last executing test programs: 15m46.395909768s ago: executing program 1 (id=2362): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x6, 0x4) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f46c501060467f9b6b40bfe0f146c398f11be78dc88af1d06e8e3f749"], 0x7) syz_emit_vhci(0x0, 0x0) r1 = syz_io_uring_setup(0x238, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r1, 0x633fe000) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r4}, 0xfffffffffffffd96) syz_init_net_socket$netrom(0x6, 0x5, 0x0) io_uring_enter(r1, 0x6256, 0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x800) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000001c0)={0xb6f0000000000, {0x2d, 0xffffffffffffffff, 0xfffffffffffffffa, 0x97c6, 0x9}}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80) poll(&(0x7f0000000100)=[{r6, 0x4084}, {r7, 0x200}], 0x2, 0x4ca) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x0, 0xc8, 0x17, 0xe, 0x6}}}, 0xb) poll(0x0, 0x0, 0xe2) syz_emit_vhci(0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000000)={{0xcb, 0x8c}, {0x2, 0xff}, 0x6, 0x1}) 15m45.351081185s ago: executing program 1 (id=2364): r0 = socket$inet6(0xa, 0x2, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000040)={0x0, "f713ce12c1fe3c9a2cd6b337dad1ce400cd698adfc4a6bee479ccd9b275e51e4121209972d25880c4f43648580c5c3893b826beb9a17136643db3077a0b7cf3f"}, 0x48, 0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x75, &(0x7f0000000440)=""/117, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x7ab6c1ae, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x4e0, 0x2c, 0x8, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x4}, {}, {0x5, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x4b0, 0x2, [@TCA_FLOW_POLICE={0x4ac, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x7, 0x1ff, 0x5, {0x9, 0x2, 0x1, 0x0, 0x9, 0x5}, {0x81, 0x2, 0x5, 0x0, 0x6b4b, 0x7fff}, 0x8, 0x4, 0xb}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x9, 0xe, 0x5, {0x2, 0x1, 0x0, 0x7ff, 0x5, 0x5}, {0x5c, 0x0, 0xfff0, 0x1, 0x9, 0xfffffc01}, 0x770, 0x3, 0x6d8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81ed}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0x6, 0x9, 0xe9c, 0x1, 0xffff8000, 0x7, 0x3, 0x4, 0x1, 0x3, 0x3, 0xde, 0xa, 0x8, 0x0, 0x5, 0x4, 0x4, 0x0, 0x5, 0x202, 0x1cb, 0x0, 0x1, 0x7, 0x1, 0x6, 0x80000000, 0x1, 0xfff, 0x1d, 0xa, 0x3, 0x1, 0x6, 0x7, 0x7, 0xf4e0, 0x2, 0x6410, 0x800, 0xfffffffe, 0x6, 0x8, 0xf27, 0x2, 0x4, 0x7, 0x1, 0xfffffff9, 0xff, 0x4, 0x0, 0x1, 0x7, 0x5, 0x9d, 0xc7, 0xfffffff9, 0x74f3, 0xfffffffc, 0xd, 0x2, 0x2, 0x80000000, 0x9, 0x4, 0x4, 0x6, 0x9, 0x5, 0xefb2, 0x2, 0x6, 0x3, 0x7, 0x9, 0x1b, 0x4, 0xb, 0x7, 0x6, 0x228, 0x7, 0x819, 0xe, 0xffffffff, 0x400000, 0x3, 0x8, 0x3e95, 0x8, 0x9, 0x0, 0x9, 0x40, 0x11, 0x7, 0xfffffffb, 0xcc4, 0xa13c, 0x689c, 0x1, 0x9, 0x40, 0x5, 0xffffffc0, 0x7, 0x7, 0xffffff21, 0xee, 0x9, 0x81, 0x3, 0x94, 0x8, 0x2, 0xff, 0x2, 0xd44, 0x8, 0x5, 0x3, 0x53f6, 0x2, 0x2, 0x80000001, 0x4, 0x5, 0x2, 0x7, 0x2, 0x6, 0x3, 0x5, 0x8, 0x5e9, 0x15, 0x9, 0xfffffffa, 0xffffffbf, 0x5, 0x4c78, 0x9, 0x7, 0x0, 0x7a5, 0x3, 0xbd, 0x9, 0x9f0e, 0x4, 0xffffffff, 0x7884, 0x3, 0x2, 0x3, 0x1, 0x1ff, 0x174, 0x3d, 0x7, 0xffff, 0xfffffff9, 0x0, 0x0, 0x6, 0x7, 0xc, 0x6, 0x401, 0x3ff, 0x1, 0x7, 0x5, 0xfffffff7, 0xffffff56, 0x2, 0xffff266e, 0x0, 0x3, 0x3, 0xb, 0x3, 0x3, 0x6, 0x1ff, 0x2, 0x4, 0x10, 0x0, 0x7, 0x9, 0x976f, 0x4, 0x2d6e077a, 0x3, 0x3, 0x4, 0x4, 0xffff, 0x1, 0x0, 0xa, 0x4e, 0xb, 0x63e, 0xbb9, 0x847, 0x5, 0x4, 0x7ff, 0x7800, 0xe, 0x2, 0x2, 0x23cf, 0x8, 0x2, 0x0, 0x3, 0x200, 0x5, 0x0, 0x7fff, 0x0, 0x8b, 0x7, 0x3, 0x7, 0xa, 0x44, 0xfffffffb, 0x4, 0x1000, 0xc, 0x8, 0x8, 0x1000, 0x160b, 0x220f218a, 0x80, 0x6, 0x7f, 0x6, 0x4, 0x3800000, 0x4, 0xe0, 0x7, 0x5, 0xffffffff, 0x8f23, 0x85]}]}]}}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000006800040025bd7000fddbdf2502000100a64f460318000500", @ANYRES32=0x0, @ANYBLOB="14000600fc020000000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="0c007a8008000400060000006c007a800c0003"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000500)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 15m44.385714067s ago: executing program 1 (id=2369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 15m44.196046423s ago: executing program 1 (id=2371): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000180)=0x5, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = fanotify_init(0x10, 0x1000) fanotify_mark(r3, 0x1, 0x40000002, r0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000100)=[{0x5, 0x3, 0x0, 0x0, @time, {}, {0x0, 0x3}, @queue={0x7, {0x7, 0xfffffff7}}}], 0xfd07) capget(&(0x7f0000000180)={0xf1504}, &(0x7f0000000240)={0x6797, 0x4, 0x9, 0x1, 0x19, 0x507}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000340)={0x80, 0x5, 0x100010, 0x2, 0x9, 0xa9}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r6, &(0x7f0000000100)=""/107, 0x6b) write$nci(r6, &(0x7f0000000100)=ANY=[], 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f00000003c0)="8610cfd9fad36b27a4e9e4ba9801f716c3ea60f843fdd28a51e452cd99ecda2a9e5463a2d0fd879887ceb44147eefc", 0x2f}], 0x1) read$FUSE(r0, &(0x7f00000012c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000280)={0xa0, 0xfffffffffffffff5, r7, {{0x6, 0x1, 0x7, 0x2, 0x89, 0xfffffffc, {0x5, 0xffffffffffffd2b8, 0x3, 0x7, 0x80000001, 0x8, 0x200, 0x2, 0x8da, 0x2000, 0x9, 0xee01, 0x0, 0x9e000000, 0x5}}, {0x0, 0x10}}}, 0xa0) 15m44.010485236s ago: executing program 1 (id=2373): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25030000003000018014000400ff010000000000000000000000000001060001000a77"], 0x44}}, 0x40440d0) 15m43.892926228s ago: executing program 1 (id=2374): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x1000) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000000)={0x6000, 0x80600}) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x48090) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r8 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='syz1\x00', 0xfffffffffffffff9) keyctl$setperm(0x5, r8, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fa32a328bb46f9b4ad66621684"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 15m27.096456558s ago: executing program 32 (id=2374): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x1000) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000000)={0x6000, 0x80600}) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x48090) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r8 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='syz1\x00', 0xfffffffffffffff9) keyctl$setperm(0x5, r8, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fa32a328bb46f9b4ad66621684"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 13m20.355817194s ago: executing program 4 (id=2877): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$UHID_CREATE2(r0, 0x0, 0x138) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x0, &(0x7f0000000200)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000240)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed07072e0f01c248b820450000000000000f23d00f21f83500000001360fc75eecc46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x6a}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) close(r2) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="e3581f0ff14ad700"], 0xa) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 13m19.794499828s ago: executing program 4 (id=2878): r0 = socket$inet(0x2, 0x1, 0xf7) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001a00), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x50) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmmsg$inet(r4, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x48, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25f, @val={0x10, 0x1, 0x50}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x187b, r3}) r7 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getpeername$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) 13m17.116153881s ago: executing program 4 (id=2883): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000001c0)) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r6}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000080)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000100)={0x10, 0x0, r6}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x1f00, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x10000, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 13m16.091041421s ago: executing program 4 (id=2886): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000040)={0x0, "f713ce12c1fe3c9a2cd6b337dad1ce400cd698adfc4a6bee479ccd9b275e51e4121209972d25880c4f43648580c5c3893b826beb9a17136643db3077a0b7cf3f"}, 0x48, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0, 0xfeffffff}, 0x38) 13m15.620531633s ago: executing program 4 (id=2887): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) fsmount(r0, 0x0, 0x2) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004780)=@newchain={0xfe0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_basic={{0xa}, {0xf98, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BASIC_ACT={0xf88, 0x3, [@m_ct={0x110, 0x8, 0x0, 0x0, {{0x7}, {0x4}, {0xe5, 0x6, "d35bddb5672619c462256d3d55c9579f5ee1ebaa4afca31d0775c518f16bd926402bef2c3d261639f23cc528f612da3751f2836939acfed8c866ba3ead6dd2c8d9b3f4ebca4a87548184c2630e64ec1c366677d7813dc542f96cab0918ded86dc6ab34a67a74caf8b0871b66725be92368d24cf20897bae6e2fcf69228b5f4d327c1083135d5bbd94c3ab0e2f66cfcd976a43c6201d4f54986969a06a0a2671fce6b7a6261add3478caf365a7a0f6fbe8d6f84f8b3ac766c0a6d8d47ccaa9b9567d3d3608894441af306f7a56d1664f60e79e3f45887c4a4bc780340f18c492915"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0xc0, 0xb, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x4ee, 0x1000000f, 0x0, 0x4a8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x1, 0x3ff, 0x19}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x8, 0x3, 0x10}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1d06, 0xffff, 0x10000000, 0x8, 0x8}, 0x7}}]}, {0x1d, 0x6, "75930b8ff1b531ecc792cadd0b3b757b8cc32800f47e2509ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_xt={0xac, 0x9, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xff}]}, {0x4d, 0x6, "2b86d8a0855d53c9c1d5e9c0f03b24e55ed58a983e0bbccbe93c7e9af9731409f820eaf696e9ac161e004d136fe3ae2822e09a3fee047e168435072f6e19df00b3539624181ab52537"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xb8, 0x5, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x585}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x400, 0xffffffffffffffff, 0x4, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe03}]}, {0x5d, 0x6, "3b049fbcd63edf198cf3ba8292c40f0cfb672f4cf9bd7994e3b22ca79bcc7171133e9952be2642ec05b861db941ac4019d8da66edafb34831388fa3db7d001b5b41eca955870c4dc387c7e68c2822ab77fff7762094a39ad6e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xf0, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd0d}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0x99, 0x6, "64daa95cc856578ec6202b182c3ec5a3a280dbb17041d9426035382fcd57b7535f2bcc5941440ba84e6346374487a97170af959eefc76f6c24eef24508d4a2f48beb75e27f73b572dd27cafeb4cee9f49684b8e11e37373263f17028cddccc958d3fbe03ee65d9f719d5b7c26ec5461d2fd70163c970851a50f120f7402ddc675742c4f61bb2b039f5562f3243310173459f8bf210"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x178, 0xe, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0xfff, 0x1}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x4, 0xe5ee, 0x2}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9c9, 0x3, 0x7, 0x8}, 0x36}}]}, {0xf5, 0x6, "03d66ddc424341c3b90710197f43d36cc6fb61b3e6d8a6bbbc2c6690e5f584a847500c7be09ba0a12c1d9d8021c8cbf18cbbede9f93e871be9eb84228d5567eaa49986b4772dbb2ff7aee5720e54cd910f024d9aacaf4e9648c4e7137d6ec8a1da9091cd1e740cfeda75f7c39398c84c09761e66467be927a311bff1516ca6a39c33bcdb2e789acfc19389454f76e9f7c71eef15c27cb2d184e662281dd2ec6a3dbc7d13eee79573a487aeebbcc0ebec25be68a84e1fc074ff1a291707a4f424ae50d8a03e1b42cf703f33e2e30a010f5bfcf1e67b5c9c35931da375f0f3df1a32c90169d69ea111bf2e50a052eeb0c8e9"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x448, 0xe, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffffffc, 0xe, 0x2, 0x5, 0xea6, 0x6, 0x2, 0x2be, 0x92, 0x1, 0x9, 0x8, 0x6, 0x1, 0x0, 0x3, 0x7f, 0x6, 0x1, 0x1, 0xfffffffc, 0x1050, 0x9, 0xb, 0x6, 0x6, 0x0, 0x2, 0x80000000, 0x4fb, 0xe, 0x2, 0x5, 0x1, 0x8dd2, 0x7, 0x401, 0x0, 0x8000, 0x7, 0x0, 0x3, 0xab, 0x100, 0x80000001, 0xffff, 0x85, 0x5, 0x2, 0x2, 0xfff, 0x8001, 0x2, 0x400, 0x10000, 0x9, 0x5, 0x8, 0xfffffffb, 0x401, 0xe7, 0x7, 0xe, 0x6, 0x4, 0x400, 0x7, 0x9, 0x400, 0x6, 0x3, 0x100, 0x6, 0x15, 0x8e8, 0x3, 0x3fffc0, 0x0, 0x9, 0x8, 0x2, 0x4, 0x5c3, 0x1, 0x400, 0xffffac3b, 0xfffffff7, 0x80000001, 0x4, 0x7, 0x4, 0x800, 0x7c84a000, 0x6, 0x1, 0x2, 0x8, 0x7, 0x3, 0x4, 0x4, 0xffffffff, 0x1, 0x0, 0x3, 0x8, 0x7fffffff, 0x0, 0x0, 0x1, 0x8, 0xbb88, 0x0, 0x1, 0x5, 0x5, 0x5, 0xe6df, 0x4, 0x7, 0x401, 0x6, 0x9, 0x2, 0x80, 0x7fffffff, 0x4, 0x9, 0x0, 0xefc1, 0x0, 0x8, 0x3, 0x1000, 0xbf24, 0xda, 0x7f, 0xd, 0x4, 0xff, 0xfff, 0x9, 0x8, 0x5e, 0x4, 0x7, 0x0, 0x7, 0x4, 0x1353, 0x1, 0x3, 0x7, 0x5, 0x7d1, 0x8000000, 0x0, 0xc6d, 0x5, 0x41, 0x6, 0x8, 0x2, 0x6, 0x6, 0x7, 0x4, 0x1, 0x4, 0x4107, 0x6, 0x9, 0x1, 0x9, 0x7, 0x2268, 0xfffffff9, 0x0, 0x6ca5, 0x0, 0x9, 0xc0e3378a, 0x6, 0x0, 0x3, 0x6, 0x3, 0xfffffff9, 0x1000, 0x200, 0x9, 0x5, 0x3ec, 0x7, 0xe, 0x0, 0x10000, 0x8, 0x69, 0x4, 0x8, 0x0, 0x0, 0xfffff1be, 0x8000, 0x8010, 0x7, 0xb, 0x0, 0x6, 0x71d1, 0x2, 0x40, 0x37b, 0x4, 0x0, 0x9e, 0x0, 0xe, 0x1, 0x1ff, 0x9e8, 0x6, 0x5, 0x3, 0x400, 0x7b, 0x7, 0x9, 0x5, 0x0, 0x4, 0x800, 0xee, 0x80, 0xfffffffd, 0x6, 0x80000005, 0xfffffff8, 0x3, 0x80000001, 0x10001, 0x7f, 0x5, 0xfffffff7, 0x80000000, 0x101, 0x401, 0x7fff, 0x8, 0xcc, 0x6, 0x8, 0x0, 0x7]}]]}, {0x15, 0x6, "2cef8b5f68fe11e1cd3e54eac1263db4f9"}, {0xc, 0x7, {0x1, 0xf7c025427185a06d}}, {0xc}}}, @m_skbmod={0x5a0, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x571, 0x6, "e52bea1ff279eccbc4b022a6a42ce645909505199f025a79fc5126551ab26b9a8aca4a9efd44a8381830f6cdd386b03da19a695dd4709d72216387670ec252669083c497c64f8376ca4317836ac745e07ff832ebae8fad5614a3cfbfb9c97337ef2b603e923e2cebecc466a7f2187ea49d8b17d4f98985c5379fc8d7de3f02fb7373e3e1348332076da2351aeb3b6566a000f9c05f2719d470708ac0b38576c0016016dc4657aa2ea07f7e140731493bc5cd046c28e3c7c8a588ed2d95ad37f743c8512d56df7303e0899f9665cda647350226378ab6a5e8969eb04858751cb1b1df922dfbb8d22b44ad7808d06750f259d17a017b7c4ebb93748fbadb2c07c54ba17eb63cc61d055de5345afd7c71bfaa7fb0ee35dabcf55c76b2ac3fbd9c2d87657cd358358f6d968a3feabb515d6fff3b8ba81cef5f36257b83278c7ffb8a18e5134d085bebac965e652261a4ee51fa5e0bf79aa5cd78fc5b872fc1376addcf289637c28f08e53e1d03884dafa2bb112828edcf10dd4028f1788698506821e6ad0a4f9abb8ac065727f5dc77b655d01fbd756f36072be67d6a146fcb979b95061263674583a84a1834bb4a9f5e66b7937bc87ad0fe5483f50cd245a6cf948106fd2d7a850917b9e805f0fa0d53cbf02f701a51c05512275d1440d90af9d40a40047becff872fd430d28cf2ea3460b1b29649a381ecc9aeaa2e69cc60b653568dacae95f5d3b8672174b6f1ead0ac8d5c88df8ccfef08253e4ffb9c7940d4c2985eab866daa6a70d4f53e7d5e54bfecefc835d34b3ef239c7cf28cef77a1aac2ebe2206b8ae581c2661422725c0709a8ee6b506c144fe117eed5abf828f0d47de47efe71877092291f022c5ba77dfa72d542363a1d08043764731e3bb94a2c865bc726327748f6701ebf4b0c488d09bb500bdfc0372eab24ecd98d1f19e2f6e1c5939ea677d73d027e5a0c0e4299f8b2824dd5c621af4e277142057d1d2dd597da764fc6dafbd10da6f7bf3cd91197d42744cb612d15c81a67573d4fa2d1af32e6d936294f0dbfc5aaeb3048f6163d419dc0a6e6e9cce26dcecedc55a563486b3205abf2e34c6c1a69b6eecd0f462a036c47f2cd2726e00e5f45e11c55a44e9126f6e3d73f02d00bf37b65876edc434f4fbc756f0cc23d45bd98ab5df196fcde602a7e1606de33d11485c3f33f69fb7b3ded5d9dba4578f55121f04e792252aa26a4a8168a1aadc64b49d22869e79b532dd3b3d82d7dcd08dbcb41eaf7d50460efa89b6cc98b9e8f764f2e6f98284a681103e41591ae6e72f4464bca07d2a6efce9d133bace4c50a890e3a310e6bdc54ecbc2e4374efd49889ae1b43781f682149ba1064ce07ee6c2af98fb51fd83efec0c8455fa41a23c3862c9010a5faf844df76de87ebee7a3a99c41eb8b400d2ab0a3dcc979b0d749666f1e8eac2b0679f67d434ff206d6e65b98278d13b11dd8028b9b3bbd72b8cbce78e115bc7585699d544ef425ea2c5616e6ee6b75815a74693cc12e9296278a150010c1424ae8043960e8c6de109054a6e8dc64fa3fcb22643fa639ce2a0c9d6b7b04bce5875d2d545264dbad840b79040c13f9d5942f71b381f71a7060c6e91c505106635b611203ee63a8e7fd48a1c5bc2a02635f6a301e34ddc4f5bed271a82023ea51143eb364a316f6efb1271d48616b8a8d1117b955a1f09278b8dfbb3df35066322e2e8c1d3eb2eb6b40619f39bb609c3c073923e647ff42e6dd33e52df493448ff4c5e9ac5e7fabda89a8a4282d139d89eafb64850bf3715b69712661427e4389baae1983fa8e3436fd90ff3f073ff2a83bb62eaec3d9a55af6f95dfa8bfff95ff11a9b7f6787f8db6a93932b4a7cbeb6d5e2c7edea1a51d5827bc2cb8abbe888908478e1fc9f562f7e927228d814a022a62f01d033df5753ac477d3194ae26cb2ec68e42beeec46e94eba338da67d5b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xfe0}, 0x1, 0x0, 0x0, 0x80}, 0x44000) move_mount(r0, &(0x7f0000000200)='\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x117) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_emit_ethernet(0x2a, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb86dd00010800"], 0x0) 13m14.511986665s ago: executing program 4 (id=2891): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/14, 0xe}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f0000000580)=""/133, 0x85}], 0x5}, 0x9}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0xf, 0x80000, 0xffffffff) getpeername$packet(r3, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6(0xa, 0x3, 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a86dd4ff900f500140600fe8000000000000000000000000000ed0080000000000000e1000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="010000000000130400000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000440)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18) 12m57.966580914s ago: executing program 33 (id=2891): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/14, 0xe}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f0000000580)=""/133, 0x85}], 0x5}, 0x9}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0xf, 0x80000, 0xffffffff) getpeername$packet(r3, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6(0xa, 0x3, 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a86dd4ff900f500140600fe8000000000000000000000000000ed0080000000000000e1000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="d5f1aa5f36fa8433671c0527955a844f78cf725f3bee57248943d8db86954e62741c5b4e8986a1aab8bf435eb82b642095310b5d9ad14dbf831339a894d03ba8a2c18812398ff2163acffccc7a0695ea446bf1ea0f6d25b04637ca57256247b7ca0abf57632fe1ee345bb4c8fd405c77cca0ed0f20505b3a378934e1bbf1318687f4605fdb84598d647e9c0998ac07e6bc2e51118dd44ade03acb58fda35930f644b0039b89d7e8216889f88d01ed51dfb6086391ee764bbd8c33e7e46b2ab7effd06c264f192be0017fceb89117d86b4d817ebab44aaf35a5dfda4e39b5a377bdddc77f81d3abfb2606bc6f3f09b6f73e1f7cd65acd2764ea55ba7e50de", @ANYBLOB="010000000000130400000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000440)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18) 9m1.455930099s ago: executing program 6 (id=3603): lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x361, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000"], 0x118}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m1.393686218s ago: executing program 6 (id=3604): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x88, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x800) 9m0.335069418s ago: executing program 6 (id=3608): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000000000019000080ff0f000008000000030000006e2fedd7010000000000000002000000000000800100000005000000027a9762a91dff727100004000080000b45f0000070000000104000072887697ca6316864345b43a2d8af41bb6d631ba603f35113fbf346aa87b413293f854f38727074cc2e52558fba36687cf1e907a4844677224b74022164508883b"]) prlimit64(0x0, 0xf, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x200000c5) recvmmsg(r5, &(0x7f0000000400)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/41, 0xae}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f00000003c0)=""/47, 0x2f}, {&(0x7f0000000580)=""/87, 0x57}], 0x5, &(0x7f0000000680)=""/184, 0xb8}, 0x10001}], 0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$key(0xf, 0x3, 0x2) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x25, 