last executing test programs: 2m45.365135279s ago: executing program 1 (id=107): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xfffff589, 0xcd, &(0x7f0000000240)=""/205, 0x41100, 0x23, '\x00', r3, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x8, 0x7, 0x8}, 0x10, r4, r0, 0x1, 0x0, &(0x7f0000000780)=[{0x0, 0x2, 0xe, 0xb}], 0x10, 0x4}, 0x94) 2m45.160231396s ago: executing program 1 (id=108): r0 = userfaultfd(0x80001) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x123c1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a000000040000000602000000000000febd22", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r2, 0x406, r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x60, 0x140e, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x24044005) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7fffffff) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) mkdir(0x0, 0x49) 2m44.256953007s ago: executing program 1 (id=113): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) execveat(r4, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={0x0, @llc={0x1a, 0x30a, 0xff, 0x9, 0xa, 0x3, @random="b5457f174fd7"}, @hci={0x1f, 0x2, 0x4}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffff001, 0x87, 0x8}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="7392dfd5c04ebfdc9315f1d46e685c0df46f0aa36af8f251f8914df750f768c7785e9a410c7b6f52213fad22ccba5541900e0f426e6f39a27de3969ab25d16fd07d62e7c8d580cb3d3572c5b7e185345791d594c7c0becf7300f9f556ec5082bd4d245ffd7a3c745e374a9dce1128b3f66515b88968bb3b4e13ac63d2207c5767b814b19f915048cb80740794492b768a4cdf8d0e62dec1845f7b5d700820a5d95ad3495ce15cf2965ba1f8acb8bb52eb78894982b042b786d09f0b16d5201578841e1753180bd8267bc3930f2fba253", 0xd0}], 0x1) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 'xfrm0\x00'}}, 0x1e) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2m43.456387741s ago: executing program 1 (id=114): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) fallocate(r0, 0x40, 0x8, 0x8000000000000000) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f0000000100)={0x80, 0x0, 0x8001}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendfile(r2, r0, 0x0, 0x4000000053d2) 2m43.30422415s ago: executing program 1 (id=117): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0xfeff) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x116c, {{0x6, 0xfffffffffffffffe, 0x4, 0x1, 0xfffffffe, 0x3, {0x1, 0x7, 0x5, 0xffff, 0x4, 0x4, 0x20040, 0x9, 0x0, 0x2000, 0x0, r2, 0x0, 0xd8, 0x400001}}, {0x0, 0x15}}}, 0x0, 0x0}) 2m42.284173074s ago: executing program 1 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0080000000000000000000000000000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000580)="80fd0278004033a3433c80042affa745766714f7223aae67adb663010a5c0a4120b5a8cab68ae75989071f3d8370bb6c6288d916c80856a6bec79b1cda6b40cda40f", 0x42}], 0x1, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x24) r3 = socket(0x16, 0x2, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000140)={0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, 0x20) r4 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000340)={&(0x7f0000000300)=[{0x9, 0x1000, 0x4f, &(0x7f0000000040)="f54c5a7621f2cdf3e2b25638f60ca12f541555766b6ce9871a0e4f6f55b6019651d51bcb396e3153f3effb8d2f60f31e722944317c9dd6a85ead81968b1245f076ba8a1e882bd034bb4b55dee7d89f"}, {0x7, 0x4000, 0x0, 0x0}], 0x2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) getpid() socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x4, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync}) 2m27.06340565s ago: executing program 32 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0080000000000000000000000000000000000008"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000580)="80fd0278004033a3433c80042affa745766714f7223aae67adb663010a5c0a4120b5a8cab68ae75989071f3d8370bb6c6288d916c80856a6bec79b1cda6b40cda40f", 0x42}], 0x1, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x24) r3 = socket(0x16, 0x2, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000140)={0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, 0x20) r4 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000340)={&(0x7f0000000300)=[{0x9, 0x1000, 0x4f, &(0x7f0000000040)="f54c5a7621f2cdf3e2b25638f60ca12f541555766b6ce9871a0e4f6f55b6019651d51bcb396e3153f3effb8d2f60f31e722944317c9dd6a85ead81968b1245f076ba8a1e882bd034bb4b55dee7d89f"}, {0x7, 0x4000, 0x0, 0x0}], 0x2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) getpid() socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x4, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000080)={0x0, @frame_sync}) 4.952149132s ago: executing program 4 (id=1173): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000100)={{@any, 0x2}, 0x6, 0x9, 0xffffffff, 0x44}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x9) socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) 3.992280595s ago: executing program 3 (id=1182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff0100000047c535301169767f575bee68ed46e1153a001975bc9c044796fe73676fc074de80f9c1e80c0b8eac6338f5d7b06c7fae5f6bfd56ae8d9e0e44b1eb545a414acaced502b486abeb677c1f2c6873d5817c80e0fec013cefc51c2d166463adc78d8f0ebff3457c6e955535e3ba0d16d48e278", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f0000000d00)) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x4008890}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x101, 0x2000000, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000280)={0x4, 0x7, 0x1, {0x1, @vbi={0x659, 0xfffffffa, 0x5, 0x59565955, [0x7, 0x5], [0x5, 0x100], 0x1}}, 0x10e}) 3.960459908s ago: executing program 4 (id=1183): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000100)=0x207, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x240000e1, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0xc, 0x6, @multicast}, 0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0xc, 0x80000001, 0x2, 0x4, 0x3, 0xffffffffffffffff}) sched_setaffinity(r6, 0x8, &(0x7f0000000100)=0x655f) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x88) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800000000000) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) 3.748389564s ago: executing program 4 (id=1185): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3f, &(0x7f0000000100)=[{0x6, 0x7, 0xff, 0x3}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x2, 0x0) 2.980068262s ago: executing program 3 (id=1191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000380)={{}, {@void, @max}}) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[], 0x30}], 0x1, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000500)={0x5, @vbi={0x3, 0xd41f, 0x1ff, 0x32315258, [0x3df7, 0xfffffff2], [0x251, 0x2], 0x108}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) pipe2$watch_queue(&(0x7f00000001c0), 0x80) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x64, 0x2007, @fd_index=0x4, 0x9, 0x0, 0x0, 0x19}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.639820993s ago: executing program 5 (id=1193): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000100)={{@any, 0x2}, 0x6, 0x9, 0xffffffff, 0x44}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x9) socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) 2.638839721s ago: executing program 4 (id=1194): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x721701, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) write(r1, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000eb6bfdea8917b710800000db1b46e6e423b2c1702d0390814145d01407000000000000008f2bc6b801fb29588f8f923b05d4928608d986b93f8d3ec6c5a4543e1b10fbfe93efeeb8412c57c0f2e9d0f165a7fd25fcf6e123335775c613d728c35d750ca39b3905785c5d71dd0b43a905394c769a3ff50ddcd18e4d52fb45242b922e5b76fed8b71b66f6e8e963053b2e08aff98f0fec45483dced74bbbe8934288bd962444808e8db89d963f78cfb0eb046453b7158c079b3bdace6ac69ce0aab2f6bcde0d2daec48bb3919dafe0f3c34a86ddb095f867b4415c91e1063edfb54b88d01564b51d0e929663129a641c08ea64059bb151fff3f3ca2ddc405d1b51dc91d1aa8e95e9b9395ee46e4ce277323046aaaa489d4e1ac26c440c5936ec014ff73fa9e7010984db3ca5e7e83a9bbb0407397fafe0f1f0c08b2f1a60d8026549c825c783f41d38d7a9cde1955d36f4f6e6235bb360e045c1566406528973b95a41514f8d2fd80526d05d5a6bbcef9334238fe78aaa759926ba165962faed84795de1d71b9555434671158af6a690c7445413e430d51bf1e846e8e2dbeb92a5002c6bebd252af558361e6d835aea2ce3308b8053da95152b93373793765968d9e195c725c630e2167acf4e3d68f947fca66628fcf1acad3db0000000000000d34cde0bfb9b4e5d9f8", @ANYRES16, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18005900000000000000000000000000181200008cdb99e348abd83476e4ee25d1", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r6, &(0x7f0000000640), 0x0}, 0x20) 2.040321099s ago: executing program 3 (id=1195): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x7, 0x8}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x8, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0x400, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x800006, 0x2, 0xfffffffb, 0x3, 0xd87, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x8, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9f7c, 0x1, 0x3a21, 0x1000, 0x200008, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7ffffffd, 0x95d, 0x553, 0x6, 0x4, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x400, 0x0, 0x6e38, 0x5, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x3, 0xd, 0x9, 0xfff, 0x4, 0x3, 0x40, 0x1, 0x28, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x9, 0x9, 0x5, 0x3, 0x0, 0xffff4e1c, 0xc8d3, 0x33, 0x9a45, 0x0, 0x8, 0x1, 0xfffffffa, 0x43, 0x69d, 0x8, 0xfffc, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x9, 0x0, 0x9, 0x8c2, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x38440a4f, 0x0, 0x4, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0x10007, 0x7f, 0x4, 0x3], [0x0, 0x2, 0x5, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x2, 0x4606, 0x4, 0x9, 0x80000001, 0x2, 0x9, 0x2, 0x10007, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x2, 0x2, 0x6, 0x100, 0x5aa, 0xec9b, 0x61c9, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x7, 0x202, 0xd03f, 0x8003, 0x7, 0x8000, 0x5, 0x7, 0xfffffffc, 0x4, 0x100006, 0xeff]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept4(r1, &(0x7f0000000200)=@caif=@rfm, 0x0, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000500), 0xc00, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xffffffffffffff10, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary="98"}]}]}, 0x2c}], 0x1}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) execve(0x0, &(0x7f0000000780)={[&(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*ck\xbf\xc8\x8f\xd3U\xd1\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4', 0x0, &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08005a0627f20000000009019078b7237ce725d6e729000090781209183f2500000000680000000100007f00c6357f00000100186371ae9b03"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109028100020108e0030904000001020d00000a240600010b2251b58a05240002000d240f0108000000040080420706241a69001205240103020c241b040009000702f4014e07240a0403060108241cc8000905000905810300020681030904010000020d00000904010102020d000009058202400009097f090503024000980200fe09dac5b0"], &(0x7f0000000940)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x4d, 0x9, 0x3, 0xff, 0x3}, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f0c000107101200730200"]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="14002c800800"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 2.039675745s ago: executing program 2 (id=1196): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="97"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) read(r7, &(0x7f0000000040)=""/252, 