596][ T5947] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 290.144198][ T30] audit: type=1400 audit(2000000017.260:2919): avc: denied { ioctl } for pid=9076 comm="syz.1.959" path="socket:[20520]" dev="sockfs" ino=20520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.149406][ C0] ------------[ cut here ]------------ [ 290.175315][ C0] WARNING: CPU: 0 PID: 9078 at net/mac80211/ocb.c:63 ieee80211_ocb_rx_no_sta+0x583/0x710 [ 290.185172][ C0] Modules linked in: [ 290.189228][ C0] CPU: 0 UID: 0 PID: 9078 Comm: syz.1.959 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 290.199441][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.209664][ C0] RIP: 0010:ieee80211_ocb_rx_no_sta+0x583/0x710 [ 290.215968][ C0] Code: 48 c7 c2 80 c5 08 8d be 65 03 00 00 48 c7 c7 a0 c4 08 8d c6 05 4b b5 78 05 01 e8 c8 63 7f f6 e9 0b fc ff ff e8 ce 12 a3 f6 90 <0f> 0b 90 e8 25 ac 6d 00 31 ff 89 c3 89 c6 e8 fa 0d a3 f6 85 db 75 [ 290.235690][ C0] RSP: 0018:ffffc90000007a08 EFLAGS: 00010283 [ 290.241830][ C0] RAX: 000000000000022a RBX: ffff888056a7cd80 RCX: ffffc90002181000 [ 290.249827][ C0] RDX: 0000000000040000 RSI: ffffffff8b18d5a2 RDI: 0000000000000005 [ 290.257856][ C0] RBP: ffff888025e9e40a R08: 0000000000000005 R09: 0000000000000000 [ 290.265892][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888030e40e40 [ 290.273941][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888033a44500 [ 290.281957][ C0] FS: 00007f8e60a7d6c0(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 290.291022][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.297660][ C0] CR2: 000000110c3a8d5a CR3: 00000000343fa000 CR4: 00000000003526f0 [ 290.305687][ C0] Call Trace: [ 290.308976][ C0] [ 290.311851][ C0] ieee80211_prepare_and_rx_handle+0x55a1/0x77a0 [ 290.318231][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 290.323501][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 290.330209][ C0] ? lock_acquire+0x179/0x350 [ 290.334981][ C0] ? find_held_lock+0x2b/0x80 [ 290.339694][ C0] ? sta_info_get_bss+0x258/0x3a0 [ 290.344809][ C0] ieee80211_rx_for_interface+0x10a/0x1f0 [ 290.350561][ C0] ieee80211_rx_list+0x10d7/0x2980 [ 290.355759][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 290.361243][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 290.366242][ C0] ieee80211_rx_napi+0xdc/0x410 [ 290.371204][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 290.376713][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.381964][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 290.387799][ C0] ieee80211_handle_queued_frames+0xd5/0x130 [ 290.393847][ C0] tasklet_action_common+0x281/0x400 [ 290.399165][ C0] handle_softirqs+0x219/0x8e0 [ 290.403987][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 290.409296][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 290.414654][ C0] ? __ieee80211_tx_skb_tid_band+0x2dc/0x720 [ 290.420663][ C0] do_softirq+0xb2/0xf0 [ 290.424856][ C0] [ 290.427790][ C0] [ 290.430724][ C0] __local_bh_enable_ip+0x100/0x120 [ 290.435970][ C0] ieee80211_tx_skb_tid+0x176/0x4f0 [ 290.441188][ C0] ieee80211_mgmt_tx+0x14d2/0x2310 [ 290.446369][ C0] cfg80211_mlme_mgmt_tx+0x7d5/0x1660 [ 290.451797][ C0] ? nl80211_parse_counter_offsets+0x252/0x2d0 [ 290.457975][ C0] nl80211_tx_mgmt+0x9f9/0xd60 [ 290.462788][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 290.468115][ C0] ? nl80211_pre_doit+0x1b0/0xb10 [ 290.473209][ C0] genl_family_rcv_msg_doit+0x206/0x2f0 [ 290.478777][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 290.484897][ C0] ? bpf_lsm_capable+0x9/0x10 [ 290.489590][ C0] ? security_capable+0x7e/0x260 [ 290.494592][ C0] ? ns_capable+0xd7/0x110 [ 290.499043][ C0] genl_rcv_msg+0x55c/0x800 [ 290.503594][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.508662][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 290.514110][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 