0x2, @tid=r8}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf2a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(r6, 0x0, 0x80) 8m56.024562179s ago: executing program 6 (id=3618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) prlimit64(0x0, 0x9, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x400005) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x6ffffffffffffffe, 0x0) read$msr(r3, &(0x7f000001b000)=""/102400, 0x19000) (async, rerun: 32) open_tree(0xffffffffffffff9c, 0x0, 0x0) (rerun: 32) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x49) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x8080, 0x81) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000140)={0x10}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (rerun: 64) syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 8m55.750988634s ago: executing program 6 (id=3621): r0 = socket$igmp(0x2, 0x3, 0x2) userfaultfd(0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r5 = getpid() setpriority(0x0, r5, 0x6) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x1f000000, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf6bb9bbbbbbb0800450000300000000006019078ac1e000145c0fffa00640005ea320000e0000002d02e6184d05363f15920701b66191fc3ff00000144ca5a08752d4aaa37692daf1925e875ace3c30280274a0596aaffb618364440bd0764429c287c952054fa1a43ece8d90b53364770139d39b8a40b9a46e8d71c3f8b9f723fa5a1ffe107af0a9b9375e29159f64355c28d"], 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01001e010000340200400600000008000d005000000008000d0030000000080003002e00000008000e0000000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 8m54.738809428s ago: executing program 6 (id=3624): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) setpriority(0x2, r0, 0x1000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x6, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f000001ac80)='./file0\x00', &(0x7f000001acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000001ae80)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f000001af80)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000001afc0)={0x0, 0x0, 0x0}, &(0x7f000001b000)=0xc) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f000001b040), 0x2, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) r7 = eventfd(0x2) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f000001b080), 0x2, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000001b0c0), 0x4) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000001b100), 0x2, 0x0) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r12 = openat$incfs(0xffffffffffffffff, &(0x7f000001b140)='.log\x00', 0x20100, 0x88) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f000001b180)={0x4, "b863ab28937a84a59011105d9f2be3415a0bca11a19db87e4195b8110c794450", 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001b240)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="af0dfd4709e9992a6a2edd4b3f09b42760dfaadc026f24424f5ffa990d8061403e4f642c2a539ddea4c775645620585f0a49998a22b333e25024647dbfd581a1d3a6d00422453022d2c3d93f8c54625467dc7a583f841ca560fe559b52f8d1b38ddba83a4db78d0463d3b20e3199a315c339e6fe6960b4b1c593a56620c8043dbf039632e65a7a8a2d66ff0c276a7f8c8a0e0072", 0x94}, {&(0x7f0000000440)="64d662055d91889cea3b039b7a1d1fee5acb585c4f0eefdda5cc55b9ca9120fc200cead362b038cdcf8cbf68317add60f604da", 0x33}, {&(0x7f0000000480)="3710676f30a19e549ed27a9c65f8e2e196c0d5d7e2b34e39dfd57b1414c540fe9f4fe03d75b8c382eb73b6f96cdaa93adbcb806ec985d144224a2e2631651a5d3da806be568d8b915b0c23e92f1bafbfe0e8f5fcf55c607f84cdd959132b18a75ca70d63cf1ca316aeea7cb68efef90a07377b846fe66bea45d777684f8340b72ac932f2", 0x84}, {&(0x7f0000000540)="4571ccbd0dceab246f433cd1bbc1f2f7306ba4ef7f547a6a6a3704dabc0ce517b30f2e79f11887069e4798c99d", 0x2d}, {&(0x7f0000000580)="502f5d45f03653fed405a2fa4ccd167c09ee557ba82dc8c0caa345ec8e04049e923ef0bc2fcdd0d9a3e292b43f1048ca37385500ee713213", 0x38}, {&(0x7f00000005c0)="eb10bf2007ba0128014cbb1755318ef03e91f25dae8332bd3d1ac2c83f428ee35e3e28cc3605dcbb5c980b4697ad0964922abaf32e54109477ac6b9dd057fdd750b51e252e6dbf2ac72ae22fad10af6ff9cc46cf4093408754329305e8e4d231faa2c3d9145253063bf3c7091005178b879d0725ecbaff83046a7d4932711b6b3a18a85aee8a5ce7774ee0e636db0c53561646bd13cc52706b", 0x99}, {&(0x7f0000000680)="db3773be783fef1d2216df9c37ebeb19ea2d236a9cb0659ef56755aef44e7aee88eacc77432a2038106a50edd340677cde26f7a6a31337e23fec8412ae6a54b313d456a775a11dd138c23a11283e", 0x4e}, {&(0x7f0000000700)="152df7acc8095d4323afe450bb846822d274961f8fe84a9582c43db8d3a08064ad43a35c24f7be8a686eb3ed95f221381d35ccaf4227244409fdbdeaa419cff0aac11a6e6c3e9bb43c384092be9e69d71f49f39f", 0x54}], 0x8, &(0x7f000001aac0)=[@cred={{0x1c}}], 0x20, 0x4000}}, {{&(0x7f000001ab00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ac40)=[{&(0x7f000001ab80)="d16bdcd9fd13e1e328892011a78cc11f9c1701351681979d4ff1ab19df7a7ccfcd7bae7e23038567069ad9cb161967920dc51e79342f08087a9296e492d9db1347c34fbe54cda4613e6086e65d722a13f9a3cc85c3fb7afded956b3e9e88994bba4a17aa8ff71ef7eaa5dc9851feb26dbb008eaec89e63a535eed359d64f522c75fffea5b13e2ed05ba61fab460d40b4412f0fbac6b4a323e8f1f63dbf30187c58a42e325f7966186cda9a93efada973", 0xb0}, {0xffffffffffffffff}], 0x2, &(0x7f000001ad40)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r2}}}], 0x20, 0x4048080}}, {{&(0x7f000001ad80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ae40)=[{&(0x7f000001ae00)="b69d66bbbd655664bed924", 0xb}], 0x1, &(0x7f000001b1c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r8, r9, 0xffffffffffffffff, r10, r11, r12, r13]}}], 0x80, 0x40081}}], 0x3, 0x1) r14 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r14, &(0x7f0000001a40)=""/102392, 0x18ff8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r15, 0x407, 0x0) vmsplice(r15, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r15, 0x407, 0x2000000) 8m38.526257597s ago: executing program 34 (id=3624): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) setpriority(0x2, r0, 0x1000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x6, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f000001ac80)='./file0\x00', &(0x7f000001acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000001ae80)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f000001af80)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000001afc0)={0x0, 0x0, 0x0}, &(0x7f000001b000)=0xc) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f000001b040), 0x2, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) r7 = eventfd(0x2) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f000001b080), 0x2, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000001b0c0), 0x4) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000001b100), 0x2, 0x0) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r12 = openat$incfs(0xffffffffffffffff, &(0x7f000001b140)='.log\x00', 0x20100, 0x88) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f000001b180)={0x4, "b863ab28937a84a59011105d9f2be3415a0bca11a19db87e4195b8110c794450", 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001b240)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="af0dfd4709e9992a6a2edd4b3f09b42760dfaadc026f24424f5ffa990d8061403e4f642c2a539ddea4c775645620585f0a49998a22b333e25024647dbfd581a1d3a6d00422453022d2c3d93f8c54625467dc7a583f841ca560fe559b52f8d1b38ddba83a4db78d0463d3b20e3199a315c339e6fe6960b4b1c593a56620c8043dbf039632e65a7a8a2d66ff0c276a7f8c8a0e0072", 0x94}, {&(0x7f0000000440)="64d662055d91889cea3b039b7a1d1fee5acb585c4f0eefdda5cc55b9ca9120fc200cead362b038cdcf8cbf68317add60f604da", 0x33}, {&(0x7f0000000480)="3710676f30a19e549ed27a9c65f8e2e196c0d5d7e2b34e39dfd57b1414c540fe9f4fe03d75b8c382eb73b6f96cdaa93adbcb806ec985d144224a2e2631651a5d3da806be568d8b915b0c23e92f1bafbfe0e8f5fcf55c607f84cdd959132b18a75ca70d63cf1ca316aeea7cb68efef90a07377b846fe66bea45d777684f8340b72ac932f2", 0x84}, {&(0x7f0000000540)="4571ccbd0dceab246f433cd1bbc1f2f7306ba4ef7f547a6a6a3704dabc0ce517b30f2e79f11887069e4798c99d", 0x2d}, {&(0x7f0000000580)="502f5d45f03653fed405a2fa4ccd167c09ee557ba82dc8c0caa345ec8e04049e923ef0bc2fcdd0d9a3e292b43f1048ca37385500ee713213", 0x38}, {&(0x7f00000005c0)="eb10bf2007ba0128014cbb1755318ef03e91f25dae8332bd3d1ac2c83f428ee35e3e28cc3605dcbb5c980b4697ad0964922abaf32e54109477ac6b9dd057fdd750b51e252e6dbf2ac72ae22fad10af6ff9cc46cf4093408754329305e8e4d231faa2c3d9145253063bf3c7091005178b879d0725ecbaff83046a7d4932711b6b3a18a85aee8a5ce7774ee0e636db0c53561646bd13cc52706b", 0x99}, {&(0x7f0000000680)="db3773be783fef1d2216df9c37ebeb19ea2d236a9cb0659ef56755aef44e7aee88eacc77432a2038106a50edd340677cde26f7a6a31337e23fec8412ae6a54b313d456a775a11dd138c23a11283e", 0x4e}, {&(0x7f0000000700)="152df7acc8095d4323afe450bb846822d274961f8fe84a9582c43db8d3a08064ad43a35c24f7be8a686eb3ed95f221381d35ccaf4227244409fdbdeaa419cff0aac11a6e6c3e9bb43c384092be9e69d71f49f39f", 0x54}], 0x8, &(0x7f000001aac0)=[@cred={{0x1c}}], 0x20, 0x4000}}, {{&(0x7f000001ab00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ac40)=[{&(0x7f000001ab80)="d16bdcd9fd13e1e328892011a78cc11f9c1701351681979d4ff1ab19df7a7ccfcd7bae7e23038567069ad9cb161967920dc51e79342f08087a9296e492d9db1347c34fbe54cda4613e6086e65d722a13f9a3cc85c3fb7afded956b3e9e88994bba4a17aa8ff71ef7eaa5dc9851feb26dbb008eaec89e63a535eed359d64f522c75fffea5b13e2ed05ba61fab460d40b4412f0fbac6b4a323e8f1f63dbf30187c58a42e325f7966186cda9a93efada973", 0xb0}, {0xffffffffffffffff}], 0x2, &(0x7f000001ad40)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r2}}}], 0x20, 0x4048080}}, {{&(0x7f000001ad80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ae40)=[{&(0x7f000001ae00)="b69d66bbbd655664bed924", 0xb}], 0x1, &(0x7f000001b1c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r8, r9, 0xffffffffffffffff, r10, r11, r12, r13]}}], 0x80, 0x40081}}], 0x3, 0x1) r14 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r14, &(0x7f0000001a40)=""/102392, 0x18ff8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r15, 0x407, 0x0) vmsplice(r15, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r15, 0x407, 0x2000000) 12.435268074s ago: executing program 7 (id=5491): r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000000)="a4feb8a2d4c456c40d1c3a1c82b8ee7c87f091f3366d9ec8864334fddd3ae6270d28c7c6e3de78f55e5f74d33aa616782be628d6966c", 0x36) r2 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xff01, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) r4 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000040)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x10000) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x2000007, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200090509000000000000090585"], 0x0) 9.078335426s ago: executing program 7 (id=5505): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setfsuid(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') shutdown(0xffffffffffffffff, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x110, r1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, r2, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@phonet={0x23, 0x6, 0x0, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="6fb5c3b0fd119a1077ea7770b07c0e1cc4d9943ba2d7da4a40b8a24808017809192f6c04269dcfdc112b7db33410da30de18dc14ff2a2351cc00a0928bc35300bc4ef789145eadfd8be32a06ab9b976a37d5dc9d9f73ece0ffb53b7bd05c2a0bdc4b22c1296805e673e7b1c499994b6b6c5afc656298f12864e5c2c1347128c5f6c3c86845418b1ee200c0185d2b6ba9ec9db30515c23fa4d837d3615ed0427fa5811f0c84b11fc278babb74d77eb89f3128a526", 0xb4}, {&(0x7f0000000240)="5cb65169eedbeb0c38298da7903b241a73bdad2035ce93b4344bc2a4939b2bc415eba86a55c9a8d1e7903c0b7dd3ff2cf626f2311358badb0107b984dde7348abe5b83f5cf1322180122a595dbaa12f5c37fe3da05fe277277c828ad7641cd8e2bbd71680a3c1fa1f84579e345e929ca15162480987970a01c8c49a491d20b5d4b53720e2cf6484732aa9af9f2b8bc490ac4aebd9266aad5db437650f741", 0x9e}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1f8}, 0x0, 0x40081, 0x1, {0x0, r7}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, r4}) r8 = socket(0xa, 0x1, 0x0) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) 7.675323212s ago: executing program 2 (id=5509): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6.62928575s ago: executing program 0 (id=5513): syz_open_dev$sg(0x0, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x1, 0x0, &(0x7f00000004c0)="f4"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) open(0x0, 0x144c1, 0x4e) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bind(0xffffffffffffffff, &(0x7f0000000280)=@in6={0xa, 0x4e21, 0x3, @mcast1, 0xcaa}, 0x80) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) get_mempolicy(0x0, 0x0, 0xfb, &(0x7f00003a7000/0x3000)=nil, 0x1) 6.624031071s ago: executing program 2 (id=5514): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x300000000000000, 0x0, 0x0) 5.988388447s ago: executing program 5 (id=5515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000000104010200000000000000000000000705000100030000002bde1a2c23e8dbc54802af307ba37d789ff3da736131b272a8785d656c55d2f3a55c871e8f492f97ca1281b8e98f5de9c194b7e2718f688ac5b68d99604fcb54a7cfecf66ce5c1bfc4d33c4d35b5d6a853b91346299ed7ac4df87ad6de3de0c897fd2ab92f2c9502a0a400f0dce1f753f40cecde12d5f2115ffc4b86586f8301e2f17d9c76055fb8239383ffb4b1ef42c19b830c0ecc45f957c64a32c4ac868aaeaea3425a020d611ae11c75116116e26df4b45809a4e21ab47fa59b07ab1269b6dc44786c7c1b8f5613e8124dfa2c98905caefeef"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'sit0\x00', {0x2, 0x4e20, @multicast2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003"], 0xac}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x11, 0x7efffeff00000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000004c0)=[@code={0x1, 0x57, {"c481d97520b9650800000f3266baf80cb8f0c7928def66bafc0cb81ad81d73ef420f72d41f260f07c483b56c030ef4440f20c03509000000440f22c02666f3420f1edef30f09"}}, @uexit={0x0, 0x18, 0x100000001}, @code={0x1, 0x53, {"410f01ca410f07450f01cb66baf80cb84cf41a89ef66bafc0cecc402791eec0f015917b95e0b0000b800000100ba000000000f302e0f0016440f792f3ef3440f1ec0"}}, @code={0x1, 0x4a, {"66ba430066b8886066efe1c40f38ca0666b849000f00d066470fc27916fec4a17c50f3400fc79cd502000000f30f38f6c3f3450f09470f21a4"}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x65, {"48b83e000000000000000f23d80f21f835c00000700f23f8440f01eff3460f090f20e035100000000f22e00fc72d0f000000646766470f38819900500000c4a242f5542869c4e2a13c38420f9a4c79e465440f08"}}, @cpuid={0x2, 0x18, {0x800, 0x5}}, @code={0x1, 0x46, {"440f192a260f16e7450f23e9b8010000000f01d9c4435578766bcc0f35b9100900000f320f3566bad104b8123d0000efc441f9d6ca"}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0xfffffff8, 0x3}}, @code={0x1, 0x64, {"0f3801d0f00fba2d0b0000008f400f79a33190000026448348000b66baf80cb828294089ef66bafc0cb86bffdad8ef3ef3430fc73443b805000000b9cf2f00000f01d9c422759f7f0f66ba4100b000ee0f0012"}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0xe5, 0x2}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x1, 0x3}}, @code={0x1, 0x73, {"66baf80cb8609c3d84ef66bafc0cb0eaee0fc75f9cb9800000c00f3235000400000f30f2430f5f8f000000000f20d835080000000f22d866ba6100edf2420f5ee666b8bc008ed82e64660f38812066baf80cb804ff1a8fef66bafc0cb8429d78a5ef"}}], 0x366}) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000340)={0x10003, 0x0, [0xb, 0xe9, 0xfffffffffffffff0, 0x30, 0xa56, 0x3, 0x8, 0x2]}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1800, &(0x7f00000003c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r9, @ANYBLOB="2c697a652c687567653d6164766973652c636f6e746578743d73746166615f752c736d61636b66737472616e736d7574653d3c6d6561737572652c00038ff3bba3db7c58734837c5183bb2d2f539dad12a71ee85c0f24a8ac56c5909abd9f520b43f62eb379cb08e00c2e15c40fa2bf7f023"]) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="140000de21396700000100000001000000", @ANYRES8=r9, @ANYRES8=r7], 0x18, 0xc1}, 0x40) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r11, &(0x7f00000002c0)="cb09268e6e9ef08707e85c98c256f9a53c6d036f9ac128c0a3", 0xfffffffffffffff0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.300046514s ago: executing program 0 (id=5518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x7eacfa71abeb3756}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) epoll_create(0x207ffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x4, 0xfffff01c}, {0x6}]}, 0x10) 5.167056385s ago: executing program 3 (id=5519): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x320, 0x8, 0x7f02ae, 0x0, 0x200, 0x3f0, 0x2e8, 0x2e8, 0x3f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x320, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@hl={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, 0x0, 0x1) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b000)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.59505502s ago: executing program 5 (id=5520): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0400130006001200000000000600b5008501"], 0x40}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000002c0)=0xdef, 0x0, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2"], 0xdd12}], 0x1}, 0x10) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x1, 0x7e, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x5, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0xd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x1, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.57330573s ago: executing program 3 (id=5521): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB="395059ddefb2a20bc379e132061a4c0c9dc1815c2364bd8efd817b4b1c6d3e3282fb412b0ba08c3f19ebb6d76c14d9c45fda7458c76cbff52b87fa99f336776dc612daee3f42cc505acb7b665d320ccfb99ba396f36d66ec9f800d529fffbd2cbf728db362f0900d0a22699f8e8a30c0063fb164c90b2b29ca7c007eee9f0c3cbd0060bba19f860f81bcd8da2d025bf2dee03a807a7a09a255ceba6fe50999cb538d49872747876106e0b5a764"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x2, 0x0, 0xffffffff, 0x10022, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, &(0x7f00000003c0)=""/219, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000340)="747369587e0a4e47adce", 0xa}], 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x880) sync() sync() 4.491315814s ago: executing program 0 (id=5522): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x78021080) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="160000000000000000840000"], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffc, 0x490080) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000740)={0x9, {"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", 0x1000}}, 0x1022) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0xfffffffc, 0xfffffffc}}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x15) 4.475337407s ago: executing program 5 (id=5523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="64f30f00d83ef30f6fb5799e0f01c42e2e2ef30f093667663667676726660f383046380f090f18d90fc75c09baf80c66b8544b8d8766f6efeffc0c66b8f2ffffff66efbaf80c66b8c0669d8966efbafc0c66ed", 0x53}], 0x1, 0xa9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = eventfd2(0xa, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000440)={0x3, 0xdddd1000, 0x8, r2, 0xe672d54487b43524}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000003c0)) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 3.81647499s ago: executing program 7 (id=5524): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 3.723206213s ago: executing program 2 (id=5525): syz_open_dev$sg(0x0, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x1, 0x0, &(0x7f00000004c0)="f4"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) open(0x0, 0x144c1, 0x4e) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bind(0xffffffffffffffff, &(0x7f0000000280)=@in6={0xa, 0x4e21, 0x3, @mcast1, 0xcaa}, 0x80) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) get_mempolicy(0x0, 0x0, 0xfb, &(0x7f00003a7000/0x3000)=nil, 0x1) 3.618583929s ago: executing program 3 (id=5526): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x4, 0x8, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x3, 0x3, 0x1, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x6}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf256800000008000300", @ANYRES32=r2, @ANYBLOB="1e00c7"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x640000d4}, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000006800010003001277aee2ad306b05b7d354c7889fb8f80b901000fdffff2c81a75e311a4f1b000c0002000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 