0xfc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c000780080012400a000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000003c0)={0x16, 0x1, 0x2, "00000040800000f7c28dca4c210000000000000000ff0700", 0x50424752}) 1.992274453s ago: executing program 0 (id=1197): sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8090) syz_open_procfs(0x0, &(0x7f0000000280)='net/sco\x00') r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) recvfrom(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x12000, &(0x7f00000003c0)=@caif=@util={0x25, "f0e05ab9ce8677c8b5880de1b0a7c8eb"}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYBLOB=',version=9p2000.u,smackfsfloor=\\,pcr=0000000000000000004']) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, &(0x7f0000000080)) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0xc0a85320, &(0x7f00000000c0)={0x1080}) r4 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) preadv2(r4, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.836130343s ago: executing program 0 (id=1198): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20006800e9f291d038090000000000000000000000000800050800", @ANYBLOB="a6cf4f07bfa737d5c00a58498791fb8c5db6216227df29560ea32946f233340303b2788d26"], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x64000) 1.781715733s ago: executing program 0 (id=1199): sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="43cd1c18e079eb2aa3fadf1e5fc6091ec3e6f6d5e9e6f97cda43af768ca6498e7a62831d183b256122a226bd4cc07a01ff433888239bfaa3d2967afba1438dbed65c2ab0765128f9bc5fd65657d4da2f4c5b2178fd5d9d2a203dffb08d9558aa0cd80cee128d86a6ba985ef8908e53181ee878e28db459a6fdfc99d9c45a7014eec2adb98f8821b511ef93dfbc7e7c0ea911e495e073d5b1270cbb3bf841accb882c50ef368345178b8f960a73b11f4a4e43d79b73f36b1f7aa8df8ebae9a32e91f418b86f47c09a3c5452a768410a700d0bd01190f3489d2da017c52f006e6e4e7b077e", 0xe4, 0x40, &(0x7f0000000140)={0xa, 0x4e20, 0x240, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = gettid() prlimit64(r2, 0xa, &(0x7f0000000140)={0x7, 0xfe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000580)=""/160) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56", 0x9f}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb", 0x15}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a1", 0x63}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c", 0x47}], 0x5, 0x0, 0x0, 0x80}, 0x4004080) 1.711410864s ago: executing program 4 (id=1200): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002940)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r4, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0), 0x4) writev(r2, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0xfe}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0xf3a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.660416561s ago: executing program 0 (id=1201): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x21403e, 0x800}, 0x20) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) 1.625215713s ago: executing program 0 (id=1202): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x101281, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000513000/0xb000)=nil, 0xb000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r4, @ANYBLOB="fff1a0000000770f0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x2, 0x10000, 0x5, 0x3, 0xcc7, 0x1000000c, 0x7, 0xa, 0x100, 0x2, 0x7ff, 0x4, 0x1, 0x6, 0x101, 0xffff, 0x1a449, 0x3, 0x40000003, 0x8, 0xcaaa, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 1.56852682s ago: executing program 4 (id=1203): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x10, 0xffff0000, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x200, 0xfef}) prlimit64(r0, 0x5, &(0x7f0000000140)={0x0, 0x40009b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0xffffffff, 0x0, 0x8001}, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="76210106e57e74db4710f68acbceb4212ef9008e00"/30, @ANYRES64=0x0], 0x10) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000600000000000000941a969c664560e5d59ab17d7ba9c52bea684e43c905aceb9f874e8719c3b0bf00662f23569e34a527b5aad8f416c20c1141227e30da99c30f2802918101", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0xb, @string={0xb, 0x3, "9a0000000000000000"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "1a79"}}, 0x0, 0x0}, 0x0) close(0x4) close(r1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000180)={0x5, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.501609783s ago: executing program 5 (id=1204): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3f, &(0x7f0000000100)=[{0x6, 0x7, 0xff, 0x3}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x2, 0x0) 1.320318478s ago: executing program 3 (id=1205): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000004d0000004d000000060000000800000000000010080000000f0000000103000f01000000050000000a0000110200000a06000000000000000000000203000000070000000000000805000000000000002e00005f00"/110], &(0x7f0000000740)=""/206, 0x6e, 0xce, 0x0, 0x1, 0x10000}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x541b, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 1.017212278s ago: executing program 2 (id=1206): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) chdir(&(0x7f0000000140)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 901.667607ms ago: executing program 2 (id=1207): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000540)=""/110, 0x6e, 0x0, &(0x7f0000000940)=""/4096, 0x1000}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000400000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40000, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x16, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd95, 0x0, 0x0, 0x0, 0x9}, [@generic={0x8, 0x6, 0xd, 0x2, 0x2}, @generic={0x3f, 0xa, 0x2, 0xb55f, 0x2}, @alu={0x4, 0x0, 0xa, 0x5, 0x5, 0xffffffffffffffc0, 0xebe8dc918e622d54}, @generic={0xdd, 0x4, 0x6, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}, @map_idx={0x18, 0x3}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x4c, &(0x7f0000000300)=""/76, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x3, 0x100, 0x5}, 0x10, r5, r6, 0x0, &(0x7f00000006c0)=[r7], 0x0, 0x10, 0x7}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000440)=0x91) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x200, &(0x7f00008f0000/0x1000)=nil) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000080)) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 721.463999ms ago: executing program 2 (id=1208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a2100) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000180)="a92e81d0d775a3991808ff3c2330164c", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x88001) recvmmsg(r8, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4095, 0xfff}], 0x1}, 0x7ff}], 0x1, 0x102, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) close_range(r4, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{r3, 0x9746}], 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r11, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000340)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x16, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x100005, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) 719.868273ms ago: executing program 0 (id=1209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000000)=0x86aa602b7c8c7685) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = userfaultfd(0x80001) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write(r2, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) 584.360577ms ago: executing program 2 (id=1210): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)=0x0) capset(&(0x7f0000000740)={0x20080522, r0}, &(0x7f0000000780)={0xab67969, 0x9, 0x8, 0xb, 0x82f5, 0x8}) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r2, 0x0, 0x0, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) close(r4) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4089, 0xff9}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/182, 0xb6}}], 0x1, 0x2040040, &(0x7f0000000040)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) 518.175047ms ago: executing program 2 (id=1211): r0 = syz_open_dev$sg(&(0x7f0000019140), 0xdfff0000, 0x2842) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) syz_emit_ethernet(0x46, &(0x7f0000019280)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019240)={&(0x7f0000019180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000019200)={&(0x7f00000191c0)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c0c0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000900", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000190c0)={0x0, 'wlan0\x00', {0x3}, 0xea}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r10, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_GET_CLOCK(r10, 0x8030ae7c, &(0x7f0000000100)) 477.534628ms ago: executing program 5 (id=1212): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="283562e8d6041789802293e201699313810000000b06010300000200000000000500080205000100"], 0x28}, 0x1, 0x0, 0x0, 0x48}, 0x4800) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x1, "c1adb1", 0x9, 0xe}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x1, 0x9}, {0x80000000, 0x5}], 0xee00}, 0x18, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, 0x0) 374.978517ms ago: executing program 5 (id=1213): r0 = socket$unix(0x1, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX]) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="b5ceccf98436fb1c2446c3e00312fd64f9ddfa87c5120763fc56920a40cdcdaa475ea156dd08aa6743ac5ab308c27f62e8baf495a7d58630e50762fef39c7f6e1d218f99c6511b9451202a1467d945153766171aadd8a7bc9c1615e814b462dd2a81730c71fe9b9e27b65477894b763fd4a55274af919f23079d8a4bad5b50204c9c49af6c36d4b399c8c6717c3152d38427184954997a10bd89201c089b62553e379a482310c290b8ef5ab9d316e6b966dcab332dfbaa3df066f79acc02d02a10c070a0c450c451a29b2224306983fa1c9d1ad06d7aa0130969f5c9ddee52923a615c3699e3c7bf0e533a"}], 0x5, &(0x7f00000008c0)=[@timestamping={{0x0, 0x1, 0x25, 0x8}}], 0xfffffffffffffdfc}, 0x0) 374.003206ms ago: executing program 3 (id=1214): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f00000001c0)={0x1, 0x3, 0x7, 0x9d83, 0x8, 0x8}) ioctl$FIONCLEX(r0, 0x5450) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', r3, 0x1, 0x8, 0x9, 0x100, {{0xe, 0x4, 0x1, 0x8, 0x38, 0x67, 0x0, 0x8a, 0x2b, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x4b, 0x0, 0xb, [0x800, 0x5, 0x9, 0x10, 0x5, 0x5, 0x6]}]}}}}}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0x10000, 0x100000}) 216.329384ms ago: executing program 5 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}}, 0x24040800) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 215.869513ms ago: executing program 3 (id=1216): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="97"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) read(r7, &(0x7f0000000040)=""/252, 0xfc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c000780080012400a000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000003c0)={0x16, 0x1, 0x2, "00000040800000f7c28dca4c210000000000000000ff0700", 0x50424752}) 0s ago: executing program 5 (id=1217): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0xfffffff9) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r11 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r11, &(0x7f0000000480)="64f416a6ed697ec53376eb8b17588b30c9ff37e169c3c5044c50bad660dcefeab8562b1c1cbd49b5c88ab90c5e691ad9c9c8ea90a511e0bfec57587afd09dc0cfbf18ad5000e28a0b98db1cd470f7034f887d55caf00a00b7367c9c9938c0c11", 0x60, 