290.515603][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 290.519419][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 290.519466][ C0] netlink_rcv_skb+0x155/0x420 [ 290.540482][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.545570][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.550883][ C0] ? netlink_deliver_tap+0x1ae/0xd30 [ 290.556212][ C0] genl_rcv+0x28/0x40 [ 290.560207][ C0] netlink_unicast+0x58d/0x850 [ 290.565012][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 290.570330][ C0] netlink_sendmsg+0x8d1/0xdd0 [ 290.575151][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.580461][ C0] ____sys_sendmsg+0xa95/0xc70 [ 290.585275][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 290.590765][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.596099][ C0] ? try_to_wake_up+0xa2f/0x1680 [ 290.601077][ C0] ___sys_sendmsg+0x134/0x1d0 [ 290.605826][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.611044][ C0] ? __lock_acquire+0x622/0x1c90 [ 290.616050][ C0] __sys_sendmsg+0x16d/0x220 [ 290.620649][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.625799][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 290.630782][ C0] do_syscall_64+0xcd/0x4c0 [ 290.635338][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.641246][ C0] RIP: 0033:0x7f8e5fb8e9a9 [ 290.645725][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.665382][ C0] RSP: 002b:00007f8e60a7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.665605][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.673859][ C0] RAX: ffffffffffffffda RBX: 00007f8e5fdb5fa0 RCX: 00007f8e5fb8e9a9 [ 290.673881][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 290.673893][ C0] RBP: 00007f8e5fc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 290.673904][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.673917][ C0] R13: 0000000000000000 R14: 00007f8e5fdb5fa0 R15: 00007ffd54948378 [ 290.673944][ C0] [ 290.673956][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 290.673971][ C0] CPU: 0 UID: 0 PID: 9078 Comm: syz.1.959 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 290.673993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.674004][ C0] Call Trace: [ 290.674010][ C0] [ 290.674017][ C0] dump_stack_lvl+0x3d/0x1f0 [ 290.674052][ C0] panic+0x71c/0x800 [ 290.674079][ C0] ? __pfx_panic+0x10/0x10 [ 290.674105][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 290.674143][ C0] ? ieee80211_ocb_rx_no_sta+0x583/0x710 [ 290.674172][ C0] check_panic_on_warn+0xab/0xb0 [ 290.674200][ C0] __warn+0xf6/0x3c0 [ 290.674215][ C0] ? ieee80211_ocb_rx_no_sta+0x583/0x710 [ 290.674243][ C0] report_bug+0x3c3/0x580 [ 290.674269][ C0] ? ieee80211_ocb_rx_no_sta+0x583/0x710 [ 290.674297][ C0] handle_bug+0x184/0x210 [ 290.674318][ C0] exc_invalid_op+0x17/0x50 [ 290.674338][ C0] asm_exc_invalid_op+0x1a/0x20 [ 290.674355][ C0] RIP: 0010:ieee80211_ocb_rx_no_sta+0x583/0x710 [ 290.674383][ C0] Code: 48 c7 c2 80 c5 08 8d be 65 03 00 00 48 c7 c7 a0 c4 08 8d c6 05 4b b5 78 05 01 e8 c8 63 7f f6 e9 0b fc ff ff e8 ce 12 a3 f6 90 <0f> 0b 90 e8 25 ac 6d 00 31 ff 89 c3 89 c6 e8 fa 0d a3 f6 85 db 75 [ 290.674401][ C0] RSP: 0018:ffffc90000007a08 EFLAGS: 00010283 [ 290.674417][ C0] RAX: 000000000000022a RBX: ffff888056a7cd80 RCX: ffffc90002181000 [ 290.674429][ C0] RDX: 0000000000040000 RSI: ffffffff8b18d5a2 RDI: 0000000000000005 [ 290.674441][ C0] RBP: ffff888025e9e40a R08: 0000000000000005 R09: 0000000000000000 [ 290.674452][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888030e40e40 [ 290.674463][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888033a44500 [ 290.674482][ C0] ? ieee80211_ocb_rx_no_sta+0x582/0x710 [ 290.674512][ C0] ? ieee80211_ocb_rx_no_sta+0x582/0x710 [ 290.674542][ C0] ieee80211_prepare_and_rx_handle+0x55a1/0x77a0 [ 290.674570][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 