3.056314535s ago: executing program 5 (id=5527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x24) 2.803031577s ago: executing program 5 (id=5528): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x401001c, 0x820, 0x801, 0x16, 0x6, 0x820077, 0x4, 0x162}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00') getsockname$tipc(r1, &(0x7f0000000240)=@name, &(0x7f0000000040)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000000880)="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", 0x1000) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r5) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0xff}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x18, 0x0, 0x318, 0x1, 0x24}, 0x9c) 2.802312855s ago: executing program 7 (id=5529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0), 0x80002, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000a00)={0x800, 0x258, 0x400, 0x1e0, 0x4da4, 0x7fffffff, 0x10, 0x2, {0x8000}, {0x9, 0xffff}, {0x7, 0xfffff737}, {0x7, 0x5, 0x1}, 0x0, 0x2, 0x6, 0x3ff, 0x1, 0xd, 0x2, 0x6, 0x8, 0x6, 0x8, 0x7f, 0x0, 0x200, 0x0, 0x6}) 2.723312723s ago: executing program 0 (id=5530): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000300000004000000", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000", @ANYBLOB="0000000000a908000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48) ioperm(0x284, 0x7f, 0xe3) socket$inet6(0xa, 0x2, 0x0) setrlimit(0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000dc4e000000000079d7f4aac4e22436527e43a50af2c32995e791792b7ff5e8b15a679901e140c7c64b17bd8d75f137bc9f90624fb516763fc66aab6e59fe02debb8494a0421fb9679070ba52b54c124a2d43b32e52275f934b49b88c73ca0d7d39ebe75305329c458923bab4d2ab15317609f71391dae0aecde60fe3e189f3ab0499838f438c673a1c175c8ef8588070324c9939a24564bb4360bcf1b338834e95d8b8b7dfa3a4754692a64e9fc45e3312bf1b5edf99220f13c4092b2a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) 2.633492088s ago: executing program 2 (id=5531): socket$kcm(0x2d, 0x5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000", 0x2c}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2d, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x5d04}}, 0x50) r2 = io_uring_setup(0x7404, &(0x7f0000000980)={0x0, 0x0, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000015c0)=""/231, 0xe7}], 0x0, 0x2}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10) sendmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000280)=@ax25={{0x3, @bcast, 0x3}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null]}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="2dfe9c87253c6ce9f7a00f12c8e1ccc8807c23c08dbd7c3024da1b1730fb0d78a9e5b7f7ce5c29d729b563138e66d0adfce33a6313f901d481ca0cf5d34bfed56ecfb268392b3eba2926a01073936d2e77444a4db87aa15c984401172bb8a10cdbea1a8ab931cff9d40a46d72a72a6260970c391a421f912db1d672341a46b22c6f72ce7a73a2286f19b4c4e8ebf7853acaf66f89f4204cf491940fb0344c9616896c8941d719e735de9e02f4cf2", 0xae}, {&(0x7f00000003c0)="6213f1f1a481309536ce6e889f945be12a813e2835b761a0a14f93f0c286321b4470552d7054e68742ece07bb221621c734fa5757d87badc", 0x38}, {&(0x7f00000004c0)="9dda2e46d434a18d03c7ed96c4490516cbf2e5dc5d533842c5d6fc5baf0cc0482852f9904cbf6eb7aefe5b9dd89219341873a576ca84348e6aadbfc4b0d380e5ea23a145ae3d4ac2a7e832bcbab49af2fffd91c9c6096b9b8f8cc10e79a91bb7026af58927fbdea72f5c666ac49f2d85491da549f597f9cf850196f41dcd21fa557819354715aa4c694d8f0f46fdc6dce17ae16270a377ddfadc65a314", 0x9d}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x2c0}}], 0x1, 0x0) map_shadow_stack(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2982, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0xd2000, 0x0) 2.609957733s ago: executing program 7 (id=5532): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x320, 0x8, 0x7f02ae, 0x0, 0x200, 0x3f0, 0x2e8, 0x2e8, 0x3f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x320, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@hl={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, 0x0, 0x1) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b000)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.82486078s ago: executing program 3 (id=5533): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0400130006001200000000000600b5008501"], 0x40}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000002c0)=0xdef, 0x0, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2"], 0xdd12}], 0x1}, 0x10) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x1, 0x7e, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x5, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0xd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x1, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.331693405s ago: executing program 3 (id=5534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='fscache_relinquish\x00', r1, 0x0, 0x40e}, 0x18) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x332b, 0x2, 0xfffffffc, 0x24d}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r6, 0x100847c0, 0xfffffffc, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000002c0)={0x0, 0x5, 0x6}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f00)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01280df665002abd7000000000001b0000001800018014000200626f6e645f736c6176655f30"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.283124537s ago: executing program 5 (id=5535): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_io_uring_setup(0x7a8e, 0x0, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) getsockname$packet(r0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in=@empty, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10001}, {}, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3, 0x2b}, 0x0, @in=@local, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10000, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x88c0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 740.492263ms ago: executing program 0 (id=5536): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_io_uring_setup(0x7a8e, 0x0, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) getsockname$packet(r0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10000, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x88c0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 362.454429ms ago: executing program 7 (id=5537): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r0, 0x8, 0x400000000000000) 331.471906ms ago: executing program 2 (id=5538): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf256800000008000300", @ANYRES32, @ANYBLOB="1e00c7"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) 167.286131ms ago: executing program 3 (id=5539): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x24) 607.899µs ago: executing program 0 (id=5540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0xfffffe56, &(0x7f0000000000)={&(0x7f0000000300)={0x50, r1, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r4, 0x0, 0x7ffff000) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f0000000100)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r8, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x80901) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85512, &(0x7f0000000180)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000640)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)="f348d871a32198cd1cfb6297561ba98d76a6a075bfd26904b26dd271b43bef126bd01b2f18bf9be3c6e963eab34c6dd26ff7cb53d9775c10c8cf348b2c7f2e94b75db8389ab52a188713b9c61e3f15c82c3cfb29cf0a6f848d5ee2ff608f506f5633f97e1aaa76b6724592d78a9a8fc3ae916bb776c507349c967f46861ca2230ba32ac8a7b77f52c06ca0bec2ab6c8ebc1dec2821a048c7a0e85a7669dab85283d2aacb613f9a4dc53caba0d0222286182fe40c4f74f8272a2e496269fe7b1c145ca76ed67e9299976177b64e74ba1973ef12fdff84f273", 0xd8}, {0x0}, {&(0x7f00000004c0)="962452a57b23a80ccaebb8f91d3db68f5e8ffad7a4cc793ca75ea33886adba72e7ada41cdc1b254a93c772cc8b22ec9ae792d3172a930162beebe43930719a56e7bd3845c3c38c6e0543c92f080338757b19ce4e8e4369ade7b097a90cae163ee0dba7511915a4b877f54e6fbda231b80b9a007d8706922dd683b6da1dac82044baffd271e64097e", 0x88}, {&(0x7f0000000580)="ebf60f6009258b7c2df1edc540aa86db9ec6da68fe2d9979ee6128b287ae86f83b85ae85999b8f0b7b6b72ad44205e33e15d08d45b953938b54118c75728335594182a92406c2a24fef13d1e24e5463424d5794f8c3cb5d5f52abc0c7b38f7c7f3cbdc11a67caf510e6932475b5fe9fb9bf4cdbd433b36c1ba98df64b493ec37177657a706bb08f9b7ac076b522ee20c03ab99a914c758de", 0x98}], 0x5) 0s ago: executing program 2 (id=5541): syz_open_dev$sg(0x0, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x1, 0x0, &(0x7f00000004c0)="f4"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) open(0x0, 0x144c1, 0x4e) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bind(0xffffffffffffffff, &(0x7f0000000280)=@in6={0xa, 0x4e21, 0x3, @mcast1, 0xcaa}, 0x80) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) get_mempolicy(0x0, 0x0, 0xfb, &(0x7f00003a7000/0x3000)=nil, 0x1) kernel console output (not intermixed with test programs): rialNumber=0 [ 1747.107709][T15262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.119345][T15262] usb 6-1: Product: syz [ 1747.125293][T15262] usb 6-1: Manufacturer: syz [ 1747.130392][T15262] usb 6-1: SerialNumber: syz [ 1747.131034][ T5818] usb 8-1: config 0 descriptor?? [ 1747.140205][T15262] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1747.160219][ T5897] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1747.403657][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1747.418135][T24116] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1747.425743][T15262] usb 8-1: USB disconnect, device number 38 [ 1747.438438][ T12] vhci_hcd: stop threads [ 1747.442759][ T12] vhci_hcd: release socket [ 1747.447661][ T12] vhci_hcd: disconnect device [ 1747.610254][T24164] fuse: Bad value for 'group_id' [ 1747.616033][T24164] fuse: Bad value for 'group_id' [ 1747.660850][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1747.660866][ T30] audit: type=1400 audit(2000001419.785:1848): avc: denied { ioctl } for pid=24115 comm="syz.5.4887" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1747.692153][ C0] vkms_vblank_simulate: vblank timer overrun [ 1748.160255][T20437] Bluetooth: hci1: command 0x0406 tx timeout [ 1748.315219][ T5897] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1748.345490][T24172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.345871][ T5897] ath9k_htc: Failed to initialize the device [ 1748.525775][T24173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.772804][T20437] Bluetooth: hci3: command 0x0c1a tx timeout [ 1748.835456][ T5897] usb 6-1: ath9k_htc: USB layer deinitialized [ 1749.227361][ T10] usb 6-1: USB disconnect, device number 53 [ 1749.367045][ T30] audit: type=1400 audit(2000001421.375:1849): avc: denied { read } for pid=24179 comm="syz.5.4908" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1749.500711][ T30] audit: type=1400 audit(2000001421.413:1850): avc: denied { open } for pid=24179 comm="syz.5.4908" path="/526/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1749.524599][ T30] audit: type=1400 audit(2000001421.413:1851): avc: denied { ioctl } for pid=24179 comm="syz.5.4908" path="/526/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1749.561254][ T30] audit: type=1400 audit(2000001421.572:1852): avc: denied { listen } for pid=24189 comm="syz.3.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1749.894737][T24197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4912'. [ 1749.904407][T24197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4912'. [ 1750.510791][T24212] netlink: 3576 bytes leftover after parsing attributes in process `syz.7.4916'. [ 1751.022104][T20437] Bluetooth: hci3: command 0x0c1a tx timeout [ 1752.281763][T24232] netlink: 'syz.5.4919': attribute type 4 has an invalid length. [ 1752.298636][T24228] netlink: 'syz.5.4919': attribute type 4 has an invalid length. [ 1752.364436][ T5897] lo speed is unknown, defaulting to 1000 [ 1752.370251][ T24] lo speed is unknown, defaulting to 1000 [ 1753.848417][T24261] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 1755.114626][T24275] 9pnet_fd: Insufficient options for proto=fd [ 1755.241589][T24275] netlink: 'syz.0.4934': attribute type 13 has an invalid length. [ 1755.276325][T24275] veth0_macvtap: entered promiscuous mode [ 1755.298623][T24275] macvtap0: entered promiscuous mode [ 1755.502381][T24275] batman_adv: batadv0: Interface activated: macvtap0 [ 1755.512697][T24275] macvtap0: refused to change device tx_queue_len [ 1756.698573][T24291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4939'. [ 1758.292290][T24307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4937'. [ 1761.066502][ T5864] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 1761.462305][ T5864] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1761.479834][ T5864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.500543][ T5864] usb 8-1: config 0 descriptor?? [ 1761.903538][T24330] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4950'. [ 1761.990481][ T30] audit: type=1400 audit(2000001433.189:1853): avc: denied { create } for pid=24355 comm="syz.5.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1762.338058][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1763.391569][T24373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7189 sclass=netlink_xfrm_socket pid=24373 comm=syz.5.4960 [ 1763.543985][ T5864] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1763.558301][ T5864] [drm:udl_init] *ERROR* Selecting channel failed [ 1763.586205][ T5864] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1763.596126][ T5864] [drm] Initialized udl on minor 2 [ 1763.608184][ T5864] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1763.622582][ T5864] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1763.669117][ T5818] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1763.830365][ T5864] usb 8-1: USB disconnect, device number 39 [ 1763.837000][ T5818] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1766.469392][T24397] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4968'. [ 1766.518786][ T5884] dvb-usb: did not find the firmware file 'dvb-usb-wt220u-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1766.746383][ T5884] usb 4-1: USB disconnect, device number 4 [ 1768.685028][T24414] overlayfs: failed to clone upperpath [ 1769.120646][T24418] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1769.224304][ T30] audit: type=1400 audit(2000001439.961:1854): avc: denied { relabelto } for pid=24413 comm="syz.2.4972" name="/" dev="overlay" ino=2280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1769.251142][T24418] evm: overlay not supported [ 1769.359940][ T30] audit: type=1400 audit(2000001440.008:1855): avc: denied { associate } for pid=24413 comm="syz.2.4972" name="file1" dev="tmpfs" ino=2280 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1769.397578][ T30] audit: type=1400 audit(2000001440.055:1856): avc: denied { rmdir } for pid=16739 comm="syz-executor" name="file1" dev="tmpfs" ino=2280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1769.432009][ T30] audit: type=1400 audit(2000001440.139:1857): avc: denied { mount } for pid=24426 comm="syz.7.4976" name="/" dev="pstore" ino=3439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1769.483569][T24431] xt_hashlimit: max too large, truncated to 1048576 [ 1769.502054][T24431] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1769.831421][ T30] audit: type=1400 audit(2000001440.317:1858): avc: denied { mount } for pid=24422 comm="syz.3.4974" name="/" dev="rpc_pipefs" ino=98195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1770.228361][T24444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4981'. [ 1770.395793][T24454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1770.468087][T24454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.119915][ T30] audit: type=1326 audit(2000525729.721:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1771.244933][ T30] audit: type=1326 audit(2000525729.721:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1771.328125][ T30] audit: type=1326 audit(2000525729.721:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1771.352003][ T30] audit: type=1326 audit(2000525729.721:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1771.376737][ T30] audit: type=1326 audit(2000525729.721:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1771.437583][T24469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4988'. [ 1772.139953][ T5884] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1772.637850][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 1772.647999][ T5884] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1772.663715][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.678432][ T5884] usb 3-1: config 0 descriptor?? [ 1772.799159][ T24] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1772.901374][ T5884] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1772.942298][ T5884] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1772.954365][ T5884] asix 3-1:0.0: probe with driver asix failed with error -32 [ 1772.985771][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1772.992885][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1773.007238][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1773.018042][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1773.078158][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1773.094265][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1773.105674][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.170620][T24508] IPVS: Unknown mcast interface: rose0 [ 1773.440723][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 1773.446683][ T24] usbtmc 8-1:16.0: can't read capabilities [ 1773.561754][ T5884] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1773.688634][ T5864] usb 3-1: USB disconnect, device number 111 [ 1773.723746][ T5884] usb 4-1: config index 0 descriptor too short (expected 46, got 36) [ 1773.753512][ T5884] usb 4-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.772028][ T5884] usb 4-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1773.790003][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1773.797325][ T5884] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1773.806779][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.819523][ T5884] usb 4-1: config 0 descriptor?? [ 1773.831656][ T5884] usbhid 4-1:0.0: can't add hid device: -22 [ 1773.839312][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1773.958713][T24529] CIFS mount error: No usable UNC path provided in device string! [ 1773.958713][T24529] [ 1773.971820][T24529] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1774.052958][T24511] siw: device registration error -23 [ 1774.152289][ T5864] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1774.425800][ T5818] usb 4-1: USB disconnect, device number 5 [ 1774.600483][ T5864] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1774.614549][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1774.621998][ T5864] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1774.633043][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.645152][ T5864] usb 3-1: config 0 descriptor?? [ 1774.651140][T24523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1774.817945][ T24] usb 8-1: USB disconnect, device number 40 [ 1775.766956][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1776.003526][T24547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24547 comm=syz.0.5010 [ 1776.075101][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1776.125697][ T24] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1776.158609][ T5864] usbhid 3-1:0.0: can't add hid device: -71 [ 1776.164852][ T24] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1776.186468][ T24] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1776.186551][ T5864] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1776.266273][ T24] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1776.491376][ T24] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1776.507171][ T24] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1776.596773][ T24] usb 4-1: string descriptor 0 read error: -22 [ 1776.600404][ T5864] usb 3-1: USB disconnect, device number 112 [ 1776.603792][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1776.618116][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.757101][ T24] adutux 4-1:168.0: interrupt endpoints not found [ 1777.075234][T24561] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7189 sclass=netlink_xfrm_socket pid=24561 comm=syz.0.5014 [ 1777.202211][ T5864] usb 4-1: USB disconnect, device number 6 [ 1777.429609][T24570] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 1777.438655][T24570] overlay: Unknown parameter 'dont_measure' [ 1777.909223][T24575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5018'. [ 1777.921177][ T5897] IPVS: starting estimator thread 0... [ 1778.104082][T24574] SELinux: syz.2.5019 (24574) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1778.128136][T24576] IPVS: using max 48 ests per chain, 115200 per kthread [ 1778.661956][T24592] FAULT_INJECTION: forcing a failure. [ 1778.661956][T24592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.682413][T24592] CPU: 0 UID: 0 PID: 24592 Comm: syz.2.5021 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1778.682440][T24592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1778.682450][T24592] Call Trace: [ 1778.682457][T24592] [ 1778.682465][T24592] dump_stack_lvl+0x16c/0x1f0 [ 1778.682496][T24592] should_fail_ex+0x512/0x640 [ 1778.682524][T24592] _copy_from_user+0x2e/0xd0 [ 1778.682552][T24592] simple_transaction_get+0x101/0x140 [ 1778.682576][T24592] ? __pfx_sel_write_user+0x10/0x10 [ 1778.682596][T24592] selinux_transaction_write+0xc3/0x180 [ 1778.682616][T24592] ? __pfx_selinux_transaction_write+0x10/0x10 [ 1778.682635][T24592] vfs_write+0x2a0/0x1150 [ 1778.682661][T24592] ? __pfx___mutex_lock+0x10/0x10 [ 1778.682688][T24592] ? __pfx_vfs_write+0x10/0x10 [ 1778.682717][T24592] ? __fget_files+0x20e/0x3c0 [ 1778.682752][T24592] ksys_write+0x12a/0x250 [ 1778.682773][T24592] ? __pfx_ksys_write+0x10/0x10 [ 1778.682804][T24592] do_syscall_64+0xcd/0x4c0 [ 1778.682833][T24592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.682852][T24592] RIP: 0033:0x7f3ebaf8e929 [ 1778.682866][T24592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1778.682883][T24592] RSP: 002b:00007f3ebbe21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1778.682901][T24592] RAX: ffffffffffffffda RBX: 00007f3ebb1b6160 RCX: 00007f3ebaf8e929 [ 1778.682913][T24592] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 0000000000000007 [ 1778.682924][T24592] RBP: 00007f3ebbe21090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.682934][T24592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.682945][T24592] R13: 0000000000000000 R14: 00007f3ebb1b6160 R15: 00007ffefd330558 [ 1778.682971][T24592] [ 1778.870422][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1779.628107][ T24] usb 4-1: config index 0 descriptor too short (expected 46, got 36) [ 1779.657540][ T24] usb 4-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.700443][ T24] usb 4-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.816747][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1779.823649][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1779.834931][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.851363][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1779.851428][ T30] audit: type=1400 audit(2000525737.895:1930): avc: denied { read } for pid=24602 comm="syz.2.5025" path="socket:[98969]" dev="sockfs" ino=98969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1780.241222][ T24] usb 4-1: config 0 descriptor?? [ 1780.627437][ T24] usbhid 4-1:0.0: can't add hid device: -22 [ 1780.634407][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1781.831615][ T24] usb 4-1: USB disconnect, device number 7 [ 1782.557446][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5036'. [ 1782.583516][T24655] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1782.597368][T24655] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1782.610994][T24655] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1782.620527][T24655] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1782.632882][T24655] geneve2: entered promiscuous mode [ 1782.647900][T24655] geneve2: entered allmulticast mode [ 1783.115077][T24666] 9pnet_fd: Insufficient options for proto=fd [ 1784.205490][ T5897] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1784.315781][ T30] audit: type=1400 audit(2000525741.964:1931): avc: denied { read write } for pid=24683 comm="syz.3.5044" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1784.426685][T24692] block device autoloading is deprecated and will be removed. [ 1784.435990][T24692] syz.7.5046: attempt to access beyond end of device [ 1784.435990][T24692] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1784.507082][ T30] audit: type=1400 audit(2000525741.964:1932): avc: denied { open } for pid=24683 comm="syz.3.5044" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1784.722007][T24337] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1785.443371][ T30] audit: type=1400 audit(2000525741.964:1933): avc: denied { ioctl } for pid=24683 comm="syz.3.5044" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1785.469090][T24337] usb 4-1: device descriptor read/64, error -71 [ 1785.486583][ T30] audit: type=1400 audit(2000525742.095:1934): avc: denied { read write } for pid=19785 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1785.515099][ T30] audit: type=1400 audit(2000525742.095:1935): avc: denied { open } for pid=19785 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1785.551744][ T30] audit: type=1400 audit(2000525742.095:1936): avc: denied { ioctl } for pid=19785 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1785.581548][ T30] audit: type=1400 audit(2000525742.095:1937): avc: denied { prog_load } for pid=24689 comm="syz.5.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1785.615111][ T30] audit: type=1400 audit(2000525742.095:1938): avc: denied { bpf } for pid=24689 comm="syz.5.5045" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1785.698124][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.705261][ T30] audit: type=1400 audit(2000525742.095:1939): avc: denied { perfmon } for pid=24689 comm="syz.5.5045" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1785.735165][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.750792][T24337] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1785.753338][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1785.891058][ T30] audit: type=1400 audit(2000525742.123:1940): avc: denied { execmem } for pid=24689 comm="syz.5.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1785.911430][ T30] audit: type=1400 audit(2000525742.151:1941): avc: denied { recv } for pid=24689 comm="syz.5.5045" saddr=10.128.0.169 src=30006 daddr=10.128.0.144 dest=48840 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1785.942055][ T5897] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1785.960948][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.301648][T24337] usb 4-1: device descriptor read/64, error -71 [ 1786.310039][ T30] audit: type=1400 audit(2000525742.160:1942): avc: denied { prog_run } for pid=24691 comm="syz.7.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1786.347695][ T5897] usb 3-1: config 0 descriptor?? [ 1786.409584][T24714] fuse: Bad value for 'fd' [ 1786.426521][T24337] usb usb4-port1: attempt power cycle [ 1787.001689][T24337] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1787.038811][T24337] usb 4-1: device descriptor read/8, error -71 [ 1787.295038][T24681] lo speed is unknown, defaulting to 1000 [ 1787.335211][T24722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.348119][T24681] lo speed is unknown, defaulting to 1000 [ 1787.369224][T24722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.631293][T24728] SELinux: failed to load policy [ 1787.658637][T24728] binder: BINDER_SET_CONTEXT_MGR already set [ 1787.666650][T24728] binder: 24727:24728 ioctl 4018620d 200000000100 returned -16 [ 1787.769093][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 1787.789925][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1787.864841][ T5897] usb 3-1: USB disconnect, device number 113 [ 1790.841109][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1790.841125][ T30] audit: type=1400 audit(2000525748.184:2004): avc: denied { create } for pid=24760 comm="syz.0.5064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1790.861074][T24763] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1790.874016][ T30] audit: type=1400 audit(2000525748.193:2005): avc: denied { connect } for pid=24760 comm="syz.0.5064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1790.904858][ T30] audit: type=1400 audit(2000525748.193:2006): avc: denied { create } for pid=24760 comm="syz.0.5064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1790.928649][T24756] hsr0: entered allmulticast mode [ 1790.933761][T24756] hsr_slave_0: entered allmulticast mode [ 1790.940021][ T30] audit: type=1400 audit(2000525748.193:2007): avc: denied { setopt } for pid=24760 comm="syz.0.5064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1790.966900][T24756] hsr_slave_1: entered allmulticast mode [ 1791.488369][ T30] audit: type=1400 audit(2000525748.782:2008): avc: denied { unmount } for pid=16739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1791.623197][ T30] audit: type=1400 audit(2000525748.913:2009): avc: denied { read } for pid=24768 comm="syz.3.5067" dev="nsfs" ino=4026532976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1791.653384][ T30] audit: type=1400 audit(2000525748.913:2010): avc: denied { open } for pid=24768 comm="syz.3.5067" path="net:[4026532976]" dev="nsfs" ino=4026532976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1791.743909][ T30] audit: type=1400 audit(2000525749.016:2011): avc: denied { write } for pid=24769 comm="syz.2.5066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1792.375200][ T30] audit: type=1400 audit(2000525749.016:2012): avc: denied { read } for pid=24769 comm="syz.2.5066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1792.670452][ T30] audit: type=1400 audit(2000525749.259:2013): avc: denied { read write } for pid=24768 comm="syz.3.5067" name="vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1792.822883][T24779] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5069'. [ 1792.961741][T24787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5068'. [ 1795.025846][T24820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1795.881126][T24835] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5082'. [ 1796.297451][T24837] netlink: 'syz.2.5085': attribute type 10 has an invalid length. [ 1796.308275][T24837] team0: Device hsr_slave_0 failed to register rx_handler [ 1796.721700][T18324] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1797.366900][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1797.373364][ T30] audit: type=1400 audit(2001050042.264:2043): avc: denied { execute } for pid=24845 comm="syz.3.5090" name="file0" dev="tmpfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1797.686574][ T30] audit: type=1400 audit(2001050042.264:2044): avc: denied { execute_no_trans } for pid=24845 comm="syz.3.5090" path="/395/file0" dev="tmpfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1797.840202][ T30] audit: type=1400 audit(2001050042.554:2045): avc: denied { name_bind } for pid=24849 comm="syz.5.5088" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1798.429151][T24857] infiniband syz!: set active [ 1798.455940][T24857] infiniband syz!: added team_slave_0 [ 1798.682851][ T30] audit: type=1400 audit(2001050042.554:2046): avc: denied { node_bind } for pid=24849 comm="syz.5.5088" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1798.777100][T24857] RDS/IB: syz!: added [ 1798.781132][T24857] smc: adding ib device syz! with port count 1 [ 1798.787493][T24857] smc: ib device syz! port 1 has pnetid [ 1799.269073][ T30] audit: type=1400 audit(2001050042.863:2047): avc: denied { write } for pid=24849 comm="syz.5.5088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1799.290171][ T30] audit: type=1400 audit(2001050042.863:2048): avc: denied { read } for pid=24849 comm="syz.5.5088" path="socket:[100586]" dev="sockfs" ino=100586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1799.314823][ T30] audit: type=1400 audit(2001050043.012:2049): avc: denied { getopt } for pid=24852 comm="syz.0.5091" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1799.361848][ T30] audit: type=1400 audit(2001050044.144:2050): avc: denied { listen } for pid=24863 comm="syz.0.5094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1799.558988][ T30] audit: type=1400 audit(2001050044.172:2051): avc: denied { write } for pid=24863 comm="syz.0.5094" lport=52446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1799.595575][T24868] netlink: 'syz.5.5095': attribute type 10 has an invalid length. [ 1799.614438][T24868] team0: Device hsr_slave_0 failed to register rx_handler [ 1799.628203][ T30] audit: type=1400 audit(2001050044.396:2052): avc: denied { create } for pid=24870 comm="syz.3.5096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1799.762464][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5096'. [ 1799.772966][T24871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5096'. [ 1799.782483][T24871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5096'. [ 1799.791968][T24871] netlink: 'syz.3.5096': attribute type 6 has an invalid length. [ 1799.804852][T24871] syz.3.5096: attempt to access beyond end of device [ 1799.804852][T24871] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1799.818315][T24871] EXT4-fs (nbd3): unable to read superblock [ 1801.262698][T24880] netlink: 'syz.0.5099': attribute type 10 has an invalid length. [ 1801.419108][T24880] team0: Device hsr_slave_0 failed to register rx_handler [ 1802.080583][ T5897] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1802.485403][ T5897] usb 4-1: config index 0 descriptor too short (expected 46, got 36) [ 1802.493902][ T5897] usb 4-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1802.819894][T24904] netlink: 'syz.0.5106': attribute type 1 has an invalid length. [ 1802.898111][ T5897] usb 4-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1802.946332][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1802.964110][ T5897] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1802.985452][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.017664][ T5897] usb 4-1: config 0 descriptor?? [ 1803.039457][ T5897] usbhid 4-1:0.0: can't add hid device: -22 [ 1803.047629][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1803.384979][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1803.384991][ T30] audit: type=1400 audit(2001050047.913:2057): avc: denied { module_request } for pid=24885 comm="syz.3.5101" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1803.765217][ T30] audit: type=1400 audit(2001050048.259:2058): avc: denied { sys_module } for pid=24885 comm="syz.3.5101" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1803.918056][T24337] usb 4-1: USB disconnect, device number 12 [ 1804.039190][T24923] 9pnet_fd: Insufficient options for proto=fd [ 1804.044859][ T30] audit: type=1400 audit(2001050048.521:2059): avc: denied { mounton } for pid=24922 comm="syz.7.5113" path="/269/file0" dev="tmpfs" ino=1466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1804.226942][ T5897] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1804.527665][ T5897] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1804.536757][ T5897] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1804.547552][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1804.557432][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1804.589853][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1804.604141][ T5897] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1804.618206][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1804.628822][ T5897] usb 3-1: Product: syz [ 1804.865374][ T5897] usb 3-1: Manufacturer: syz [ 1804.887939][ T5897] cdc_wdm 3-1:1.0: skipping garbage [ 1804.893392][ T5897] cdc_wdm 3-1:1.0: skipping garbage [ 1804.899574][ T5897] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1804.905875][ T5897] cdc_wdm 3-1:1.0: Unknown control protocol [ 1805.256524][ T30] audit: type=1400 audit(2001050049.662:2060): avc: denied { nlmsg_write } for pid=24920 comm="syz.2.5112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1805.306161][ T5897] usb 3-1: USB disconnect, device number 114 [ 1805.313544][ T30] audit: type=1400 audit(2001050049.681:2061): avc: denied { create } for pid=24920 comm="syz.2.5112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1805.340813][ T30] audit: type=1400 audit(2001050049.699:2062): avc: denied { shutdown } for pid=24920 comm="syz.2.5112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1805.362807][ T30] audit: type=1400 audit(2001050049.699:2063): avc: denied { create } for pid=24943 comm="syz.7.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1805.383474][ T30] audit: type=1400 audit(2001050049.737:2064): avc: denied { write } for pid=24943 comm="syz.7.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1805.736048][T24955] netlink: 'syz.5.5125': attribute type 10 has an invalid length. [ 1805.744735][ T30] audit: type=1400 audit(2001050050.111:2065): avc: denied { ioctl } for pid=24954 comm="syz.5.5125" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=100794 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1805.790651][ T30] audit: type=1400 audit(2001050050.120:2066): avc: denied { create } for pid=24956 comm="syz.3.5126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1805.889204][T24962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5126'. [ 1806.425760][T24961] overlayfs: failed to resolve './file2': -2 [ 1809.416359][T25003] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1809.796873][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5144'. [ 1809.806656][T25011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5144'. [ 1810.554043][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1810.554061][ T30] audit: type=1400 audit(2001050054.591:2073): avc: denied { create } for pid=25009 comm="syz.0.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1810.697380][ T30] audit: type=1400 audit(2001050054.750:2074): avc: denied { watch watch_reads } for pid=25016 comm="syz.5.5147" path="/588" dev="tmpfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1810.765467][T25019] SELinux: Context #! ./file0 +:!) -( is not valid (left unmapped). [ 1810.765531][ T30] audit: type=1400 audit(2001050054.806:2075): avc: denied { mac_admin } for pid=25018 comm="syz.3.5148" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1810.832723][T25019] overlayfs: failed to resolve './file0': -2 [ 1810.931940][ T30] audit: type=1400 audit(2001050054.965:2076): avc: denied { getopt } for pid=25018 comm="syz.3.5148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1811.189233][ T30] audit: type=1400 audit(2001050055.208:2077): avc: denied { bind } for pid=25024 comm="syz.7.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1811.351599][ T30] audit: type=1400 audit(2001050055.208:2078): avc: denied { listen } for pid=25024 comm="syz.7.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1811.869537][ T30] audit: type=1400 audit(2001050055.835:2079): avc: denied { ioctl } for pid=25039 comm="syz.0.5155" path="socket:[100956]" dev="sockfs" ino=100956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1811.900329][ T30] audit: type=1400 audit(2001050055.872:2080): avc: denied { connect } for pid=25039 comm="syz.0.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1811.922436][ T30] audit: type=1400 audit(2001050055.872:2081): avc: denied { write } for pid=25039 comm="syz.0.