0x4008000, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x58, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0x9}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x89}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) kernel console output (not intermixed with test programs): text=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.001885][ T30] audit: type=1400 audit(1761641944.009:384): avc: denied { write } for pid=6422 comm="syz.4.134" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.025449][ T30] audit: type=1400 audit(1761641944.089:385): avc: denied { execute_no_trans } for pid=6425 comm="syz.3.135" path="/32/file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.044736][ T6429] tmpfs: Bad value for 'mpol' [ 114.057429][ T6426] bond_slave_0: entered promiscuous mode [ 114.063370][ T6426] bond_slave_1: entered promiscuous mode [ 114.084327][ T6426] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.096125][ T6426] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 114.105390][ T5817] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 114.145335][ T30] audit: type=1400 audit(1761641944.319:386): avc: denied { listen } for pid=6425 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 114.170539][ T30] audit: type=1400 audit(1761641944.339:387): avc: denied { accept } for pid=6425 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 114.781123][ T9] usb 3-1: USB disconnect, device number 5 [ 114.834735][ T5936] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.994957][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 115.007727][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 115.030443][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.032845][ T6450] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.041806][ T5936] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.099785][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 115.117399][ T6453] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.135051][ T5936] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 115.195867][ T5936] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 115.206985][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.231374][ T5936] usb 5-1: config 0 descriptor?? [ 115.241291][ T6440] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.370694][ T6437] orangefs_mount: mount request failed with -4 [ 115.394773][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.084852][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 116.105591][ T9] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 116.114255][ T9] usb 4-1: config 0 has no interface number 0 [ 116.120687][ T9] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 116.136809][ T9] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 116.211285][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.260062][ T9] usb 4-1: Product: syz [ 116.264302][ T9] usb 4-1: Manufacturer: syz [ 116.287986][ T9] usb 4-1: SerialNumber: syz [ 116.331444][ T9] usb 4-1: config 0 descriptor?? [ 116.974654][ T5874] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 117.029557][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input6 [ 117.145939][ T5874] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 117.154324][ T5874] usb 1-1: config 54 has no interface number 0 [ 117.162997][ T5874] usb 1-1: config 54 interface 154 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 117.176777][ T5874] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 117.186285][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.194310][ T5874] usb 1-1: Product: syz [ 117.198881][ T5874] usb 1-1: Manufacturer: syz [ 117.203521][ T5874] usb 1-1: SerialNumber: syz [ 117.298864][ T5936] usb 4-1: USB disconnect, device number 8 [ 117.315004][ T5817] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 117.800023][ T9] usb 5-1: USB disconnect, device number 4 [ 117.868847][ T5874] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 117.870328][ T5932] usb 1-1: Failed to submit usb control message: -71 [ 117.909876][ T5932] usb 1-1: unable to send the bmi data to the device: -71 [ 117.935022][ T5874] usb 1-1: USB disconnect, device number 6 [ 117.970985][ T5932] usb 1-1: unable to get target info from device [ 118.009529][ T5932] usb 1-1: could not get target info (-71) [ 118.225115][ T5932] usb 1-1: could not probe fw (-71) [ 118.981310][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 118.981321][ T30] audit: type=1400 audit(1761641949.129:407): avc: denied { create } for pid=6493 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.218485][ T30] audit: type=1400 audit(1761641949.219:408): avc: denied { getopt } for pid=6493 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.239935][ T5936] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.441764][ T6499] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 119.459931][ T6501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 119.460408][ T6499] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 119.473025][ T6502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.482218][ T6499] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 119.485368][ T6501] netlink: 29 bytes leftover after parsing attributes in process `syz.0.157'. [ 119.501914][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 119.504512][ T30] audit: type=1400 audit(1761641949.659:409): avc: denied { firmware_load } for pid=6498 comm="syz.4.156" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 119.513088][ T5936] usb 4-1: config 6 has an invalid interface number: 61 but max is 0 [ 119.527177][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.540577][ T6503] 9pnet_fd: Insufficient options for proto=fd [ 119.549693][ T6501] tipc: Invalid UDP bearer configuration [ 119.549751][ T6501] tipc: Enabling of bearer rejected, failed to enable media [ 119.570688][ T30] audit: type=1400 audit(1761641949.739:410): avc: denied { accept } for pid=6500 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.574438][ T5936] usb 4-1: config 6 has no interface number 0 [ 119.654536][ T5936] usb 4-1: config 6 interface 61 has no altsetting 0 [ 119.663913][ T5936] usb 4-1: string descriptor 0 read error: -22 [ 119.671789][ T6501] fuseblk: Unknown parameter 'pcr' [ 119.679060][ T5936] usb 4-1: New USB device found, idVendor=0572, idProduct=cb02, bcdDevice=bd.c4 [ 119.689738][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.715598][ T5936] hub 4-1:6.61: bad descriptor, ignoring hub [ 119.723389][ T5936] hub 4-1:6.61: probe with driver hub failed with error -5 [ 119.732414][ T5936] cxacru 4-1:6.61: cxacru_bind: interface has incorrect endpoints [ 119.741260][ T5936] cxacru 4-1:6.61: usbatm_usb_probe: bind failed: -19! [ 119.925960][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.024646][ T5874] usb 4-1: USB disconnect, device number 9 [ 120.087479][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 120.097379][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 120.109095][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.118652][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.126804][ T9] usb 1-1: Product: syz [ 120.132243][ T9] usb 1-1: Manufacturer: syz [ 120.137067][ T9] usb 1-1: SerialNumber: syz [ 120.355148][ T9] cdc_ncm 1-1:1.0: bind() failure [ 120.363479][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 120.370694][ T9] cdc_ncm 1-1:1.1: bind() failure [ 120.380180][ T9] usb 1-1: USB disconnect, device number 7 [ 123.517511][ T30] audit: type=1400 audit(1761641953.199:411): avc: denied { create } for pid=6535 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 123.627298][ T30] audit: type=1400 audit(1761641953.209:412): avc: denied { listen } for pid=6535 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 123.647235][ T30] audit: type=1400 audit(1761641953.209:413): avc: denied { accept } for pid=6535 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 124.121983][ T30] audit: type=1400 audit(1761641954.289:414): avc: denied { connect } for pid=6546 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.179935][ T30] audit: type=1400 audit(1761641954.329:415): avc: denied { create } for pid=6546 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.299013][ T30] audit: type=1400 audit(1761641954.419:416): avc: denied { write } for pid=6546 comm="syz.0.170" path="socket:[11768]" dev="sockfs" ino=11768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.494245][ T30] audit: type=1400 audit(1761641954.659:417): avc: denied { read write } for pid=6552 comm="syz.4.172" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.558896][ T30] audit: type=1400 audit(1761641954.659:418): avc: denied { open } for pid=6552 comm="syz.4.172" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.024780][ T30] audit: type=1400 audit(1761641955.069:419): avc: denied { map } for pid=6554 comm="syz.2.173" path="socket:[11834]" dev="sockfs" ino=11834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 125.254473][ T1205] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.951503][ T6563] /dev/nullb0: Can't open blockdev [ 125.987799][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 126.007475][ T1205] usb 3-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 126.054789][ T1205] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 126.092540][ T30] audit: type=1400 audit(1761641956.259:420): avc: denied { setopt } for pid=6568 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.104533][ T1205] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 126.150527][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.365209][ T1205] usb 3-1: config 0 descriptor?? [ 126.729444][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.739303][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.749567][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.761405][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.769606][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.792430][ T30] audit: type=1400 audit(1761641956.959:421): avc: denied { mounton } for pid=6577 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 127.382202][ T6585] netlink: 27 bytes leftover after parsing attributes in process `syz.4.181'. [ 127.603551][ T6577] chnl_net:caif_netlink_parms(): no params data found [ 127.693418][ T5874] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.712141][ T1205] usb 3-1: USB disconnect, device number 6 [ 127.724673][ T30] audit: type=1400 audit(1761641957.879:422): avc: denied { append } for pid=6592 comm="syz.3.183" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.798786][ T30] audit: type=1400 audit(1761641957.939:423): avc: denied { read } for pid=6592 comm="syz.3.183" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.974851][ T5874] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 127.997988][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.009566][ T5874] usb 5-1: Product: syz [ 128.016793][ T5874] usb 5-1: Manufacturer: syz [ 128.021753][ T5874] usb 5-1: SerialNumber: syz [ 128.029929][ T5874] usb 5-1: config 0 descriptor?? [ 128.216526][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.705944][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.713260][ T6577] bridge_slave_0: entered allmulticast mode [ 128.834876][ T53] Bluetooth: hci5: command tx timeout [ 128.967090][ T6577] bridge_slave_0: entered promiscuous mode [ 129.129461][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.144550][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.212237][ T6616] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=6616 comm=syz.4.181 [ 129.319829][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 