290.674620][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 290.674652][ C0] ? lock_acquire+0x179/0x350 [ 290.674670][ C0] ? find_held_lock+0x2b/0x80 [ 290.674694][ C0] ? sta_info_get_bss+0x258/0x3a0 [ 290.674719][ C0] ieee80211_rx_for_interface+0x10a/0x1f0 [ 290.674752][ C0] ieee80211_rx_list+0x10d7/0x2980 [ 290.674785][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 290.674811][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 290.674840][ C0] ieee80211_rx_napi+0xdc/0x410 [ 290.674868][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 290.674893][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.674920][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 290.674949][ C0] ieee80211_handle_queued_frames+0xd5/0x130 [ 290.674975][ C0] tasklet_action_common+0x281/0x400 [ 290.675004][ C0] handle_softirqs+0x219/0x8e0 [ 290.675030][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 290.675052][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 290.675081][ C0] ? __ieee80211_tx_skb_tid_band+0x2dc/0x720 [ 290.675106][ C0] do_softirq+0xb2/0xf0 [ 290.675126][ C0] [ 290.675133][ C0] [ 290.675139][ C0] __local_bh_enable_ip+0x100/0x120 [ 290.675161][ C0] ieee80211_tx_skb_tid+0x176/0x4f0 [ 290.675187][ C0] ieee80211_mgmt_tx+0x14d2/0x2310 [ 290.675225][ C0] cfg80211_mlme_mgmt_tx+0x7d5/0x1660 [ 290.675252][ C0] ? nl80211_parse_counter_offsets+0x252/0x2d0 [ 290.675278][ C0] nl80211_tx_mgmt+0x9f9/0xd60 [ 290.675303][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 290.675339][ C0] ? nl80211_pre_doit+0x1b0/0xb10 [ 290.675370][ C0] genl_family_rcv_msg_doit+0x206/0x2f0 [ 290.675397][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 290.675428][ C0] ? bpf_lsm_capable+0x9/0x10 [ 290.675450][ C0] ? security_capable+0x7e/0x260 [ 290.675475][ C0] ? ns_capable+0xd7/0x110 [ 290.675498][ C0] genl_rcv_msg+0x55c/0x800 [ 290.675524][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.675547][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 290.675573][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 290.675592][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 290.675627][ C0] netlink_rcv_skb+0x155/0x420 [ 290.675647][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.675671][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.675702][ C0] ? netlink_deliver_tap+0x1ae/0xd30 [ 290.675725][ C0] genl_rcv+0x28/0x40 [ 290.675750][ C0] netlink_unicast+0x58d/0x850 [ 290.675775][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 290.675803][ C0] netlink_sendmsg+0x8d1/0xdd0 [ 290.675828][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.675859][ C0] ____sys_sendmsg+0xa95/0xc70 [ 290.675882][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 290.675910][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.675937][ C0] ? try_to_wake_up+0xa2f/0x1680 [ 290.675964][ C0] ___sys_sendmsg+0x134/0x1d0 [ 290.675994][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.676019][ C0] ? __lock_acquire+0x622/0x1c90 [ 290.676069][ C0] __sys_sendmsg+0x16d/0x220 [ 290.676087][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.676104][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 290.676148][ C0] do_syscall_64+0xcd/0x4c0 [ 290.676167][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.676186][ C0] RIP: 0033:0x7f8e5fb8e9a9 [ 290.676202][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.676218][ C0] RSP: 002b:00007f8e60a7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.676236][ C0] RAX: ffffffffffffffda RBX: 00007f8e5fdb5fa0 RCX: 00007f8e5fb8e9a9 [ 290.676248][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 290.676259][ C0] RBP: 00007f8e5fc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 290.676271][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.676282][ C0] R13: 0000000000000000 R14: 00007f8e5fdb5fa0 R15: 00007ffd54948378 [ 290.676305][ C0] [ 290.683812][ C0] Kernel Offset: disabled