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 crond[5558]: time disparity of 17477 minutes detected [ 1812.420818][ T30] audit: type=1400 audit(2001050056.349:2082): avc: denied { setopt } for pid=25041 comm="syz.0.5156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1812.515012][T25047] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5158'. [ 1812.709798][T25053] batman_adv: batadv0: Adding interface: dummy0 [ 1812.717642][T25053] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.119781][T25053] batman_adv: batadv0: Interface activated: dummy0 [ 1813.154115][T25055] batadv0: mtu less than device minimum [ 1813.161224][T25055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1813.173636][T25055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1813.185061][T25055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1813.196493][T25055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1813.208033][T25055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1813.219500][T25055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1813.230918][T25055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1813.242348][T25055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1813.253791][T25055] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1814.086755][T25071] SELinux: failed to load policy [ 1814.123903][T25071] binder: BINDER_SET_CONTEXT_MGR already set [ 1814.138857][T25071] binder: 25070:25071 ioctl 4018620d 200000000100 returned -16 [ 1816.708041][T25098] netlink: 'syz.7.5172': attribute type 10 has an invalid length. [ 1816.737169][T25098] team0: Device hsr_slave_0 failed to register rx_handler [ 1817.139164][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1817.139180][ T30] audit: type=1400 audit(2001050060.773:2103): avc: denied { listen } for pid=25100 comm="syz.0.5174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1818.022947][T25121] overlayfs: failed to clone upperpath [ 1818.037192][T25118] netlink: 'syz.3.5177': attribute type 9 has an invalid length. [ 1818.077385][T25118] macvlan2: entered promiscuous mode [ 1818.094370][T25118] bond0: entered promiscuous mode [ 1818.108113][T25118] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1818.260966][T25132] SELinux: failed to load policy [ 1818.324454][T25132] binder: BINDER_SET_CONTEXT_MGR already set [ 1818.337412][T25132] binder: 25131:25132 ioctl 4018620d 200000000100 returned -16 [ 1818.789837][T24337] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1819.294328][T24337] usb 3-1: config index 0 descriptor too short (expected 46, got 36) [ 1819.309414][T24337] usb 3-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.321048][T24337] usb 3-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1819.333139][T24337] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1819.346903][T24337] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1819.350216][T25147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5186'. [ 1819.359938][T24337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.379113][T24337] usb 3-1: config 0 descriptor?? [ 1819.409001][T24337] usbhid 3-1:0.0: can't add hid device: -22 [ 1819.420410][T24337] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1819.444512][T25147] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1819.453994][T25147] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1819.463036][T25147] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1819.471762][T25147] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1819.482311][T25147] vxlan0: entered promiscuous mode [ 1819.766410][T25157] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5189'. [ 1819.783402][ T30] audit: type=1400 audit(2001050063.242:2104): avc: denied { map } for pid=25156 comm="syz.3.5189" path="socket:[101482]" dev="sockfs" ino=101482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1819.843060][T25157] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5189'. [ 1819.873634][ T30] audit: type=1400 audit(2001050063.298:2105): avc: denied { ioctl } for pid=25156 comm="syz.3.5189" path="socket:[101481]" dev="sockfs" ino=101481 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1819.946548][ T5897] usb 3-1: USB disconnect, device number 115 [ 1820.751192][ T30] audit: type=1400 audit(2001050064.149:2106): avc: denied { nlmsg_read } for pid=25162 comm="syz.5.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1820.779787][ T30] audit: type=1400 audit(2001050064.149:2107): avc: denied { setopt } for pid=25162 comm="syz.5.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1821.060608][T25178] team_slave_0: entered promiscuous mode [ 1821.066392][T25178] team_slave_1: entered promiscuous mode [ 1821.528649][ T30] audit: type=1400 audit(2001050064.458:2108): avc: denied { connect } for pid=25172 comm="syz.7.5194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1821.549150][ T30] audit: type=1400 audit(2001050064.523:2109): avc: denied { read write } for pid=25172 comm="syz.7.5194" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1821.793911][ T30] audit: type=1400 audit(2001050064.523:2110): avc: denied { open } for pid=25172 comm="syz.7.5194" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1821.807061][T25183] netlink: 'syz.0.5196': attribute type 39 has an invalid length. [ 1823.694170][ T30] audit: type=1400 audit(2001050066.899:2111): avc: denied { read write } for pid=25210 comm="syz.2.5207" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1823.718009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.750579][ T30] audit: type=1400 audit(2001050066.899:2112): avc: denied { open } for pid=25210 comm="syz.2.5207" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1823.774254][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.776368][T25217] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5210'. [ 1823.810141][ T30] audit: type=1400 audit(2001050066.899:2113): avc: denied { ioctl } for pid=25210 comm="syz.2.5207" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1823.839389][ T30] audit: type=1400 audit(2001050066.946:2114): avc: denied { bind } for pid=25212 comm="syz.0.5208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1823.885656][ T30] audit: type=1400 audit(2001050066.992:2115): avc: denied { setopt } for pid=25212 comm="syz.0.5208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1823.977347][ T30] audit: type=1400 audit(2001050066.992:2116): avc: denied { write } for pid=25212 comm="syz.0.5208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1824.006529][ T30] audit: type=1400 audit(2001050067.133:2117): avc: denied { ioctl } for pid=25213 comm="syz.5.5209" path="socket:[101631]" dev="sockfs" ino=101631 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1824.780838][ T30] audit: type=1400 audit(2001050067.918:2118): avc: denied { mount } for pid=25227 comm="syz.0.5215" name="/" dev="autofs" ino=101641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1824.815171][ T30] audit: type=1400 audit(2001050067.937:2119): avc: denied { read write } for pid=25218 comm="syz.2.5211" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1824.841314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.860824][ T30] audit: type=1400 audit(2001050067.937:2120): avc: denied { open } for pid=25218 comm="syz.2.5211" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1825.169683][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5218'. [ 1825.195713][T20437] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1825.218102][T25243] _ÐZ`Ô€@: entered promiscuous mode [ 1825.843446][T25253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1825.853759][T25253] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1825.884957][T24625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1825.915217][T24625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1825.928415][T24625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1825.941989][T24625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1825.954788][T24625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1826.006249][T25254] lo speed is unknown, defaulting to 1000 [ 1826.015283][T25254] lo speed is unknown, defaulting to 1000 [ 1826.223103][T25261] netlink: 'syz.0.5225': attribute type 1 has an invalid length. [ 1826.571808][T25267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5226'. [ 1826.597120][T25266] vlan2: entered allmulticast mode [ 1827.293396][T25254] chnl_net:caif_netlink_parms(): no params data found [ 1827.315240][T25290] netlink: 'syz.3.5231': attribute type 10 has an invalid length. [ 1827.527882][T25254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.537079][T25254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.553386][T25254] bridge_slave_0: entered allmulticast mode [ 1827.572961][T25254] bridge_slave_0: entered promiscuous mode [ 1827.587268][T25254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.595313][T25254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.604138][T25254] bridge_slave_1: entered allmulticast mode [ 1827.612283][T25254] bridge_slave_1: entered promiscuous mode [ 1828.169587][T25254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1828.198929][T24625] Bluetooth: hci2: command tx timeout [ 1828.258820][T25254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1828.363375][T25307] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5235'. [ 1828.495077][T25254] team0: Port device team_slave_0 added [ 1828.584238][T25254] team0: Port device team_slave_1 added [ 1829.211548][T25315] netlink: 184 bytes leftover after parsing attributes in process `syz.7.5237'. [ 1830.422419][T24625] Bluetooth: hci2: command tx timeout [ 1830.844198][T25254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1831.448181][T25254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1831.475100][T25254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1831.488197][T25254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1831.495284][T25254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1831.523854][T25254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.827104][T25254] hsr_slave_0: entered promiscuous mode [ 1831.873119][T25321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5239'. [ 1831.891399][T25254] hsr_slave_1: entered promiscuous mode [ 1831.898168][T25254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1831.914597][T25254] Cannot create hsr debugfs directory [ 1832.312424][ T3505] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1832.442853][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1832.442865][ T30] audit: type=1400 audit(2001050075.082:2141): avc: denied { write } for pid=25338 comm="syz.2.5245" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1832.707150][T24625] Bluetooth: hci2: command tx timeout [ 1833.001451][ T30] audit: type=1400 audit(2001050075.120:2142): avc: denied { open } for pid=25338 comm="syz.2.5245" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1833.255384][T25254] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.675671][T25254] netdevsim netdevsim5 netdevsim2 (unregistering): left allmulticast mode [ 1833.686590][T25254] netdevsim netdevsim5 netdevsim2 (unregistering): left promiscuous mode [ 1833.699399][T25254] bridge0: port 4(netdevsim2) entered disabled state [ 1833.717028][T25254] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.804735][T25254] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.921076][T25254] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.930029][ T5897] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1834.143631][ T5897] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 1834.169948][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.181241][T25254] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1834.188845][ T5897] usb 3-1: config 0 has no interface number 0 [ 1834.204068][ T5897] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1834.216232][ T5897] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1834.236221][ T5897] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1834.248784][T25254] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1834.258751][ T5897] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1834.284286][T25254] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1834.300440][T25254] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1834.313307][ T5897] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1834.325985][T25359] lo speed is unknown, defaulting to 1000 [ 1834.333377][T25359] lo speed is unknown, defaulting to 1000 [ 1834.381456][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.398693][ T5897] usb 3-1: Product: syz [ 1834.466150][ T5897] usb 3-1: Manufacturer: syz [ 1834.470791][ T5897] usb 3-1: SerialNumber: syz [ 1834.521400][ T5897] usb 3-1: config 0 descriptor?? [ 1834.553671][ T5897] usb 3-1: can't set config #0, error -71 [ 1834.577637][ T5897] usb 3-1: USB disconnect, device number 116 [ 1834.681884][ T30] audit: type=1400 audit(2001050077.177:2143): avc: denied { getopt } for pid=25358 comm="syz.7.5251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1834.726196][T25254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.731604][T24337] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1834.789971][T25254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1834.870986][T24625] Bluetooth: hci2: command tx timeout [ 1836.713639][ T8309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.720878][ T8309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.950132][ T8309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.957287][ T8309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.975436][ T30] audit: type=1400 audit(2001050079.319:2144): avc: denied { egress } for pid=36 comm="kworker/u8:2" daddr=ff02::1:ff00:1b netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1836.997348][T25254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1837.046627][T25254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1837.064740][ T30] audit: type=1400 audit(2001050079.319:2145): avc: denied { sendto } for pid=36 comm="kworker/u8:2" daddr=ff02::1:ff00:1b netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1837.107293][ T30] audit: type=1400 audit(2001050079.450:2146): avc: denied { name_connect } for pid=25385 comm="syz.0.5257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1837.127585][ C1] vkms_vblank_simulate: vblank timer overrun [ 1837.146876][ T30] audit: type=1400 audit(2001050079.478:2147): avc: denied { bind } for pid=25385 comm="syz.0.5257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1837.175763][ T30] audit: type=1400 audit(2001050079.478:2148): avc: denied { accept } for pid=25385 comm="syz.0.5257" lport=39103 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1837.198848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1837.282429][ T30] audit: type=1400 audit(2001050079.478:2149): avc: denied { read } for pid=25385 comm="syz.0.5257" lport=39103 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1837.305975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1837.369645][ T30] audit: type=1400 audit(2001050079.506:2150): avc: denied { getopt } for pid=25387 comm="syz.2.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1837.419900][T25254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1837.501763][T25404] netlink: 'syz.2.5259': attribute type 10 has an invalid length. [ 1837.510813][T25404] team0: Device hsr_slave_0 failed to register rx_handler [ 1837.957866][T25254] veth0_vlan: entered promiscuous mode [ 1838.191722][T25254] veth1_vlan: entered promiscuous mode [ 1838.370849][T25254] veth0_macvtap: entered promiscuous mode [ 1838.428577][T25254] veth1_macvtap: entered promiscuous mode [ 1838.958820][T25254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1838.997200][T25254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1839.036332][T25254] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1839.065584][T25254] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1839.082674][T25254] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1839.092078][T25254] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.230182][T25436] kvm: Disabled LAPIC found during irq injection [ 1840.272997][T18324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1840.294298][T18324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.415988][T18324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1840.426497][T18324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.505738][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1840.505754][ T30] audit: type=1400 audit(2001050082.611:2155): avc: denied { mounton } for pid=25254 comm="syz-executor" path="/root/syzkaller.jQaWOM/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1840.575278][ T30] audit: type=1400 audit(2001050082.611:2156): avc: denied { mount } for pid=25254 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1840.694032][T25443] net_ratelimit: 10 callbacks suppressed [ 1840.694047][T25443] openvswitch: netlink: Message has 191 unknown bytes. [ 1840.720197][ T30] audit: type=1400 audit(2001050082.611:2157): avc: denied { mount } for pid=25254 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1840.760338][T25443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1840.824825][ T30] audit: type=1400 audit(2001050082.621:2158): avc: denied { mounton } for pid=25254 comm="syz-executor" path="/root/syzkaller.jQaWOM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1840.880448][ T30] audit: type=1400 audit(2001050082.621:2159): avc: denied { mounton } for pid=25254 comm="syz-executor" path="/root/syzkaller.jQaWOM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=102358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1841.457689][ T30] audit: type=1400 audit(2001050082.658:2160): avc: denied { unmount } for pid=25254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1841.887324][ T30] audit: type=1400 audit(2001050082.667:2161): avc: denied { mounton } for pid=25254 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1841.958706][ T30] audit: type=1400 audit(2001050082.667:2162): avc: denied { mount } for pid=25254 comm="syz-executor" name="/" dev="gadgetfs" ino=6641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1841.988642][ T30] audit: type=1400 audit(2001050082.667:2163): avc: denied { mount } for pid=25254 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1842.019327][T25457] netlink: 'syz.3.5272': attribute type 4 has an invalid length. [ 1842.022887][ T30] audit: type=1400 audit(2001050082.667:2164): avc: denied { mounton } for pid=25254 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1842.063406][T25457] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5272'. [ 1843.055761][T25479] netlink: 'syz.0.5280': attribute type 10 has an invalid length. [ 1843.068730][T25479] bond0: (slave wlan1): Releasing backup interface [ 1843.090859][T25479] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 1843.102501][T25479] team0: Port device wlan1 added [ 1843.328005][ T5884] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1843.488446][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 1843.502552][ T5884] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1843.517216][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1843.527961][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1843.538800][ T5884] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1843.557516][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1843.579363][ T5884] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1843.589758][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.742958][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1843.854133][T25490] sp0: Synchronizing with TNC [ 1843.900772][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.145980][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.265385][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1844.324103][ T5884] usb 4-1: GET_CAPABILITIES returned 0 [ 1844.341296][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.383546][ T5884] usbtmc 4-1:16.0: can't read capabilities [ 1844.752923][ T10] usb 3-1: config 0 descriptor?? [ 1845.062938][ T5884] usb 4-1: USB disconnect, device number 14 [ 1845.723870][ T10] savu 0003:1E7D:2D5A.