129.319857][ T30] audit: type=1400 audit(1761641959.379:426): avc: denied { write } for pid=6584 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.594140][ T6577] bridge_slave_1: entered allmulticast mode [ 129.617774][ T6577] bridge_slave_1: entered promiscuous mode [ 129.670869][ T30] audit: type=1400 audit(1761641959.379:427): avc: denied { nlmsg_write } for pid=6584 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.848178][ T30] audit: type=1400 audit(1761641959.399:428): avc: denied { getopt } for pid=6584 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.920659][ T30] audit: type=1400 audit(1761641960.089:429): avc: denied { read } for pid=6617 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.152737][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.377609][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.914735][ T53] Bluetooth: hci5: command tx timeout [ 130.924874][ T5874] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 130.971200][ T5874] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 131.035602][ T5874] usb 5-1: USB disconnect, device number 5 [ 131.983041][ T6577] team0: Port device team_slave_0 added [ 132.048775][ T6577] team0: Port device team_slave_1 added [ 132.153400][ T30] audit: type=1400 audit(1761641962.319:430): avc: denied { unlink } for pid=6624 comm="syz.4.188" name="#3" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.176564][ T6627] evm: overlay not supported [ 132.217722][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.234477][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.260393][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.301284][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.335883][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.342915][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.453037][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.528195][ T6577] hsr_slave_0: entered promiscuous mode [ 132.537746][ T6577] hsr_slave_1: entered promiscuous mode [ 132.544039][ T6577] debugfs: 'hsr0' already exists in 'hsr' [ 132.552354][ T6577] Cannot create hsr debugfs directory [ 132.674614][ T5922] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.900271][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 132.919529][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919708][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.936246][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.972447][ T5922] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.013516][ T53] Bluetooth: hci5: command tx timeout [ 133.064677][ T3735] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.225697][ T3735] usb 3-1: Using ep0 maxpacket: 32 [ 133.293943][ T5922] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.305284][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.317554][ T3735] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 133.362589][ T3735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 133.390596][ T5922] usb 1-1: config 0 descriptor?? [ 133.412571][ T3735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 133.445446][ T3735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 133.482845][ T3735] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 133.527777][ T3735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.540648][ T3735] usb 3-1: Product: syz [ 133.549491][ T3735] usb 3-1: Manufacturer: syz [ 133.562606][ T3735] usb 3-1: SerialNumber: syz [ 133.633306][ T3735] usb 3-1: config 0 descriptor?? [ 133.827037][ T6577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.843949][ T6577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.864092][ T6577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.923811][ T3735] usb 3-1: USB disconnect, device number 7 [ 133.951208][ T6577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.172261][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.225809][ T6577] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.239070][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.246270][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.260843][ T30] audit: type=1326 audit(1761641964.429:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 134.305762][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.312883][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.330102][ T30] audit: type=1326 audit(1761641964.429:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 134.353427][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.484811][ T30] audit: type=1326 audit(1761641964.429:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 134.942884][ T6669] netlink: zone id is out of range [ 134.948189][ T6669] netlink: zone id is out of range [ 134.953717][ T6669] netlink: set zone limit has 8 unknown bytes [ 134.961680][ T30] audit: type=1326 audit(1761641964.429:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 134.986772][ T30] audit: type=1326 audit(1761641964.429:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 135.011558][ T30] audit: type=1326 audit(1761641964.459:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 135.070035][ T30] audit: type=1326 audit(1761641964.459:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 135.076042][ T53] Bluetooth: hci5: command tx timeout [ 135.109433][ T30] audit: type=1326 audit(1761641964.459:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 135.113695][ T6670] can0: slcan on ptm0. [ 135.133048][ T30] audit: type=1326 audit(1761641964.469:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 135.170297][ T30] audit: type=1326 audit(1761641964.469:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 135.196426][ T30] audit: type=1326 audit(1761641964.469:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d97b8efc9 code=0x7ffc0000 [ 135.198403][ T6577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.219682][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.321938][ T6680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.320285][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.456845][ T6656] can0 (unregistered): slcan off ptm0. [ 136.485146][ T9] usb 1-1: USB disconnect, device number 8 [ 137.644002][ T6577] veth0_vlan: entered promiscuous mode [ 138.109428][ T6577] veth1_vlan: entered promiscuous mode [ 138.344047][ T6577] veth0_macvtap: entered promiscuous mode [ 138.662382][ T6577] veth1_macvtap: entered promiscuous mode [ 138.810722][ T6748] overlayfs: failed lookup in lower (newroot/46, name='file1', err=-40): overlapping layers [ 139.082366][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.244010][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.331319][ T6634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.427823][ T6634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.604477][ T5936] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 139.710106][ T6634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.761194][ T6634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.827765][ T6634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.845583][ T6634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.921741][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.942612][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.964515][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 139.964532][ T30] audit: type=1400 audit(1761641970.129:522): avc: denied { mounton } for pid=6577 comm="syz-executor" path="/root/syzkaller.Vntg76/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 140.008545][ T5936] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 140.029086][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.074972][ T5936] usb 4-1: Product: syz [ 140.079373][ T5936] usb 4-1: Manufacturer: syz [ 140.115060][ T5936] usb 4-1: SerialNumber: syz [ 140.186107][ T5936] usb 4-1: config 0 descriptor?? [ 140.462611][ T5936] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.474592][ T30] audit: type=1400 audit(1761641970.169:523): avc: denied { mount } for pid=6577 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 140.491411][ T6776] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 140.512875][ T30] audit: type=1400 audit(1761641970.169:524): avc: denied { mounton } for pid=6577 comm="syz-executor" path="/root/syzkaller.Vntg76/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 140.545652][ T30] audit: type=1400 audit(1761641970.169:525): avc: denied { mounton } for pid=6577 comm="syz-executor" path="/root/syzkaller.Vntg76/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 140.698457][ T5874] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.782167][ T30] audit: type=1400 audit(1761641970.539:526): avc: denied { mounton } for pid=6577 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 140.934074][ T30] audit: type=1400 audit(1761641970.539:527): avc: denied { mount } for pid=6577 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 140.988195][ T5874] usb 1-1: device descriptor read/64, error -71 [ 141.210422][ T30] audit: type=1400 audit(1761641971.359:528): avc: denied { getopt } for pid=6781 comm="syz.5.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.261494][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 141.279729][ T6785] team0: Port device batadv1 added [ 141.284966][ T30] audit: type=1400 audit(1761641971.359:529): avc: denied { connect } for pid=6781 comm="syz.5.215" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.374860][ T5874] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.538226][ T30] audit: type=1400 audit(1761641971.369:530): avc: denied { name_connect } for pid=6781 comm="syz.5.215" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 141.566035][ T5874] usb 1-1: device descriptor read/64, error -71 [ 141.694607][ T5874] usb usb1-port1: attempt power cycle [ 141.871662][ T30] audit: type=1400 audit(1761641972.039:531): avc: denied { write } for pid=6760 comm="syz.3.212" path="socket:[13318]" dev="sockfs" ino=13318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.036635][ T3735] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 142.266821][ T6790] tmpfs: Bad value for 'mpol' [ 142.294488][ T5874] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 142.316553][ T53] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 142.334871][ T3735] usb 6-1: Using ep0 maxpacket: 8 [ 142.346718][ T5874] usb 1-1: device descriptor read/8, error -71 [ 142.396539][ T3735] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.436912][ T3735] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.528335][ T3735] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.568063][ T3735] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.614573][ T5874] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 142.614939][ T3735] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.637001][ T5874] usb 1-1: device descriptor read/8, error -71 [ 142.732168][ T3735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.760870][ T5936] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 142.776278][ T5874] usb usb1-port1: unable to enumerate USB device [ 142.801019][ T5936] usb 4-1: USB disconnect, device number 10 [ 142.838961][ T5922] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.996236][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 143.003021][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.026171][ T3735] usb 6-1: GET_CAPABILITIES returned 0 [ 143.044456][ T3735] usbtmc 6-1:16.0: can't read capabilities [ 143.094129][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.164583][ T5922] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 