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1846.137547][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5285'. [ 1846.169784][T25497] macvlan0: entered promiscuous mode [ 1846.184210][ T5884] usb 3-1: USB disconnect, device number 117 [ 1846.191749][T25484] input: syz0 as /devices/virtual/input/input125 [ 1846.203156][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1846.203167][ T30] audit: type=1400 audit(2001050087.942:2171): avc: denied { write } for pid=25483 comm="syz.2.5282" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1846.413465][T25497] batadv_slave_1: entered promiscuous mode [ 1846.624502][ T30] audit: type=1400 audit(2001050087.952:2172): avc: denied { read } for pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=3751 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1846.624943][T25497] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1846.647654][ T30] audit: type=1400 audit(2001050087.952:2173): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3751 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1846.701571][ T30] audit: type=1400 audit(2001050087.952:2174): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3751 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1846.737619][ T30] audit: type=1400 audit(2001050088.447:2175): avc: denied { write } for pid=25510 comm="syz.3.5289" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1846.760506][T25497] Cannot create hsr debugfs directory [ 1847.315199][T25517] ubi31: detaching mtd0 [ 1847.322070][T25517] ubi31: mtd0 is detached [ 1847.348996][ T30] audit: type=1400 audit(2001050088.990:2176): avc: denied { append } for pid=25513 comm="syz.5.5290" name="ubi_ctrl" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1847.615432][ T5884] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1847.801615][ T5884] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1847.883479][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.923251][ T5884] usb 4-1: Product: syz [ 1847.937785][ T5884] usb 4-1: Manufacturer: syz [ 1847.949236][T25526] netlink: 'syz.5.5294': attribute type 10 has an invalid length. [ 1847.960486][ T5884] usb 4-1: SerialNumber: syz [ 1847.972188][ T5884] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1847.989378][T25526] team0: Device hsr_slave_0 failed to register rx_handler [ 1848.355121][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1848.617371][T25534] netlink: 'syz.5.5296': attribute type 10 has an invalid length. [ 1848.768967][T25534] team0: Device hsr_slave_0 failed to register rx_handler [ 1849.582908][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1849.612319][ T10] ath9k_htc: Failed to initialize the device [ 1849.658044][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 1849.775282][T25543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5299'. [ 1849.907580][T25511] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1850.010643][ T5884] usb 4-1: USB disconnect, device number 15 [ 1850.513173][ T5929] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1850.705664][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 1850.719805][ T5929] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1850.731164][ T5929] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1850.822927][T24625] Bluetooth: hci1: command 0x0406 tx timeout [ 1851.024225][ T5929] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1851.032971][ T5929] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1851.042614][ T5929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1851.051659][ T5929] usb 4-1: config 0 has no interface number 0 [ 1851.057842][ T5929] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1851.074941][ T5929] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1851.111600][ T5929] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1851.147078][ T5929] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1851.163322][ T5929] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1851.170423][ T5929] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1851.181361][ T5929] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1851.199712][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.223054][ T5929] usb 4-1: Product: syz [ 1851.232952][ T5929] usb 4-1: Manufacturer: syz [ 1851.247497][ T5929] usb 4-1: SerialNumber: syz [ 1851.257517][ T5929] usb 4-1: config 0 descriptor?? [ 1851.277792][ T5929] usb 4-1: selecting invalid altsetting 2 [ 1851.287207][ T30] audit: type=1400 audit(2001574380.709:2177): avc: denied { create } for pid=25566 comm="syz.2.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1851.319119][T25569] lo speed is unknown, defaulting to 1000 [ 1851.376298][T25569] lo speed is unknown, defaulting to 1000 [ 1851.408019][ T30] audit: type=1400 audit(2001574380.709:2178): avc: denied { ioctl } for pid=25566 comm="syz.2.5307" path="ipc:[4026532950]" dev="nsfs" ino=4026532950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1852.048202][ C1] usb 4-1: async_complete: urb error -71 [ 1852.053961][ C1] usb 4-1: async_complete: urb error -71 [ 1852.059687][ C1] usb 4-1: async_complete: urb error -71 [ 1852.067725][ T5929] get_1284_register: usb error -71 [ 1852.072934][ T5929] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 1852.102044][ T5929] usb 4-1: USB disconnect, device number 16 [ 1852.298020][T25578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.320941][T25578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.369640][T25581] netlink: 'syz.5.5311': attribute type 1 has an invalid length. [ 1852.379094][T25581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5311'. [ 1852.397882][ T30] audit: type=1400 audit(2001574381.747:2179): avc: denied { create } for pid=25580 comm="syz.5.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1852.640672][ T5884] usb 8-1: new low-speed USB device number 41 using dummy_hcd [ 1852.780028][ T5884] usb 8-1: device descriptor read/64, error -71 [ 1853.133228][ T5884] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 1853.457053][ T30] audit: type=1400 audit(2002098670.739:2180): avc: denied { bind } for pid=25593 comm="syz.5.5315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1853.492207][T25587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5312'. [ 1853.628695][T25599] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5317'. [ 1853.635429][ T5884] usb 8-1: device descriptor read/64, error -71 [ 1853.735744][ T30] audit: type=1400 audit(2002098671.001:2181): avc: denied { write } for pid=25598 comm="syz.2.5317" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1853.772513][ T5884] usb usb8-port1: attempt power cycle [ 1853.879321][ T30] audit: type=1400 audit(2002098671.048:2182): avc: denied { bind } for pid=25598 comm="syz.2.5317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1854.324801][ T5884] usb 8-1: new low-speed USB device number 43 using dummy_hcd [ 1854.513623][ T5884] usb 8-1: device descriptor read/8, error -71 [ 1854.744551][ T30] audit: type=1400 audit(2002098671.937:2183): avc: denied { append } for pid=25615 comm="syz.2.5322" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1854.832949][ T5884] usb 8-1: new low-speed USB device number 44 using dummy_hcd [ 1854.854329][ T5884] usb 8-1: device descriptor read/8, error -71 [ 1854.947248][ T30] audit: type=1400 audit(2002098672.133:2184): avc: denied { setopt } for pid=25608 comm="syz.3.5319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1855.001669][ T5884] usb usb8-port1: unable to enumerate USB device [ 1855.324193][T25624] IPVS: set_ctl: invalid protocol: 0 172.20.20.45:20000 [ 1855.429272][ T30] audit: type=1400 audit(2002098672.189:2185): avc: denied { unlink } for pid=25608 comm="syz.3.5319" name="#f0" dev="tmpfs" ino=2360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1855.429318][ T30] audit: type=1400 audit(2002098672.189:2186): avc: denied { mount } for pid=25608 comm="syz.3.5319" name="/" dev="overlay" ino=2354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1856.313159][ T30] audit: type=1400 audit(2002098673.143:2187): avc: denied { create } for pid=25631 comm="syz.3.5326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1856.341620][ T30] audit: type=1400 audit(2002098673.386:2188): avc: denied { sys_admin } for pid=25631 comm="syz.3.5326" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1857.954387][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1857.954402][ T30] audit: type=1400 audit(2002622962.915:2191): avc: denied { map } for pid=25656 comm="syz.7.5335" path="socket:[104696]" dev="sockfs" ino=104696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1858.062690][T25652] SELinux: failed to load policy [ 1858.660904][T25666] overlayfs: failed to clone upperpath [ 1858.752363][T25652] binder: BINDER_SET_CONTEXT_MGR already set [ 1858.763629][T25652] binder: 25651:25652 ioctl 4018620d 200000000100 returned -16 [ 1859.280568][ T30] audit: type=1400 audit(2002622964.178:2192): avc: denied { connect } for pid=25677 comm="syz.5.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1859.325524][ T30] audit: type=1400 audit(2002622964.206:2193): avc: denied { setopt } for pid=25677 comm="syz.5.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1859.345873][ T30] audit: type=1400 audit(2002622964.215:2194): avc: denied { read } for pid=25677 comm="syz.5.5341" path="socket:[104870]" dev="sockfs" ino=104870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1859.369227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1859.387151][ T5929] usb 4-1: new high-speed USB device number 17 using dummy_hcd crond[5558]: tim[ 1859.650234][T25686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5342'. e disparity of 2[ 1859.660929][T25686] netlink: 'syz.2.5342': attribute type 5 has an invalid length. 6215 minutes det[ 1859.669827][T25686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5342'. ected [ 1859.682807][T25686] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 1859.691618][T25686] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 1859.700276][T25686] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 1859.708939][T25686] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 1859.717575][T25686] geneve3: entered promiscuous mode [ 1859.722961][T25686] geneve3: entered allmulticast mode [ 1859.804592][T25691] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5341'. [ 1859.868409][ T5929] usb 4-1: device descriptor read/64, error -71 [ 1859.997561][T25697] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1860.024044][T25697] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1860.181535][ T30] audit: type=1400 audit(2002622965.029:2195): avc: denied { read } for pid=25698 comm="syz.2.5345" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1860.199753][ T5929] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1860.255698][ T30] audit: type=1400 audit(2002622965.029:2196): avc: denied { open } for pid=25698 comm="syz.2.5345" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1860.348563][ T30] audit: type=1400 audit(2002622965.066:2197): avc: denied { ioctl } for pid=25698 comm="syz.2.5345" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1860.385239][ T5929] usb 4-1: device descriptor read/64, error -71 [ 1860.593787][ T5929] usb usb4-port1: attempt power cycle [ 1860.905943][T24337] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1861.072995][ T30] audit: type=1400 audit(2003147253.862:2198): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=37306 daddr=10.128.0.144 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1861.105160][T24337] usb 3-1: Using ep0 maxpacket: 16 [ 1861.115553][T24337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1861.130495][T24337] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1861.139865][T24337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.158591][T24337] usb 3-1: config 0 descriptor?? [ 1861.293178][ T5929] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1861.315978][T25711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5350'. [ 1861.333901][ T5929] usb 4-1: device descriptor read/8, error -71 [ 1861.718372][ T5929] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1861.741420][ T30] audit: type=1400 audit(2003147254.489:2199): avc: denied { ioctl } for pid=25722 comm="syz.7.5353" path="socket:[104117]" dev="sockfs" ino=104117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1861.776334][ T5929] usb 4-1: device descriptor read/8, error -71 [ 1861.812033][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1861.940989][ T5929] usb usb4-port1: unable to enumerate USB device [ 1862.065013][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1862.079207][T24337] sigmamicro 0003:1C4F:0059.0028: hidraw0: USB HID v0.09 Device [HID 1c4f:0059] on usb-dummy_hcd.2-1/input0 [ 1862.371250][T24337] libceph: connect (1)[c::]:6789 error -101 [ 1862.395590][T25740] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5356'. [ 1862.397091][T24337] libceph: mon0 (1)[c::]:6789 connect error [ 1862.413501][T25740] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5356'. [ 1862.436918][ T30] audit: type=1400 audit(2003147255.125:2200): avc: denied { ioctl } for pid=25739 comm="syz.5.5356" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1862.447243][ T5929] usb 3-1: USB disconnect, device number 118 [ 1862.820456][T25725] ceph: No mds server is up or the cluster is laggy [ 1862.999680][T25753] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5360'. [ 1863.026095][T25753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5360'. [ 1863.037006][T25753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5360'. [ 1863.959280][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1863.959296][ T30] audit: type=1400 audit(2003671544.559:2202): avc: denied { mount } for pid=25772 comm="syz.2.5367" name="/" dev="pstore" ino=3439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1864.121566][T25775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5367'. [ 1864.394740][T24625] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1864.401763][ T5897] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1864.412856][T24625] CPU: 0 UID: 0 PID: 24625 Comm: kworker/u9:1 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1864.412882][T24625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1864.412893][T24625] Workqueue: hci1 hci_rx_work [ 1864.412913][T24625] Call Trace: [ 1864.412918][T24625] [ 1864.412925][T24625] dump_stack_lvl+0x16c/0x1f0 [ 1864.412949][T24625] sysfs_warn_dup+0x7f/0xa0 [ 1864.412971][T24625] sysfs_create_dir_ns+0x24b/0x2b0 [ 1864.412992][T24625] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1864.413012][T24625] ? find_held_lock+0x2b/0x80 [ 1864.413033][T24625] ? do_raw_spin_unlock+0x172/0x230 [ 1864.413049][T24625] kobject_add_internal+0x2c4/0x9b0 [ 1864.413072][T24625] kobject_add+0x16e/0x240 [ 1864.413087][T24625] ? __pfx_kobject_add+0x10/0x10 [ 1864.413105][T24625] ? do_raw_spin_unlock+0x172/0x230 [ 1864.413121][T24625] ? kobject_put+0xab/0x5a0 [ 1864.413139][T24625] device_add+0x288/0x1a70 [ 1864.413154][T24625] ? __pfx_dev_set_name+0x10/0x10 [ 1864.413169][T24625] ? __pfx_device_add+0x10/0x10 [ 1864.413183][T24625] ? mgmt_send_event_skb+0x2fb/0x460 [ 1864.413211][T24625] hci_conn_add_sysfs+0x17e/0x230 [ 1864.413227][T24625] le_conn_complete_evt+0x1075/0x1d70 [ 1864.413251][T24625] ? rcu_is_watching+0x12/0xc0 [ 1864.413269][T24625] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1864.413290][T24625] ? hci_event_packet+0x459/0x11c0 [ 1864.413323][T24625] hci_le_conn_complete_evt+0x23c/0x370 [ 1864.413350][T24625] hci_le_meta_evt+0x357/0x5e0 [ 1864.413364][T24625] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1864.413397][T24625] hci_event_packet+0x682/0x11c0 [ 1864.413419][T24625] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1864.413433][T24625] ? __pfx_hci_event_packet+0x10/0x10 [ 1864.413456][T24625] ? kcov_remote_start+0x3c9/0x6d0 [ 1864.413472][T24625] ? lockdep_hardirqs_on+0x7c/0x110 [ 1864.413498][T24625] hci_rx_work+0x2c5/0x16b0 [ 1864.413513][T24625] ? rcu_is_watching+0x12/0xc0 [ 1864.413535][T24625] process_one_work+0x9cf/0x1b70 [ 1864.413558][T24625] ? __pfx_process_one_work+0x10/0x10 [ 1864.413579][T24625] ? assign_work+0x1a0/0x250 [ 1864.413603][T24625] worker_thread+0x6c8/0xf10 [ 1864.413623][T24625] ? __kthread_parkme+0x19e/0x250 [ 1864.413644][T24625] ? __pfx_worker_thread+0x10/0x10 [ 1864.413658][T24625] kthread+0x3c5/0x780 [ 1864.413671][T24625] ? __pfx_kthread+0x10/0x10 [ 1864.413685][T24625] ? rcu_is_watching+0x12/0xc0 [ 1864.413702][T24625] ? __pfx_kthread+0x10/0x10 [ 1864.413715][T24625] ret_from_fork+0x5d4/0x6f0 [ 1864.413735][T24625] ? __pfx_kthread+0x10/0x10 [ 1864.413748][T24625] ret_from_fork_asm+0x1a/0x30 [ 1864.413774][T24625] [ 1864.413826][T24625] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1864.680953][T24625] Bluetooth: hci1: failed to register connection device [ 1864.789011][ T5897] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1864.864824][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1864.915022][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1864.940745][ T30] audit: type=1400 audit(2003671545.476:2203): avc: denied { connect } for pid=25790 comm="syz.2.5371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1865.011168][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1865.023126][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1865.054051][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1865.075631][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1865.094102][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1865.114750][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1865.147374][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1865.170317][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1865.192987][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1865.226129][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1865.248546][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1865.268157][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1865.309067][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1865.324584][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1865.350693][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1865.428765][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1865.446831][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1865.462173][ T30] audit: type=1400 audit(2003671545.953:2204): avc: denied { getopt } for pid=25789 comm="syz.7.5372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1865.488763][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1865.541855][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1865.584628][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1865.627660][ T30] audit: type=1400 audit(2003671546.102:2205): avc: denied { listen } for pid=25789 comm="syz.7.5372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1865.711146][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1865.766545][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1865.812720][ T5897] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1865.899582][ T5897] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1865.914718][ T5897] usb 4-1: Product: syz [ 1865.919139][ T5897] usb 4-1: Manufacturer: syz [ 1865.928030][ T5897] usb 4-1: SerialNumber: syz [ 1865.935727][ T5897] usb 4-1: config 0 descriptor?? [ 1865.948715][ T5897] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1866.123570][ T5929] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1866.572638][ T30] audit: type=1326 audit(2004195834.998:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25808 comm="syz.2.5378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ebaf8e929 code=0x0 [ 1866.595989][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 1866.729953][T18324] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1866.749187][ T5929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.770665][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 1866.867629][T25813] 9pnet_fd: p9_fd_create_unix (25813): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1867.046301][T24625] Bluetooth: hci1: command 0x0406 tx timeout [ 1867.177651][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 1867.195748][ T5929] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1867.203331][ T5884] usb 4-1: USB disconnect, device number 21 [ 1867.227626][ T5884] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1867.234241][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.293807][ T5929] usb 6-1: Product: syz [ 1867.298007][ T5929] usb 6-1: Manufacturer: syz [ 1867.418028][ T5929] usb 6-1: SerialNumber: syz [ 1867.452079][ T5929] usb 6-1: config 0 descriptor?? [ 1867.458454][T25806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1867.783332][ T5929] usb 6-1: USB disconnect, device number 54 [ 1867.876667][T24337] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1868.040452][T24337] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1868.050750][T24337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.064420][T24337] usb 3-1: config 0 descriptor?? [ 1868.075572][T24337] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1868.299202][ T30] audit: type=1326 audit(2004195836.616:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25824 comm="syz.0.5382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1868.324163][ T30] audit: type=1326 audit(2004195836.616:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25824 comm="syz.0.5382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1868.369434][ T30] audit: type=1326 audit(2004195836.644:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25824 comm="syz.0.5382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1868.694183][ T30] audit: type=1326 audit(2004720124.960:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25824 comm="syz.0.5382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1868.753625][ T5929] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1868.760473][ T30] audit: type=1326 audit(2004720124.960:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25824 comm="syz.0.5382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f7b8e929 code=0x7ffc0000 [ 1869.854849][T24337] gspca_cpia1: usb_control_msg 02, error -110 [ 1870.055470][T25817] lo: left allmulticast mode [ 1870.064478][T24337] gspca_cpia1: usb_control_msg 05, error -32 [ 1870.133957][T24337] gspca_cpia1: usb_control_msg 05, error -32 [ 1870.177472][T25817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1870.225686][T24337] gspca_cpia1: usb_control_msg 05, error -32 [ 1870.263983][T24337] gspca_cpia1: usb_control_msg 05, error -32 [ 1870.280674][ T10] lo speed is unknown, defaulting to 1000 [ 1870.299726][T25829] __nla_validate_parse: 1 callbacks suppressed [ 1870.299743][T25829] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5383'. [ 1870.300142][ T10] syz2: Port: 1 Link DOWN [ 1870.322944][T24337] gspca_cpia1: usb_control_msg 04, error -71 [ 1870.332787][T24337] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 1870.343295][T25838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5386'. [ 1870.357618][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 1870.365710][T24337] usb 3-1: USB disconnect, device number 119 [ 1870.370188][ T5929] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 1870.390861][ T5929] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.419541][ T5929] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1870.557190][ T5929] usb 6-1: config 1 has no interface number 1 [ 1870.567579][ T5929] usb 6-1: config 1 interface 242 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1870.580995][ T5929] usb 6-1: config 1 interface 242 has no altsetting 0 [ 1870.590794][ T5929] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1870.593746][ T5884] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1870.600235][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.616363][ T5929] usb 6-1: Product: syz [ 1870.620539][ T5929] usb 6-1: Manufacturer: syz [ 1870.625706][ T5929] usb 6-1: SerialNumber: syz [ 1870.955952][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 1872.077096][ T30] audit: type=1400 audit(2004720127.410:2212): avc: denied { write } for pid=25850 comm="syz.7.5390" path="socket:[105569]" dev="sockfs" ino=105569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1872.303100][ T5884] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1872.311516][ T5884] usb 4-1: config 0 has no interface number 0 [ 1872.318033][ T5884] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1872.329177][ T5884] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1872.339164][ T5884] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1872.352680][ T5884] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1872.361923][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.370151][ T5884] usb 4-1: Product: syz [ 1872.374797][ T5884] usb 4-1: Manufacturer: syz [ 1872.377685][ T5929] aqc111 6-1:1.242: probe with driver aqc111 failed with error -22 [ 1872.379690][ T5884] usb 4-1: SerialNumber: syz [ 1872.381727][ T5884] usb 4-1: config 0 descriptor?? [ 1872.616684][ T5929] usb 6-1: USB disconnect, device number 55 [ 1872.663564][ T30] audit: type=1400 audit(2004720128.701:2213): avc: denied { ioctl } for pid=25858 comm="syz.2.5392" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1872.731365][ T5884] appletouch 4-1:0.85: Failed to read mode from device. [ 1872.765795][ T5884] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1872.774296][ T30] audit: type=1400 audit(2004720128.729:2214): avc: denied { setopt } for pid=25858 comm="syz.2.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1872.814832][ T30] audit: type=1400 audit(2004720128.841:2215): avc: denied { create } for pid=25865 comm="syz.7.5395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1872.846377][ T30] audit: type=1400 audit(2004720128.841:2216): avc: denied { map } for pid=25865 comm="syz.7.5395" path="socket:[105433]" dev="sockfs" ino=105433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1872.857056][ T5884] usb 4-1: USB disconnect, device number 22 [ 1872.871008][ T30] audit: type=1400 audit(2004720128.841:2217): avc: denied { read } for pid=25865 comm="syz.7.5395" path="socket:[105433]" dev="sockfs" ino=105433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1874.285157][T25888] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5400'. [ 1874.628727][ T30] audit: type=1400 audit(2004720130.543:2218): avc: denied { create } for pid=25895 comm="syz.3.5403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1874.972166][T25894] lo speed is unknown, defaulting to 1000 [ 1874.979382][T25894] lo speed is unknown, defaulting to 1000 [ 1875.114876][T25891] SELinux: failed to load policy [ 1875.195344][T25904] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=18457 sclass=netlink_xfrm_socket pid=25904 comm=syz.7.5404 [ 1875.213712][T25898] netlink: 'syz.3.5403': attribute type 11 has an invalid length. [ 1875.261523][T25904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=25904 comm=syz.7.5404 [ 1876.154153][ T30] audit: type=1400 audit(2004720131.956:2219): avc: denied { create } for pid=25916 comm="syz.2.5410" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1876.206426][T25921] netlink: 'syz.7.5407': attribute type 27 has an invalid length. [ 1876.214490][ T30] audit: type=1400 audit(2004720131.956:2220): avc: denied { write } for pid=25916 comm="syz.2.5410" name="file0" dev="tmpfs" ino=2666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1876.249128][ T5929] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1876.296536][ T30] audit: type=1400 audit(2004720131.956:2221): avc: denied { open } for pid=25916 comm="syz.2.5410" path="/498/file0" dev="tmpfs" ino=2666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1876.453603][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1876.487737][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.501466][T25921] could not allocate digest TFM handle crc32-pclmul [ 1876.667030][ T5929] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1876.676419][ T5929] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1876.693277][ T5929] usb 6-1: Manufacturer: syz [ 1876.707999][ T5929] usb 6-1: config 0 descriptor?? [ 1877.235234][ T5929] cougar 0003:060B:700A.0029: unknown main item tag 0x0 [ 1877.255564][ T5929] cougar 0003:060B:700A.0029: unknown main item tag 0x0 [ 1877.271568][ T5929] cougar 0003:060B:700A.0029: unknown main item tag 0x0 [ 1877.293656][ T5929] cougar 0003:060B:700A.0029: unknown main item tag 0x0 [ 1877.320466][ T5929] cougar 0003:060B:700A.0029: unknown main item tag 0x0 [ 1877.446383][ T5929] cougar 0003:060B:700A.0029: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1877.476471][ T5929] usb 6-1: USB disconnect, device number 56 [ 1877.795967][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1877.795982][ T30] audit: type=1326 audit(2004720133.499:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1877.883807][T25942] CUSE: info not properly terminated [ 1877.941193][ T30] audit: type=1326 audit(2004720133.499:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1877.972431][ T30] audit: type=1326 audit(2004720133.499:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1878.001215][ T30] audit: type=1326 audit(2004720133.499:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1878.030761][ T30] audit: type=1326 audit(2004720133.499:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1878.076674][T25949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5416'. [ 1878.109914][ T30] audit: type=1326 audit(2004720133.499:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1878.161589][ T30] audit: type=1326 audit(2004720133.499:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1878.226706][ T30] audit: type=1326 audit(2004720133.499:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1878.284125][ T30] audit: type=1326 audit(2004720133.499:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1878.581870][T25957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5418'. [ 1878.921783][ T30] audit: type=1326 audit(2004720133.499:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25927 comm="syz.2.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebaf8e929 code=0x7fc00000 [ 1878.953687][ T5884] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1879.126634][ T5884] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1879.157421][ T5884] usb 8-1: config 0 has no interface number 0 [ 1879.163613][ T5884] usb 8-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 1879.179318][ T5897] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1879.189014][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.210436][ T5884] usb 8-1: config 0 descriptor?? [ 1879.388039][T25970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1879.648130][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1880.051361][ T5897] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1880.087164][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1880.097320][ T5897] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1880.112923][ T5897] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1880.241905][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.268017][ T5897] usb 3-1: config 0 descriptor?? [ 1880.526979][ T5897] hdpvr 3-1:0.0: firmware version 0xf4 dated êÐœ~¯ÏLµj¶uU$«[-Må¿/h&ÉçûXgÁÞ†<|’ [ 1880.584769][ T5897] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 1880.632915][ T5884] asix 8-1:0.146 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1880.655559][ T5884] asix 8-1:0.146: probe with driver asix failed with error -71 [ 1880.697993][ T5884] usb 8-1: USB disconnect, device number 46 [ 1880.788193][T25994] lo speed is unknown, defaulting to 1000 [ 1880.809977][T25994] lo speed is unknown, defaulting to 1000 [ 1881.242131][ T5884] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1881.425359][ T5884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.442234][ T5884] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1881.452778][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1881.465220][ T5884] usb 8-1: SerialNumber: syz [ 1881.475843][ T5884] usb 8-1: bad CDC descriptors [ 1882.413309][ T5897] hdpvr 3-1:0.0: Could not setup controls [ 1882.428150][ T5897] hdpvr 3-1:0.0: registering videodev failed [ 1882.481346][ T5897] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 1882.682669][ T5897] usb 3-1: USB disconnect, device number 120 [ 1882.994010][ T5884] usb 8-1: USB disconnect, device number 47 [ 1883.213151][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1883.213169][ T30] audit: type=1400 audit(2004720138.568:2246): avc: denied { mount } for pid=26029 comm="syz.3.5438" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1883.264860][ T5897] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1883.273638][T26030] input: syz1 as /devices/virtual/input/input128 [ 1883.398553][ T30] audit: type=1400 audit(2004720138.736:2247): avc: denied { unmount } for pid=16957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1883.487615][ T5897] usb 3-1: device descriptor read/64, error -71 [ 1883.664632][T26043] overlay: Unknown parameter 'pcr' [ 1883.675813][ T30] audit: type=1400 audit(2004720138.998:2248): avc: denied { create } for pid=26042 comm="syz.0.5444" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1883.872343][ T5897] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1884.022025][ T5884] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1884.118362][ T5897] usb 3-1: device descriptor read/64, error -71 [ 1884.257095][ T5884] usb 4-1: device descriptor read/64, error -71 [ 1884.310462][ T5897] usb usb3-port1: attempt power cycle [ 1884.518383][T26062] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1884.535066][ T5884] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1884.547158][T26062] SELinux: security_context_str_to_sid (tmpfs) failed with errno=-22 [ 1884.727479][ T5884] usb 4-1: device descriptor read/64, error -71 [ 1884.794994][ T5897] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1884.845345][ T5884] usb usb4-port1: attempt power cycle [ 1885.053382][ T5897] usb 3-1: device descriptor read/8, error -71 [ 1885.262334][ T5884] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1885.317498][ T5884] usb 4-1: device descriptor read/8, error -71 [ 1885.369246][ T5897] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1885.404894][ T5897] usb 3-1: device descriptor read/8, error -71 [ 1885.558796][ T5897] usb usb3-port1: unable to enumerate USB device [ 1885.580492][ T5884] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1885.646206][T26110] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5456'. [ 1885.656237][T26110] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5456'. [ 1885.666295][T26110] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1885.985907][T26111] fuse: Bad value for 'fd' [ 1886.005537][ T5884] usb 4-1: device descriptor read/8, error -71 [ 1886.050069][T26115] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5458'. [ 1886.207960][ T5884] usb usb4-port1: unable to enumerate USB device [ 1886.832284][T26130] overlayfs: empty lowerdir [ 1887.089930][T26137] FAULT_INJECTION: forcing a failure. [ 1887.089930][T26137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.103578][T26137] CPU: 1 UID: 0 PID: 26137 Comm: syz.5.5463 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1887.103602][T26137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1887.103613][T26137] Call Trace: [ 1887.103618][T26137] [ 1887.103625][T26137] dump_stack_lvl+0x16c/0x1f0 [ 1887.103655][T26137] should_fail_ex+0x512/0x640 [ 1887.103680][T26137] _copy_to_user+0x32/0xd0 [ 1887.103706][T26137] simple_read_from_buffer+0xcb/0x170 [ 1887.103729][T26137] proc_fail_nth_read+0x197/0x270 [ 1887.103752][T26137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1887.103776][T26137] ? rw_verify_area+0xcf/0x680 [ 1887.103795][T26137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1887.103817][T26137] vfs_read+0x1e1/0xc60 [ 1887.103840][T26137] ? __pfx___mutex_lock+0x10/0x10 [ 1887.103866][T26137] ? __pfx_vfs_read+0x10/0x10 [ 1887.103894][T26137] ? __fget_files+0x20e/0x3c0 [ 1887.103925][T26137] ksys_read+0x12a/0x250 [ 1887.103946][T26137] ? __pfx_ksys_read+0x10/0x10 [ 1887.103975][T26137] do_syscall_64+0xcd/0x4c0 [ 1887.104004][T26137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.104022][T26137] RIP: 0033:0x7fe01798d33c [ 1887.104036][T26137] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1887.104053][T26137] RSP: 002b:00007fe018788030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1887.104070][T26137] RAX: ffffffffffffffda RBX: 00007fe017bb5fa0 RCX: 00007fe01798d33c [ 1887.104082][T26137] RDX: 000000000000000f RSI: 00007fe0187880a0 RDI: 0000000000000005 [ 1887.104092][T26137] RBP: 00007fe018788090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.104103][T26137] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001 [ 1887.104113][T26137] R13: 0000000000000000 R14: 00007fe017bb5fa0 R15: 00007fff69852a18 [ 1887.104138][T26137] [ 1887.806258][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5465'. [ 1888.192200][ T5929] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1888.538489][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1888.599611][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1888.602312][ T30] audit: type=1400 audit(2004720143.609:2249): avc: denied { read } for pid=26164 comm="syz.5.5472" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1888.612688][ T5929] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1888.651052][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.666248][ T30] audit: type=1400 audit(2004720143.665:2250): avc: denied { open } for pid=26164 comm="syz.5.5472" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1888.667955][ T5929] usb 4-1: config 0 descriptor?? [ 1888.710614][T26172] netlink: 'syz.5.5472': attribute type 4 has an invalid length. [ 1888.740403][ T30] audit: type=1400 audit(2004720143.740:2251): avc: denied { ioctl } for pid=26164 comm="syz.5.5472" path="/dev/usbmon0" dev="devtmpfs" ino=717 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1888.998363][T26157] netlink: 'syz.3.5470': attribute type 19 has an invalid length. [ 1889.138305][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 1889.144975][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1889.174577][ T5929] usb 4-1: USB disconnect, device number 27 [ 1890.265503][ T30] audit: type=1400 audit(2004720145.162:2252): avc: denied { block_suspend } for pid=26201 comm="syz.3.5482" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1890.558515][ T5884] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1890.721604][T26205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1890.740558][ T5884] usb 6-1: config 0 has no interfaces? [ 1890.783519][ T5884] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1890.795287][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.804633][ T5884] usb 6-1: Product: syz [ 1890.809535][ T5884] usb 6-1: Manufacturer: syz [ 1890.817437][ T5884] usb 6-1: SerialNumber: syz [ 1890.829440][ T5884] usb 6-1: config 0 descriptor?? [ 1890.994336][T26205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1891.033059][T26205] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1891.085679][T26205] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1891.178889][T26205] bond0 (unregistering): Released all slaves [ 1891.242454][T18324] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 1891.266680][ T5929] IPVS: starting estimator thread 0... [ 1891.272777][T18324] bond1: now running without any active interface! [ 1891.388780][T26213] IPVS: using max 80 ests per chain, 192000 per kthread [ 1891.406520][ T30] audit: type=1400 audit(2004720146.228:2253): avc: denied { ioctl } for pid=26214 comm="syz.0.5484" path="socket:[106307]" dev="sockfs" ino=106307 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1891.595910][T26217] SELinux: failed to load policy [ 1891.608097][T26217] binder: BINDER_SET_CONTEXT_MGR already set [ 1891.614341][T26217] binder: 