143.174143][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.188191][ T5922] usb 3-1: config 0 descriptor?? [ 143.596635][ T6806] capability: warning: `syz.4.220' uses deprecated v2 capabilities in a way that may be insecure [ 143.677939][ T6807] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 143.989771][ T5922] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 144.084524][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.304513][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 144.319397][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.350344][ T5874] usb 3-1: USB disconnect, device number 8 [ 144.361590][ T6811] kvm: pic: non byte read [ 144.374194][ T6811] kvm: pic: non byte read [ 144.400765][ T43] usb 4-1: config 0 has no interfaces? [ 144.424465][ T43] usb 4-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 144.447012][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.459447][ T43] usb 4-1: Product: syz [ 144.471743][ T43] usb 4-1: Manufacturer: syz [ 144.476813][ T43] usb 4-1: SerialNumber: syz [ 144.486158][ T43] usb 4-1: config 0 descriptor?? [ 144.829805][ T6819] tty tty20: ldisc open failed (-12), clearing slot 19 [ 144.967334][ T6823] netlink: 'syz.3.221': attribute type 4 has an invalid length. [ 144.975152][ T6823] netlink: 17 bytes leftover after parsing attributes in process `syz.3.221'. [ 145.108245][ T6823] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 145.244689][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 145.840222][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 145.840244][ T30] audit: type=1400 audit(1761641975.399:536): avc: denied { write } for pid=6802 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 146.134555][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 146.158997][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.187131][ T43] usb 5-1: config 4 interface 0 has no altsetting 0 [ 146.201806][ T43] usb 5-1: string descriptor 0 read error: -22 [ 146.565206][ T5881] usb 4-1: USB disconnect, device number 11 [ 146.620979][ T43] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 146.638029][ T5936] usb 6-1: USB disconnect, device number 2 [ 146.866461][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.368744][ T43] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 147.411405][ T43] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.459889][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 147.484294][ T43] usb 5-1: media controller created [ 147.818503][ T30] audit: type=1400 audit(1761641977.989:537): avc: denied { read append } for pid=6839 comm="syz.2.230" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.849215][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.923934][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 147.933236][ T30] audit: type=1400 audit(1761641977.989:538): avc: denied { open } for pid=6839 comm="syz.2.230" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 148.052075][ T6845] tipc: Can't bind to reserved service type 2 [ 148.063177][ T6845] netlink: 277 bytes leftover after parsing attributes in process `syz.2.230'. [ 148.141116][ T30] audit: type=1400 audit(1761641978.219:539): avc: denied { bind } for pid=6839 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.358369][ T43] usb 5-1: USB disconnect, device number 6 [ 148.369240][ T30] audit: type=1400 audit(1761641978.309:540): avc: denied { mount } for pid=6847 comm="syz.5.232" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 148.517801][ T30] audit: type=1400 audit(1761641978.679:541): avc: denied { sqpoll } for pid=6847 comm="syz.5.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 148.560840][ T6853] netlink: 5 bytes leftover after parsing attributes in process `syz.5.232'. [ 148.614585][ T6853] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 149.185619][ T6853] 0ªX¹¦D: entered allmulticast mode [ 149.190846][ T6853] veth0_macvtap: entered allmulticast mode [ 149.296664][ T6853] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 149.359544][ T6858] syz_tun: entered allmulticast mode [ 149.502672][ T5874] IPVS: starting estimator thread 0... [ 149.634512][ T6865] IPVS: using max 45 ests per chain, 108000 per kthread [ 150.511982][ T30] audit: type=1400 audit(1761641980.679:542): avc: denied { shutdown } for pid=6881 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.524065][ T30] audit: type=1400 audit(1761641980.689:543): avc: denied { write } for pid=6881 comm="syz.3.238" lport=33478 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 150.559183][ T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 150.673095][ T30] audit: type=1400 audit(1761641980.739:544): avc: denied { getopt } for pid=6881 comm="syz.3.238" lport=33478 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 150.711680][ T30] audit: type=1400 audit(1761641980.749:545): avc: denied { setopt } for pid=6881 comm="syz.3.238" lport=33478 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 150.736453][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 150.843226][ T43] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 150.856372][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.864753][ T43] usb 1-1: Product: syz [ 150.870700][ T43] usb 1-1: Manufacturer: syz [ 150.914900][ T43] usb 1-1: SerialNumber: syz [ 150.964940][ T43] usb 1-1: config 0 descriptor?? [ 150.976553][ T6891] sp0: Synchronizing with TNC [ 151.204269][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 151.204295][ T30] audit: type=1404 audit(1761641981.369:547): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 151.245317][ T30] audit: type=1400 audit(1761641981.419:548): avc: denied { connect } for pid=6901 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 151.298808][ T30] audit: type=1400 audit(1761641981.439:549): avc: denied { setopt } for pid=6901 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 151.327955][ T30] audit: type=1400 audit(1761641981.459:550): avc: denied { ioctl } for pid=6876 comm="syz.0.236" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 151.375659][ T30] audit: type=1400 audit(1761641981.459:551): avc: denied { create } for pid=6876 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 151.456746][ T30] audit: type=1400 audit(1761641981.459:552): avc: denied { create } for pid=6876 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 151.501544][ T30] audit: type=1400 audit(1761641981.459:553): avc: denied { map_create } for pid=6876 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.543338][ T30] audit: type=1400 audit(1761641981.459:554): avc: denied { allowed } for pid=6876 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 151.654499][ T30] audit: type=1400 audit(1761641981.459:555): avc: denied { allowed } for pid=6876 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 152.178406][ T30] audit: type=1400 audit(1761641981.469:556): avc: denied { ioctl } for pid=6876 comm="syz.0.236" path="/newroot/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 152.276734][ T6916] netlink: 'syz.5.244': attribute type 7 has an invalid length. [ 152.378442][ T43] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 152.397776][ T43] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 152.659802][ T43] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 152.719056][ T43] usb 1-1: USB disconnect, device number 13 [ 153.687194][ T6943] bond1 (unregistering): Released all slaves [ 153.926221][ T6947] bond0: entered promiscuous mode [ 154.001557][ T6947] bond_slave_0: entered promiscuous mode [ 154.144807][ T6947] bond_slave_1: entered promiscuous mode [ 154.172305][ T6947] batadv0: entered promiscuous mode [ 154.269528][ T6947] hsr1: entered allmulticast mode [ 154.292310][ T6947] bond0: entered allmulticast mode [ 154.314590][ T6947] bond_slave_0: entered allmulticast mode [ 154.367342][ T6947] bond_slave_1: entered allmulticast mode [ 154.435073][ T6947] batadv0: entered allmulticast mode [ 154.444717][ T6947] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 154.464432][ T6947] bond0: left promiscuous mode [ 154.504554][ T6947] bond_slave_0: left promiscuous mode [ 154.510346][ T6947] bond_slave_1: left promiscuous mode [ 154.547399][ T6947] batadv0: left promiscuous mode [ 155.122374][ T5874] IPVS: starting estimator thread 0... [ 155.214468][ T6963] IPVS: using max 42 ests per chain, 100800 per kthread [ 156.204458][ T30] kauditd_printk_skb: 6966 callbacks suppressed [ 156.204471][ T30] audit: type=1400 audit(1761641986.369:5606): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.234537][ T30] audit: type=1400 audit(1761641986.409:5607): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.256020][ T30] audit: type=1400 audit(1761641986.409:5608): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.277840][ T30] audit: type=1400 audit(1761641986.409:5609): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.337413][ T30] audit: type=1400 audit(1761641986.409:5610): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.454782][ T30] audit: type=1400 audit(1761641986.409:5611): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.467328][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 156.476818][ T30] audit: type=1400 audit(1761641986.409:5612): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.504166][ T30] audit: type=1400 audit(1761641986.409:5613): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.537637][ T5477] audit: audit_lost=640 audit_rate_limit=0 audit_backlog_limit=64 [ 158.430260][ T7024] syz.3.283 uses obsolete (PF_INET,SOCK_PACKET) [ 159.483296][ T7044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=7044 comm=syz.3.292 [ 159.512997][ T7044] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 159.586843][ T7044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.740264][ T7070] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 160.972702][ T7076] netlink: 96 bytes leftover after parsing attributes in process `syz.5.302'. [ 161.214584][ T30] kauditd_printk_skb: 11694 callbacks suppressed [ 161.214601][ T30] audit: type=1400 audit(1761641991.389:16128): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.270999][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.272281][ T30] audit: type=1400 audit(1761641991.389:16129): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.324729][ T5477] audit: audit_lost=1034 audit_rate_limit=0 audit_backlog_limit=64 [ 161.332916][ T5477] audit: backlog limit exceeded [ 161.338530][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.345502][ T5477] audit: audit_lost=1035 audit_rate_limit=0 audit_backlog_limit=64 [ 161.353619][ T5477] audit: backlog limit exceeded [ 161.359042][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.547280][ T5477] audit: audit_lost=1036 audit_rate_limit=0 audit_backlog_limit=64 [ 164.243527][ T7131] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 164.293627][ T7131] CIFS: Unable to determine destination address [ 165.669791][ T7165] bridge1: entered allmulticast mode [ 166.224894][ T30] kauditd_printk_skb: 12356 callbacks suppressed [ 166.224912][ T30] audit: type=1400 audit(1761641996.399:27582): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.237196][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.254137][ T30] audit: type=1400 audit(1761641996.399:27583): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.260274][ T5477] audit: audit_lost=1338 audit_rate_limit=0 audit_backlog_limit=64 [ 166.288763][ T30] audit: type=1400 audit(1761641996.399:27584): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.309868][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.318174][ T5477] audit: backlog limit exceeded [ 166.323498][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.327945][ T30] audit: type=1400 audit(1761641996.399:27585): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.340397][ T5477] audit: audit_lost=1339 audit_rate_limit=0 audit_backlog_limit=64 [ 166.367116][ T30] audit: type=1400 audit(1761641996.399:27586): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 168.345716][ T7222] FAULT_INJECTION: forcing a failure. [ 168.345716][ T7222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.443676][ T7222] CPU: 0 UID: 0 PID: 7222 Comm: syz.3.354 Not tainted syzkaller #0 PREEMPT(full) [ 168.443695][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.443701][ T7222] Call Trace: [ 168.443705][ T7222] [ 168.443709][ T7222] dump_stack_lvl+0x16c/0x1f0 [ 168.443735][ T7222] should_fail_ex+0x512/0x640 [ 168.443751][ T7222] _copy_to_user+0x32/0xd0 [ 168.443766][ T7222] simple_read_from_buffer+0xcb/0x170 [ 168.443784][ T7222] proc_fail_nth_read+0x197/0x240 [ 168.443798][ T7222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.443811][ T7222] ? rw_verify_area+0xcf/0x6c0 [ 168.443826][ T7222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.443837][ T7222] vfs_read+0x1e4/0xcf0 [ 168.443849][ T7222] ? __pfx___mutex_lock+0x10/0x10 [ 168.443859][ T7222] ? __pfx_vfs_read+0x10/0x10 [ 168.443876][ T7222] ? __fget_files+0x20e/0x3c0 [ 168.443891][ T7222] ksys_read+0x12a/0x250 [ 168.443900][ T7222] ? __pfx_ksys_read+0x10/0x10 [ 168.443908][ T7222] ? syscall_trace_enter+0x1cb/0x240 [ 168.443921][ T7222] ? rcu_is_watching+0x12/0xc0 [ 168.443937][ T7222] do_syscall_64+0xcd/0xfa0 [ 168.443953][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.443965][ T7222] RIP: 0033:0x7f4d97b8d9dc [ 168.443974][ T7222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.443984][ T7222] RSP: 002b:00007f4d98982030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.443995][ T7222] RAX: ffffffffffffffda RBX: 00007f4d97de6180 RCX: 00007f4d97b8d9dc [ 168.444001][ T7222] RDX: 000000000000000f RSI: 00007f4d989820a0 RDI: 0000000000000005 [ 168.444007][ T7222] RBP: 00007f4d98982090 R08: 0000000000000000 R09: 0000000000000000 [ 168.444013][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.444018][ T7222] R13: 00007f4d97de6218 R14: 00007f4d97de6180 R15: 00007ffccebd1cd8 [ 168.444032][ T7222] [ 168.632208][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.864251][ T7226] IPv6: addrconf: prefix option has invalid lifetime [ 170.791602][ T7256] bridge_slave_0: left allmulticast mode [ 170.821764][ T7256] bridge_slave_0: left promiscuous mode [ 170.836858][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.367'. [ 170.851360][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.908766][ T7256] bridge_slave_1: left allmulticast mode [ 170.932721][ T7256] bridge_slave_1: left promiscuous mode [ 170.956831][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.998670][ T7256] bond0: (slave bond_slave_0): Releasing backup interface [ 171.027924][ T7256] bond0: (slave bond_slave_1): Releasing backup interface [ 171.069705][ T7256] team0: Port device team_slave_0 removed [ 171.093691][ T7256] team0: Port device team_slave_1 removed [ 171.112559][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.121082][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.137409][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.147982][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.160795][ T7256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.250738][ T30] kauditd_printk_skb: 15558 callbacks suppressed [ 171.250757][ T30] audit: type=1400 audit(1761642001.419:35704): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.299814][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.320419][ T5810] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.331892][ T5477] audit: audit_lost=3820 audit_rate_limit=0 audit_backlog_limit=64 [ 171.340259][ T5810] audit: audit_lost=3821 audit_rate_limit=0 audit_backlog_limit=64 [ 171.350229][ T5477] audit: backlog limit exceeded [ 171.355690][ T30] audit: type=1400 audit(1761642001.419:35705): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.378911][ T7268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.384522][ T5810] audit: backlog limit exceeded [ 171.385809][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.937010][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 173.206765][ T5182] udevd[5182]: worker [5821] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 173.735936][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.385'. [ 174.781900][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 175.042017][ T7357] Cannot find set identified by id 3 to match [ 175.171812][ T7361] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 175.223691][ T7367] FAULT_INJECTION: forcing a failure. [ 175.223691][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 175.252182][ T7367] CPU: 1 UID: 0 PID: 7367 Comm: syz.3.408 Not tainted syzkaller #0 PREEMPT(full) [ 175.252201][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.252208][ T7367] Call Trace: [ 175.252212][ T7367] [ 175.252216][ T7367] dump_stack_lvl+0x16c/0x1f0 [ 175.252237][ T7367] should_fail_ex+0x512/0x640 [ 175.252251][ T7367] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 175.252269][ T7367] should_failslab+0xc2/0x120 [ 175.252283][ T7367] kmem_cache_alloc_noprof+0x75/0x6e0 [ 175.252298][ T7367] ? getname_flags.part.0+0x4c/0x550 [ 175.252315][ T7367] ? getname_flags.part.0+0x4c/0x550 [ 175.252329][ T7367] getname_flags.part.0+0x4c/0x550 [ 175.252344][ T7367] getname_flags+0x93/0xf0 [ 175.252355][ T7367] __x64_sys_renameat2+0xd4/0x130 [ 175.252368][ T7367] do_syscall_64+0xcd/0xfa0 [ 175.252384][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.252395][ T7367] RIP: 0033:0x7f4d97b8efc9 [ 175.252404][ T7367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.252414][ T7367] RSP: 002b:00007f4d989c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 175.252428][ T7367] RAX: ffffffffffffffda RBX: 00007f4d97de5fa0 RCX: 00007f4d97b8efc9 [ 175.252435][ T7367] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 175.252441][ T7367] RBP: 00007f4d989c4090 R08: 0000000000000004 R09: 0000000000000000 [ 175.252447][ T7367] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 175.252454][ T7367] R13: 00007f4d97de6038 R14: 00007f4d97de5fa0 R15: 00007ffccebd1cd8 [ 175.252468][ T7367] [ 175.261574][ T7368] netlink: 3 bytes leftover after parsing attributes in process `syz.2.406'. [ 175.489084][ T7368] batadv1: entered promiscuous mode [ 175.495404][ T7368] batadv1: entered allmulticast mode [ 175.820110][ T7383] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 175.894817][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.910163][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.255603][ T30] kauditd_printk_skb: 10040 callbacks suppressed [ 176.255620][ T30] audit: type=1400 audit(1761642006.419:43303): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.294254][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.300905][ T5477] audit: audit_lost=4637 audit_rate_limit=0 audit_backlog_limit=64 [ 176.308954][ T5477] audit: backlog limit exceeded [ 176.313938][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.320643][ T30] audit: type=1400 audit(1761642006.419:43304): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.341836][ T5477] audit: audit_lost=4638 audit_rate_limit=0 audit_backlog_limit=64 [ 176.350322][ T5477] audit: backlog limit exceeded [ 176.355395][ T30] audit: type=1400 audit(1761642006.419:43305): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.377280][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.264435][ T30] kauditd_printk_skb: 5349 callbacks suppressed [ 181.264452][ T30] audit: type=1400 audit(1761642011.429:48053): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.272681][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.319205][ T7521] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.325919][ T7521] audit: audit_lost=4840 audit_rate_limit=0 audit_backlog_limit=64 [ 181.333820][ T7521] audit: backlog limit exceeded [ 181.347811][ T5824] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.383404][ T5807] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.392812][ T30] audit: type=1400 audit(1761642011.429:48054): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.415265][ T7521] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.427375][ T7523] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.294747][ T7577] netlink: 'syz.5.471': attribute type 16 has an invalid length. [ 183.317547][ T7577] netlink: 'syz.5.471': attribute type 17 has an invalid length. [ 183.582216][ T7580] netlink: 'syz.4.472': attribute type 3 has an invalid length. [ 183.831666][ T7577] veth0_macvtap: left allmulticast mode [ 183.965436][ T6635] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.982480][ T6635] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.993301][ T6635] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.030887][ T6635] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.280769][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 186.279754][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.287684][ T30] kauditd_printk_skb: 11858 callbacks suppressed [ 186.287703][ T30] audit: type=1400 audit(1761642016.459:58733): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.296998][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.358036][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.489309][ T30] audit: type=1400 audit(1761642016.459:58734): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.544512][ T30] audit: type=1400 audit(1761642016.459:58735): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.576068][ T5477] audit: audit_lost=5236 audit_rate_limit=0 audit_backlog_limit=64 [ 186.584026][ T5477] audit: backlog limit exceeded [ 186.619834][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.629355][ T5477] audit: audit_lost=5237 audit_rate_limit=0 audit_backlog_limit=64 [ 186.651020][ T5813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.657870][ T5477] audit: backlog limit exceeded [ 188.906590][ T7700] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.932327][ T7700] block device autoloading is deprecated and will be removed. [ 190.489751][ T7743] tc_dump_action: action bad kind [ 191.294724][ T30] kauditd_printk_skb: 11556 callbacks suppressed [ 191.294742][ T30] audit: type=1400 audit(1761642021.469:70248): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.312105][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.339657][ T30] audit: type=1400 audit(1761642021.469:70249): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.362895][ T7765] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.362924][ T30] audit: type=1400 audit(1761642021.469:70250): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.392473][ T30] audit: type=1400 audit(1761642021.469:70251): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.394834][ T5477] audit: audit_lost=5253 audit_rate_limit=0 audit_backlog_limit=64 [ 191.417127][ T30] audit: type=1400 audit(1761642021.469:70252): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.453731][ T7765] audit: audit_lost=5254 audit_rate_limit=0 audit_backlog_limit=64 [ 191.455455][ T30] audit: type=1400 audit(1761642021.469:70253): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 192.015078][ T7791] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 192.090340][ T7793] veth0_to_bond: entered allmulticast mode [ 