26216:26217 ioctl 4018620d 200000000100 returned -16 [ 1891.655360][T26219] netlink: 'syz.0.5486': attribute type 12 has an invalid length. [ 1891.841232][T26227] netlink: 'syz.2.5490': attribute type 10 has an invalid length. [ 1891.875901][T26227] team0: Device hsr_slave_0 failed to register rx_handler [ 1892.076796][T26225] batadv_slave_1: entered promiscuous mode [ 1892.280846][T26225] batadv_slave_1: left promiscuous mode [ 1892.326279][ T30] audit: type=1400 audit(2004720147.079:2254): avc: denied { shutdown } for pid=26229 comm="syz.7.5491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1893.259830][ T5929] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1893.848506][ T5929] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.183222][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1894.193416][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1894.203387][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1894.216643][ T5929] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1894.226119][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.236820][ T5929] usb 8-1: config 0 descriptor?? [ 1894.473926][ T10] usb 8-1: USB disconnect, device number 48 [ 1894.819573][T26258] SELinux: failed to load policy [ 1894.837469][T26258] binder: BINDER_SET_CONTEXT_MGR already set [ 1894.844054][T26258] binder: 26257:26258 ioctl 4018620d 200000000100 returned -16 [ 1894.849824][T24337] usb 6-1: USB disconnect, device number 57 [ 1894.896084][ T5884] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1895.057731][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 1895.066029][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.080899][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.091953][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1895.093357][T26275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5502'. [ 1895.107798][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1895.129206][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.140233][ T5884] usb 3-1: config 0 descriptor?? [ 1895.194954][T26277] netlink: 'syz.5.5503': attribute type 10 has an invalid length. [ 1895.228008][T26277] team0: Device hsr_slave_0 failed to register rx_handler [ 1895.645248][ T30] audit: type=1400 audit(2004720150.203:2255): avc: denied { create } for pid=26283 comm="syz.7.5505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1895.649833][ T5884] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1895.714741][ T5884] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1895.722638][ T5884] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1895.730664][ T5884] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1895.739122][ T5884] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1895.748407][ T5884] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1895.758181][ T5884] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1895.781632][ T5884] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1895.790164][ T30] audit: type=1400 audit(2004720150.315:2256): avc: denied { map } for pid=26283 comm="syz.7.5505" path="/proc/1143/attr/exec" dev="proc" ino=107629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1895.820456][ T5884] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002A/input/input130 [ 1895.860246][ T30] audit: type=1400 audit(2004720150.315:2257): avc: denied { map } for pid=26283 comm="syz.7.5505" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1895.927594][ T5884] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1896.611870][ T5884] usb 3-1: USB disconnect, device number 125 acpid: input device has been disconnected, fd 3 [ 1896.690776][ T30] audit: type=1326 audit(2004720151.166:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26297 comm="syz.2.5509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ebaf8e929 code=0x0 [ 1897.951551][T26307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5512'. crond[5558]: time disparity of 43691 minutes detected [ 1898.588947][T26323] netlink: 'syz.3.5517': attribute type 10 has an invalid length. [ 1898.609294][T26321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5515'. [ 1900.637771][ T30] audit: type=1326 audit(2005244442.848:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26346 comm="syz.7.5524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2bcf8e929 code=0x0 [ 1900.706240][T26344] xt_CT: No such helper "snmp_trap" [ 1901.263619][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1901.329614][T26343] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1901.474458][T26359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5526'. [ 1901.571995][ T30] audit: type=1400 audit(2005768731.737:2260): avc: denied { read append } for pid=26360 comm="syz.5.5528" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1901.606579][ T30] audit: type=1400 audit(2005768731.737:2261): avc: denied { open } for pid=26360 comm="syz.5.5528" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1901.639588][ T30] audit: type=1400 audit(2005768731.765:2262): avc: denied { ioctl } for pid=26360 comm="syz.5.5528" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1902.483542][ T30] audit: type=1400 audit(2005768731.831:2263): avc: denied { setattr } for pid=26360 comm="syz.5.5528" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1904.082476][ T30] audit: type=1400 audit(2005768734.085:2264): avc: denied { read } for pid=26386 comm="syz.5.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1904.146690][T24625] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1904.159707][T20437] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1904.171210][T20437] CPU: 0 UID: 0 PID: 20437 Comm: kworker/u9:2 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1904.171239][T20437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1904.171253][T20437] Workqueue: hci2 hci_rx_work [ 1904.171274][T20437] Call Trace: [ 1904.171281][T20437] [ 1904.171288][T20437] dump_stack_lvl+0x16c/0x1f0 [ 1904.171316][T20437] sysfs_warn_dup+0x7f/0xa0 [ 1904.171340][T20437] sysfs_create_dir_ns+0x24b/0x2b0 [ 1904.171364][T20437] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1904.171387][T20437] ? find_held_lock+0x2b/0x80 [ 1904.171414][T20437] ? do_raw_spin_unlock+0x172/0x230 [ 1904.171434][T20437] kobject_add_internal+0x2c4/0x9b0 [ 1904.171457][T20437] kobject_add+0x16e/0x240 [ 1904.171474][T20437] ? __pfx_kobject_add+0x10/0x10 [ 1904.171494][T20437] ? do_raw_spin_unlock+0x172/0x230 [ 1904.171514][T20437] ? kobject_put+0xab/0x5a0 [ 1904.171539][T20437] device_add+0x288/0x1a70 [ 1904.171558][T20437] ? __pfx_dev_set_name+0x10/0x10 [ 1904.171578][T20437] ? __pfx_device_add+0x10/0x10 [ 1904.171597][T20437] ? mgmt_send_event_skb+0x2fb/0x460 [ 1904.171633][T20437] hci_conn_add_sysfs+0x17e/0x230 [ 1904.171659][T20437] le_conn_complete_evt+0x1075/0x1d70 [ 1904.171690][T20437] ? rcu_is_watching+0x12/0xc0 [ 1904.171714][T20437] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1904.171741][T20437] ? hci_event_packet+0x459/0x11c0 [ 1904.171777][T20437] hci_le_conn_complete_evt+0x23c/0x370 [ 1904.171813][T20437] hci_le_meta_evt+0x357/0x5e0 [ 1904.171831][T20437] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1904.171864][T20437] hci_event_packet+0x682/0x11c0 [ 1904.171892][T20437] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1904.171912][T20437] ? __pfx_hci_event_packet+0x10/0x10 [ 1904.171943][T20437] ? kcov_remote_start+0x3c9/0x6d0 [ 1904.171963][T20437] ? lockdep_hardirqs_on+0x7c/0x110 [ 1904.171996][T20437] hci_rx_work+0x2c5/0x16b0 [ 1904.172016][T20437] ? rcu_is_watching+0x12/0xc0 [ 1904.172040][T20437] process_one_work+0x9cf/0x1b70 [ 1904.172077][T20437] ? __pfx_process_one_work+0x10/0x10 [ 1904.172106][T20437] ? assign_work+0x1a0/0x250 [ 1904.172140][T20437] worker_thread+0x6c8/0xf10 [ 1904.172168][T20437] ? __kthread_parkme+0x19e/0x250 [ 1904.172197][T20437] ? __pfx_worker_thread+0x10/0x10 [ 1904.172217][T20437] kthread+0x3c5/0x780 [ 1904.172236][T20437] ? __pfx_kthread+0x10/0x10 [ 1904.172256][T20437] ? rcu_is_watching+0x12/0xc0 [ 1904.172279][T20437] ? __pfx_kthread+0x10/0x10 [ 1904.172298][T20437] ret_from_fork+0x5d4/0x6f0 [ 1904.172323][T20437] ? __pfx_kthread+0x10/0x10 [ 1904.172340][T20437] ret_from_fork_asm+0x1a/0x30 [ 1904.172373][T20437] [ 1904.172415][T20437] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1904.208845][T24625] CPU: 1 UID: 0 PID: 24625 Comm: kworker/u9:1 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1904.208872][T24625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1904.208885][T24625] Workqueue: hci3 hci_rx_work [ 1904.208906][T24625] Call Trace: [ 1904.208912][T24625] [ 1904.208918][T24625] dump_stack_lvl+0x16c/0x1f0 [ 1904.208945][T24625] sysfs_warn_dup+0x7f/0xa0 [ 1904.208969][T24625] sysfs_create_dir_ns+0x24b/0x2b0 [ 1904.208991][T24625] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1904.209014][T24625] ? find_held_lock+0x2b/0x80 [ 1904.209038][T24625] ? do_raw_spin_unlock+0x172/0x230 [ 1904.209057][T24625] kobject_add_internal+0x2c4/0x9b0 [ 1904.209078][T24625] kobject_add+0x16e/0x240 [ 1904.209094][T24625] ? __pfx_kobject_add+0x10/0x10 [ 1904.209111][T24625] ? do_raw_spin_unlock+0x172/0x230 [ 1904.209129][T24625] ? kobject_put+0xab/0x5a0 [ 1904.209150][T24625] device_add+0x288/0x1a70 [ 1904.209167][T24625] ? __pfx_dev_set_name+0x10/0x10 [ 1904.209185][T24625] ? __pfx_device_add+0x10/0x10 [ 1904.209200][T24625] ? mgmt_send_event_skb+0x2fb/0x460 [ 1904.209231][T24625] hci_conn_add_sysfs+0x17e/0x230 [ 1904.209249][T24625] le_conn_complete_evt+0x1075/0x1d70 [ 1904.209277][T24625] ? rcu_is_watching+0x12/0xc0 [ 1904.209304][T24625] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1904.209327][T24625] ? hci_event_packet+0x459/0x11c0 [ 1904.209359][T24625] hci_le_conn_complete_evt+0x23c/0x370 [ 1904.209389][T24625] hci_le_meta_evt+0x357/0x5e0 [ 1904.209404][T24625] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1904.209433][T24625] hci_event_packet+0x682/0x11c0 [ 1904.209459][T24625] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1904.209478][T24625] ? __pfx_hci_event_packet+0x10/0x10 [ 1904.209505][T24625] ? kcov_remote_start+0x3c9/0x6d0 [ 1904.209522][T24625] ? lockdep_hardirqs_on+0x7c/0x110 [ 1904.209551][T24625] hci_rx_work+0x2c5/0x16b0 [ 1904.209567][T24625] ? rcu_is_watching+0x12/0xc0 [ 1904.209590][T24625] process_one_work+0x9cf/0x1b70 [ 1904.209616][T24625] ? __pfx_process_one_work+0x10/0x10 [ 1904.209639][T24625] ? assign_work+0x1a0/0x250 [ 1904.209667][T24625] worker_thread+0x6c8/0xf10 [ 1904.209691][T24625] ? __kthread_parkme+0x19e/0x250 [ 1904.209724][T24625] ? __pfx_worker_thread+0x10/0x10 [ 1904.209740][T24625] kthread+0x3c5/0x780 [ 1904.209757][T24625] ? __pfx_kthread+0x10/0x10 [ 1904.209776][T24625] ? rcu_is_watching+0x12/0xc0 [ 1904.209795][T24625] ? __pfx_kthread+0x10/0x10 [ 1904.209813][T24625] ret_from_fork+0x5d4/0x6f0 [ 1904.209836][T24625] ? __pfx_kthread+0x10/0x10 [ 1904.209853][T24625] ret_from_fork_asm+0x1a/0x30 [ 1904.209886][T24625] [ 1904.209906][T24625] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1904.211122][T20437] Bluetooth: hci2: failed to register connection device [ 1904.215586][T24625] Bluetooth: hci3: failed to register connection device [ 1904.680460][ T31] INFO: task kworker/0:0:14170 blocked for more than 143 seconds. [ 1904.739188][ T31] Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 [ 1904.746951][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1904.759385][ T31] task:kworker/0:0 state:D stack:21048 pid:14170 tgid:14170 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1904.771573][ T31] Workqueue: usb_hub_wq hub_event [ 1904.779788][ T31] Call Trace: [ 1904.783236][ T31] [ 1904.786525][ T31] __schedule+0x116a/0x5de0 [ 1904.791063][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1904.796233][ T31] ? __pfx___schedule+0x10/0x10 [ 1904.804250][ T31] ? find_held_lock+0x2b/0x80 [ 1904.809422][ T31] ? schedule+0x2d7/0x3a0 [ 1904.813770][ T31] schedule+0xe7/0x3a0 [ 1904.855804][ T31] schedule_preempt_disabled+0x13/0x30 [ 1904.877364][ T31] __mutex_lock+0x6c7/0xb90 [ 1904.899406][ T31] ? hub_event+0x2434/0x4fa0 [ 1905.156895][ T31] ? hub_event+0x292b/0x4fa0 [ 1905.176096][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1905.188253][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1905.196260][ T31] ? hub_ext_port_status+0x1fa/0x670 [ 1905.202861][ T31] ? hub_event+0x292b/0x4fa0 [ 1905.208803][ T31] hub_event+0x292b/0x4fa0 [ 1905.213723][ T31] ? __pfx_hub_event+0x10/0x10 [ 1905.219803][ T31] ? assoc_array_insert+0x3d0/0x3970 [ 1905.227636][ T31] ? rcu_is_watching+0x12/0xc0 [ 1905.232549][ T31] process_one_work+0x9cf/0x1b70 [ 1905.237687][ T31] ? __pfx_psi_avgs_work+0x10/0x10 [ 1905.244014][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1905.249663][T26400] 9pnet_fd: Insufficient options for proto=fd [ 1905.259785][ T31] ? assign_work+0x1a0/0x250 [ 1905.264588][ T31] worker_thread+0x6c8/0xf10 [ 1905.270987][ T31] ? __kthread_parkme+0x19e/0x250 [ 1905.293292][ T30] audit: type=1400 audit(2005768735.198:2265): avc: denied { write } for pid=26399 comm="syz.0.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1905.319979][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1905.325431][ T31] kthread+0x3c5/0x780 [ 1905.329784][ T31] ? __pfx_kthread+0x10/0x10 [ 1905.337502][ T31] ? rcu_is_watching+0x12/0xc0 [ 1905.343378][ T31] ? __pfx_kthread+0x10/0x10 [ 1905.348110][ T31] ret_from_fork+0x5d4/0x6f0 [ 1905.356749][ T31] ? __pfx_kthread+0x10/0x10 [ 1905.361493][ T31] ret_from_fork_asm+0x1a/0x30 [ 1905.367913][ T31] [ 1905.371145][ T31] [ 1905.371145][ T31] Showing all locks held in the system: [ 1905.383705][ T31] 2 locks held by kworker/u8:0/12: [ 1905.389104][ T31] #0: ffff88801f7d3948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1905.400041][ T31] #1: ffffc90000117d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1905.412506][ T31] 1 lock held by khungtaskd/31: [ 1905.437580][ T31] #0: ffffffff8e5c4840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1905.462136][ T31] 2 locks held by getty/5576: [ 1905.467557][ T31] #0: ffff88814c75a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1905.477591][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1905.487732][ T31] 5 locks held by kworker/1:5/12939: [ 1905.493357][ T31] #0: ffff888140ae1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1905.504605][ T31] #1: ffffc9000b917d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1905.515867][ T31] #2: ffff88802a7b7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1905.524797][ T31] #3: ffff88802a8b2510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 1905.535717][ T31] #4: ffff88814676b868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 1905.545599][ T31] 5 locks held by kworker/0:0/14170: [ 1905.550879][ T31] #0: ffff888140ae1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1905.561767][ T31] #1: ffffc9000c367d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1905.573251][ T31] #2: ffff888146f71198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1905.582157][ T31] #3: ffff888146f74510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 1905.592167][ T31] #4: ffff88814676b868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 1905.602206][ T31] 1 lock held by syz.5.5535/26386: [ 1905.607302][ T31] #0: ffffffff8e5cfd00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1905.617337][ T31] [ 1905.619657][ T31] ============================================= [ 1905.619657][ T31] [ 1905.628140][ T31] NMI backtrace for cpu 1 [ 1905.628153][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1905.628174][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1905.628185][ T31] Call Trace: [ 1905.628192][ T31] [ 1905.628199][ T31] dump_stack_lvl+0x116/0x1f0 [ 1905.628230][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1905.628252][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1905.628278][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1905.628305][ T31] watchdog+0xf70/0x12c0 [ 1905.628330][ T31] ? __pfx_watchdog+0x10/0x10 [ 1905.628348][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1905.628374][ T31] ? __kthread_parkme+0x19e/0x250 [ 1905.628399][ T31] ? __pfx_watchdog+0x10/0x10 [ 1905.628418][ T31] kthread+0x3c5/0x780 [ 1905.628434][ T31] ? __pfx_kthread+0x10/0x10 [ 1905.628452][ T31] ? rcu_is_watching+0x12/0xc0 [ 1905.628472][ T31] ? __pfx_kthread+0x10/0x10 [ 1905.628488][ T31] ret_from_fork+0x5d4/0x6f0 [ 1905.628512][ T31] ? __pfx_kthread+0x10/0x10 [ 1905.628528][ T31] ret_from_fork_asm+0x1a/0x30 [ 1905.628555][ T31] [ 1905.628561][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1905.747793][ C0] NMI backtrace for cpu 0 [ 1905.747807][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1905.747825][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1905.747834][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1905.747858][ C0] Code: bb 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 50 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1905.747872][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 1905.747884][ C0] RAX: 0000000008912f1d RBX: 0000000000000000 RCX: ffffffff8b7fbc99 [ 1905.747894][ C0] RDX: 0000000000000000 RSI: ffffffff8de18f75 RDI: ffffffff8c1570a0 [ 1905.747903][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 1905.747912][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 1905.747921][ C0] R13: ffffffff8e297780 R14: ffffffff90a80c50 R15: 0000000000000000 [ 1905.747930][ C0] FS: 0000000000000000(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 1905.747944][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1905.747954][ C0] CR2: 00007fe017b81178 CR3: 00000000358e7000 CR4: 00000000003526f0 [ 1905.747963][ C0] DR0: 0000000000000040 DR1: 0000000000000004 DR2: 0000000000000003 [ 1905.747972][ C0] DR3: 00000000000010e3 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1905.747983][ C0] Call Trace: [ 1905.747989][ C0] [ 1905.747994][ C0] default_idle+0x13/0x20 [ 1905.748008][ C0] default_idle_call+0x6d/0xb0 [ 1905.748023][ C0] do_idle+0x391/0x510 [ 1905.748043][ C0] ? __pfx_do_idle+0x10/0x10 [ 1905.748057][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 1905.748076][ C0] ? do_idle+0x2e8/0x510 [ 1905.748092][ C0] cpu_startup_entry+0x4f/0x60 [ 1905.748108][ C0] rest_init+0x16b/0x2b0 [ 1905.748121][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1905.748137][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1905.748156][ C0] start_kernel+0x3ee/0x4d0 [ 1905.748175][ C0] x86_64_start_reservations+0x18/0x30 [ 1905.748192][ C0] x86_64_start_kernel+0x130/0x190 [ 1905.748209][ C0] common_startup_64+0x13e/0x148 [ 1905.748227][ C0] [ 1905.748841][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1905.748854][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 1905.748874][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1905.748883][ T31] Call Trace: [ 1905.748889][ T31] [ 1905.748896][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1905.748922][ T31] panic+0x71c/0x800 [ 1905.748943][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1905.748964][ T31] ? __pfx_panic+0x10/0x10 [ 1905.748985][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1905.749008][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1905.749029][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1905.749049][ T31] ? watchdog+0xdda/0x12c0 [ 1905.749074][ T31] ? watchdog+0xdcd/0x12c0 [ 1905.749094][ T31] watchdog+0xdeb/0x12c0 [ 1905.749114][ T31] ? __pfx_watchdog+0x10/0x10 [ 1905.749130][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1905.749154][ T31] ? __kthread_parkme+0x19e/0x250 [ 1905.749176][ T31] ? __pfx_watchdog+0x10/0x10 [ 1905.749193][ T31] kthread+0x3c5/0x780 [ 1905.749208][ T31] ? __pfx_kthread+0x10/0x10 [ 1905.749224][ T31] ? rcu_is_watching+0x12/0xc0 [ 1905.749244][ T31] ? __pfx_kthread+0x10/0x10 [ 1905.749260][ T31] ret_from_fork+0x5d4/0x6f0 [ 1905.749281][ T31] ? __pfx_kthread+0x10/0x10 [ 1905.749295][ T31] ret_from_fork_asm+0x1a/0x30 [ 1905.749322][ T31] [ 1906.097225][ T31] Kernel Offset: disabled [ 1906.101526][ T31] Rebooting in 86400 seconds..