192.362810][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.557'. [ 193.343591][ T7816] FAULT_INJECTION: forcing a failure. [ 193.343591][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 193.403103][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.564'. [ 193.407810][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.3.562 Not tainted syzkaller #0 PREEMPT(full) [ 193.407841][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.407850][ T7816] Call Trace: [ 193.407856][ T7816] [ 193.407862][ T7816] dump_stack_lvl+0x16c/0x1f0 [ 193.407897][ T7816] should_fail_ex+0x512/0x640 [ 193.407919][ T7816] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 193.407945][ T7816] should_failslab+0xc2/0x120 [ 193.407965][ T7816] kmem_cache_alloc_noprof+0x75/0x6e0 [ 193.407990][ T7816] ? skb_clone+0x190/0x3f0 [ 193.408015][ T7816] ? skb_clone+0x190/0x3f0 [ 193.408032][ T7816] skb_clone+0x190/0x3f0 [ 193.408051][ T7816] netlink_deliver_tap+0xabd/0xd30 [ 193.408080][ T7816] netlink_unicast+0x64c/0x870 [ 193.408105][ T7816] ? __pfx_netlink_unicast+0x10/0x10 [ 193.408135][ T7816] netlink_sendmsg+0x8c8/0xdd0 [ 193.408159][ T7816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.408187][ T7816] ____sys_sendmsg+0xa98/0xc70 [ 193.408213][ T7816] ? copy_msghdr_from_user+0x10a/0x160 [ 193.408232][ T7816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.408261][ T7816] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 193.408284][ T7816] ___sys_sendmsg+0x134/0x1d0 [ 193.408304][ T7816] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.408321][ T7816] ? __lock_acquire+0x622/0x1c90 [ 193.408385][ T7816] __sys_sendmsg+0x16d/0x220 [ 193.408405][ T7816] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.408422][ T7816] ? __pfx_bpf_trace_run2+0x10/0x10 [ 193.408449][ T7816] ? syscall_trace_enter+0x1cb/0x240 [ 193.408469][ T7816] ? rcu_is_watching+0x12/0xc0 [ 193.408491][ T7816] do_syscall_64+0xcd/0xfa0 [ 193.408515][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.408530][ T7816] RIP: 0033:0x7f4d97b8efc9 [ 193.408543][ T7816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.408558][ T7816] RSP: 002b:00007f4d989c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.408575][ T7816] RAX: ffffffffffffffda RBX: 00007f4d97de5fa0 RCX: 00007f4d97b8efc9 [ 193.408584][ T7816] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 193.408594][ T7816] RBP: 00007f4d989c4090 R08: 0000000000000000 R09: 0000000000000000 [ 193.408602][ T7816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.408611][ T7816] R13: 00007f4d97de6038 R14: 00007f4d97de5fa0 R15: 00007ffccebd1cd8 [ 193.408633][ T7816] [ 193.424258][ T7816] batman_adv: batadv0: Adding interface: vlan2 [ 193.449858][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 193.460408][ T7816] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.508148][ T7818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.564'. [ 193.516650][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.561842][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 193.567452][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.747513][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 193.757526][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.767466][ T7816] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 194.367155][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375598][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.699280][ T7851] warning: `syz.3.576' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 196.305211][ T30] kauditd_printk_skb: 8694 callbacks suppressed [ 196.305232][ T30] audit: type=1400 audit(1761642026.479:78304): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.368461][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.381076][ T30] audit: type=1400 audit(1761642026.479:78305): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.386200][ T5477] audit: audit_lost=5469 audit_rate_limit=0 audit_backlog_limit=64 [ 196.430385][ T5477] audit: backlog limit exceeded [ 196.438100][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 196.444291][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 196.452549][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 196.459454][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 196.489991][ T5810] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.498756][ T30] audit: type=1400 audit(1761642026.479:78306): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.520071][ T5810] audit: audit_lost=5470 audit_rate_limit=0 audit_backlog_limit=64 [ 196.531082][ T5810] audit: backlog limit exceeded [ 196.562165][ T30] audit: type=1400 audit(1761642026.479:78307): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.697709][ T7904] FAULT_INJECTION: forcing a failure. [ 196.697709][ T7904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.711682][ T7904] CPU: 1 UID: 0 PID: 7904 Comm: syz.3.596 Not tainted syzkaller #0 PREEMPT(full) [ 196.711713][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.711725][ T7904] Call Trace: [ 196.711732][ T7904] [ 196.711740][ T7904] dump_stack_lvl+0x16c/0x1f0 [ 196.711778][ T7904] should_fail_ex+0x512/0x640 [ 196.711804][ T7904] copy_to_user_nofault+0xac/0x1c0 [ 196.711836][ T7904] bpf_probe_write_user+0xaf/0xf0 [ 196.711858][ T7904] bpf_prog_f26ae291ee3ebee3+0x41/0x49 [ 196.711885][ T7904] bpf_trace_run2+0x239/0x590 [ 196.711909][ T7904] ? __pfx_bpf_trace_run2+0x10/0x10 [ 196.711930][ T7904] ? __might_fault+0xe3/0x190 [ 196.711955][ T7904] ? __might_fault+0x13b/0x190 [ 196.711987][ T7904] __bpf_trace_sys_enter+0x37/0x60 [ 196.712009][ T7904] syscall_trace_enter+0x1b5/0x240 [ 196.712030][ T7904] do_syscall_64+0x3cd/0xfa0 [ 196.712059][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.712077][ T7904] RIP: 0033:0x7f4d97b8da7f [ 196.712091][ T7904] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 196.712108][ T7904] RSP: 002b:00007f4d989c4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 196.712125][ T7904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d97b8da7f [ 196.712135][ T7904] RDX: 0000000000000001 RSI: 00007f4d989c40a0 RDI: 0000000000000003 [ 196.712144][ T7904] RBP: 00007f4d989c4090 R08: 0000000000000000 R09: 0000000000000000 [ 196.712154][ T7904] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 196.712163][ T7904] R13: 00007f4d97de6038 R14: 00007f4d97de5fa0 R15: 00007ffccebd1cd8 [ 196.712189][ T7904] [ 197.121128][ T7909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.599'. [ 197.259183][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 198.738066][ T7945] FAULT_INJECTION: forcing a failure. [ 198.738066][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.759402][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.2.612 Not tainted syzkaller #0 PREEMPT(full) [ 198.759430][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.759439][ T7945] Call Trace: [ 198.759444][ T7945] [ 198.759452][ T7945] dump_stack_lvl+0x16c/0x1f0 [ 198.759483][ T7945] should_fail_ex+0x512/0x640 [ 198.759506][ T7945] _copy_to_user+0x32/0xd0 [ 198.759528][ T7945] simple_read_from_buffer+0xcb/0x170 [ 198.759561][ T7945] proc_fail_nth_read+0x197/0x240 [ 198.759580][ T7945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.759601][ T7945] ? rw_verify_area+0xcf/0x6c0 [ 198.759626][ T7945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.759642][ T7945] vfs_read+0x1e4/0xcf0 [ 198.759661][ T7945] ? __pfx___mutex_lock+0x10/0x10 [ 198.759677][ T7945] ? __pfx_vfs_read+0x10/0x10 [ 198.759699][ T7945] ? __fget_files+0x20e/0x3c0 [ 198.759724][ T7945] ksys_read+0x12a/0x250 [ 198.759740][ T7945] ? __pfx_ksys_read+0x10/0x10 [ 198.759754][ T7945] ? syscall_trace_enter+0x1cb/0x240 [ 198.759777][ T7945] ? rcu_is_watching+0x12/0xc0 [ 198.759802][ T7945] do_syscall_64+0xcd/0xfa0 [ 198.759829][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.759848][ T7945] RIP: 0033:0x7f018b98d9dc [ 198.759863][ T7945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 198.759880][ T7945] RSP: 002b:00007f018c8ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.759897][ T7945] RAX: ffffffffffffffda RBX: 00007f018bbe5fa0 RCX: 00007f018b98d9dc [ 198.759908][ T7945] RDX: 000000000000000f RSI: 00007f018c8ff0a0 RDI: 0000000000000003 [ 198.759918][ T7945] RBP: 00007f018c8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 198.759928][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.759938][ T7945] R13: 00007f018bbe6038 R14: 00007f018bbe5fa0 R15: 00007ffce4af2d38 [ 198.759964][ T7945] [ 199.031059][ T7949] sctp: [Deprecated]: syz.3.611 (pid 7949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.031059][ T7949] Use struct sctp_sack_info instead [ 199.113008][ T7956] SELinux: syz.2.615 (7956) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 199.930844][ T7982] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.593694][ T7994] netlink: 68 bytes leftover after parsing attributes in process `syz.3.626'. [ 200.868167][ T8000] FAULT_INJECTION: forcing a failure. [ 200.868167][ T8000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.881361][ T8000] CPU: 1 UID: 0 PID: 8000 Comm: syz.3.627 Not tainted syzkaller #0 PREEMPT(full) [ 200.881380][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.881386][ T8000] Call Trace: [ 200.881390][ T8000] [ 200.881394][ T8000] dump_stack_lvl+0x16c/0x1f0 [ 200.881416][ T8000] should_fail_ex+0x512/0x640 [ 200.881432][ T8000] copy_to_user_nofault+0xac/0x1c0 [ 200.881451][ T8000] bpf_probe_write_user+0xaf/0xf0 [ 200.881464][ T8000] bpf_prog_f26ae291ee3ebee3+0x41/0x49 [ 200.881474][ T8000] bpf_trace_run2+0x239/0x590 [ 200.881488][ T8000] ? __pfx_bpf_trace_run2+0x10/0x10 [ 200.881500][ T8000] ? __might_fault+0xe3/0x190 [ 200.881517][ T8000] ? __might_fault+0x13b/0x190 [ 200.881534][ T8000] __bpf_trace_sys_enter+0x37/0x60 [ 200.881548][ T8000] syscall_trace_enter+0x1b5/0x240 [ 200.881560][ T8000] do_syscall_64+0x3cd/0xfa0 [ 200.881577][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.881588][ T8000] RIP: 0033:0x7f4d97b8d9dc [ 200.881597][ T8000] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 200.881607][ T8000] RSP: 002b:00007f4d989c4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.881618][ T8000] RAX: ffffffffffffffda RBX: 00007f4d97de5fa0 RCX: 00007f4d97b8d9dc [ 200.881624][ T8000] RDX: 000000000000000f RSI: 00007f4d989c40a0 RDI: 0000000000000003 [ 200.881630][ T8000] RBP: 00007f4d989c4090 R08: 0000000000000000 R09: 0000000000000000 [ 200.881636][ T8000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.881642][ T8000] R13: 00007f4d97de6038 R14: 00007f4d97de5fa0 R15: 00007ffccebd1cd8 [ 200.881655][ T8000] [ 201.318205][ T30] kauditd_printk_skb: 9052 callbacks suppressed [ 201.318219][ T30] audit: type=1400 audit(1761642031.489:85122): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.355490][ T30] audit: type=1400 audit(1761642031.489:85123): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.377216][ T30] audit: type=1400 audit(1761642031.489:85124): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.386366][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 201.400019][ T30] audit: type=1400 audit(1761642031.489:85125): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.434615][ T30] audit: type=1400 audit(1761642031.489:85126): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.464607][ T30] audit: type=1400 audit(1761642031.489:85127): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.474430][ T5477] audit: audit_lost=6217 audit_rate_limit=0 audit_backlog_limit=64 [ 201.486481][ T30] audit: type=1400 audit(1761642031.489:85128): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.517722][ T30] audit: type=1400 audit(1761642031.489:85129): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.602842][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.631'. [ 201.656532][ T8009] netlink: 'syz.5.631': attribute type 10 has an invalid length. [ 201.664761][ T8009] veth0_vlan: left promiscuous mode [ 201.671038][ T8009] veth0_vlan: entered promiscuous mode [ 201.678935][ T8009] team0: Device veth0_vlan failed to register rx_handler [ 201.708578][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.631'. [ 203.240605][ T8055] capability: warning: `syz.0.647' uses 32-bit capabilities (legacy support in use) [ 203.881197][ T8062] veth0_to_bond: entered allmulticast mode [ 203.919646][ T8063] netlink: 128 bytes leftover after parsing attributes in process `syz.5.650'. [ 203.927958][ T8062] FAULT_INJECTION: forcing a failure. [ 203.927958][ T8062] name failslab, interval 1, probability 0, space 0, times 0 [ 203.943555][ T8062] CPU: 1 UID: 0 PID: 8062 Comm: syz.3.649 Not tainted syzkaller #0 PREEMPT(full) [ 203.943581][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.943591][ T8062] Call Trace: [ 203.943596][ T8062] [ 203.943602][ T8062] dump_stack_lvl+0x16c/0x1f0 [ 203.943631][ T8062] should_fail_ex+0x512/0x640 [ 203.943650][ T8062] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 203.943672][ T8062] should_failslab+0xc2/0x120 [ 203.943693][ T8062] kmem_cache_alloc_noprof+0x75/0x6e0 [ 203.943717][ T8062] ? skb_clone+0x190/0x3f0 [ 203.943743][ T8062] ? skb_clone+0x190/0x3f0 [ 203.943762][ T8062] skb_clone+0x190/0x3f0 [ 203.943784][ T8062] netlink_deliver_tap+0xabd/0xd30 [ 203.943810][ T8062] netlink_unicast+0x64c/0x870 [ 203.943834][ T8062] ? __pfx_netlink_unicast+0x10/0x10 [ 203.943866][ T8062] netlink_sendmsg+0x8c8/0xdd0 [ 203.943890][ T8062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.943922][ T8062] ____sys_sendmsg+0xa98/0xc70 [ 203.943948][ T8062] ? copy_msghdr_from_user+0x10a/0x160 [ 203.943970][ T8062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.944004][ T8062] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 203.944024][ T8062] ___sys_sendmsg+0x134/0x1d0 [ 203.944047][ T8062] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.944066][ T8062] ? __lock_acquire+0x622/0x1c90 [ 203.944122][ T8062] __sys_sendmsg+0x16d/0x220 [ 203.944144][ T8062] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.944163][ T8062] ? __pfx_bpf_trace_run2+0x10/0x10 [ 203.944189][ T8062] ? syscall_trace_enter+0x1cb/0x240 [ 203.944211][ T8062] ? rcu_is_watching+0x12/0xc0 [ 203.944234][ T8062] do_syscall_64+0xcd/0xfa0 [ 203.944259][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.944275][ T8062] RIP: 0033:0x7f4d97b8efc9 [ 203.944288][ T8062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.944302][ T8062] RSP: 002b:00007f4d989c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.944317][ T8062] RAX: ffffffffffffffda RBX: 00007f4d97de5fa0 RCX: 00007f4d97b8efc9 [ 203.944327][ T8062] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 203.944340][ T8062] RBP: 00007f4d989c4090 R08: 0000000000000000 R09: 0000000000000000 [ 203.944348][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.944357][ T8062] R13: 00007f4d97de6038 R14: 00007f4d97de5fa0 R15: 00007ffccebd1cd8 [ 203.944378][ T8062] [ 204.194107][ T8063] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.235746][ T8058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.273961][ T8058] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 204.286954][ T8058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.293035][ T8058] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 204.310751][ T8058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.318139][ T8058] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 204.328519][ T8058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.334600][ T8058] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 204.346554][ T8058] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.352637][ T8058] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 204.367911][ T8058] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 204.373973][ T8058] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 204.748901][ T8083] veth0_to_bond: entered allmulticast mode [ 205.601710][ T8101] veth0_to_bond: entered allmulticast mode [ 206.324792][ T30] kauditd_printk_skb: 13861 callbacks suppressed [ 206.324810][ T30] audit: type=1400 audit(1761642036.499:96323): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 206.374722][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.381570][ T5477] audit: audit_lost=7107 audit_rate_limit=0 audit_backlog_limit=64 [ 206.388241][ T30] audit: type=1400 audit(1761642036.519:96324): avc: denied { create } for pid=8134 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 206.395003][ T5477] audit: backlog limit exceeded [ 206.412580][ T8137] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.421719][ T8137] audit: audit_lost=7108 audit_rate_limit=0 audit_backlog_limit=64 [ 206.431056][ T8137] audit: backlog limit exceeded [ 206.431683][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.436430][ T30] audit: type=1400 audit(1761642036.519:96325): avc: denied { create } for pid=8134 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 209.074906][ T5817] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 209.903320][ T8217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16154 sclass=netlink_route_socket pid=8217 comm=syz.0.706 [ 209.972974][ T8216] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 209.979795][ T8216] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 210.102838][ T8216] vhci_hcd vhci_hcd.0: Device attached [ 210.387027][ T8227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8227 comm=syz.4.712 [ 210.442227][ T3735] usb 40-1: SetAddress Request (2) to port 0 [ 210.452170][ T3735] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 210.770838][ T8219] vhci_hcd: connection reset by peer [ 210.947870][ T6635] vhci_hcd: stop threads [ 210.953765][ T6635] vhci_hcd: release socket [ 210.967663][ T6635] vhci_hcd: disconnect device [ 211.350562][ T30] kauditd_printk_skb: 12077 callbacks suppressed [ 211.350581][ T30] audit: type=1400 audit(1761642297.524:107540): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 211.363436][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.381118][ T8254] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.385353][ T5477] audit: audit_lost=7397 audit_rate_limit=0 audit_backlog_limit=64 [ 211.399998][ T8251] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.455852][ T8257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.464737][ T8257] audit: audit_lost=7398 audit_rate_limit=0 audit_backlog_limit=64 [ 211.483289][ T8254] audit: audit_lost=7399 audit_rate_limit=0 audit_backlog_limit=64 [ 211.491612][ T30] audit: type=1400 audit(1761642297.524:107541): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 211.491662][ T30] audit: type=1400 audit(1761642297.524:107542): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 212.469132][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.731'. [ 213.152658][ T8288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.160324][ T8288] IPv6: NLM_F_CREATE should be set when creating new route [ 213.167729][ T8288] IPv6: NLM_F_CREATE should be set when creating new route [ 213.175000][ T8288] IPv6: NLM_F_CREATE should be set when creating new route [ 215.554585][ T3735] usb 40-1: device descriptor read/8, error -110 [ 215.786019][ T8329] FAULT_INJECTION: forcing a failure. [ 215.786019][ T8329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.799176][ T8329] CPU: 1 UID: 0 PID: 8329 Comm: syz.5.747 Not tainted syzkaller #0 PREEMPT(full) [ 215.799202][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.799212][ T8329] Call Trace: [ 215.799218][ T8329] [ 215.799225][ T8329] dump_stack_lvl+0x16c/0x1f0 [ 215.799259][ T8329] should_fail_ex+0x512/0x640 [ 215.799285][ T8329] copy_to_user_nofault+0xac/0x1c0 [ 215.799316][ T8329] bpf_probe_write_user+0xaf/0xf0 [ 215.799336][ T8329] bpf_prog_f26ae291ee3ebee3+0x41/0x49 [ 215.799354][ T8329] bpf_trace_run2+0x239/0x590 [ 215.799377][ T8329] ? __pfx_bpf_trace_run2+0x10/0x10 [ 215.799397][ T8329] ? __might_fault+0xe3/0x190 [ 215.799421][ T8329] ? __might_fault+0x13b/0x190 [ 215.799452][ T8329] __bpf_trace_sys_enter+0x37/0x60 [ 215.799473][ T8329] syscall_trace_enter+0x1b5/0x240 [ 215.799494][ T8329] do_syscall_64+0x3cd/0xfa0 [ 215.799522][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.799539][ T8329] RIP: 0033:0x7efe0338efc9 [ 215.799554][ T8329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.799571][ T8329] RSP: 002b:00007efe042a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 215.799588][ T8329] RAX: ffffffffffffffda RBX: 00007efe035e6090 RCX: 00007efe0338efc9 [ 215.799599][ T8329] RDX: 0000000000000002 RSI: 0000200000000e00 RDI: ffffffffffffffff [ 215.799609][ T8329] RBP: 00007efe042a2090 R08: 0000000000000000 R09: 0000000000000000 [ 215.799619][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.799629][ T8329] R13: 00007efe035e6128 R14: 00007efe035e6090 R15: 00007fff32755918 [ 215.799655][ T8329] [ 216.175508][ T3735] usb usb40-port1: attempt power cycle [ 216.362335][ T30] kauditd_printk_skb: 4017 callbacks suppressed [ 216.362357][ T30] audit: type=1400 audit(1761642302.524:111555): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 216.409531][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.439112][ T5477] audit: audit_lost=7401 audit_rate_limit=0 audit_backlog_limit=64 [ 216.469459][ T30] audit: type=1400 audit(1761642302.534:111556): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 216.500962][ T5477] audit: backlog limit exceeded [ 216.521470][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.557073][ T5477] audit: audit_lost=7402 audit_rate_limit=0 audit_backlog_limit=64 [ 216.587482][ T8339] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.594059][ T8339] audit: audit_lost=7403 audit_rate_limit=0 audit_backlog_limit=64 [ 216.598221][ T6577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.645160][ T8339] serio: Serial port ptm0 [ 216.775026][ T3735] usb usb40-port1: unable to enumerate USB device [ 220.788943][ T5874] IPVS: starting estimator thread 0... [ 220.895740][ T8427] IPVS: using max 77 ests per chain, 184800 per kthread [ 221.365374][ T30] kauditd_printk_skb: 4742 callbacks suppressed [ 221.365390][ T30] audit: type=1400 audit(1761642307.544:116274): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.437400][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.449677][ T8437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.471047][ T5477] audit: audit_lost=7412 audit_rate_limit=0 audit_backlog_limit=64 [ 221.486847][ T30] audit: type=1400 audit(1761642307.544:116275): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.518660][ T5477] audit: backlog limit exceeded [ 221.520902][ T8437] audit: audit_lost=7413 audit_rate_limit=0 audit_backlog_limit=64 [ 221.523870][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.568735][ T30] audit: type=1400 audit(1761642307.544:116276): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.584048][ T8437] audit: backlog limit exceeded [ 223.833943][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=8481 comm=syz.4.800 [ 224.481524][ T8486] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 225.688813][ T8506] FAULT_INJECTION: forcing a failure. [ 225.688813][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 225.727191][ T8506] CPU: 0 UID: 0 PID: 8506 Comm: syz.2.810 Not tainted syzkaller #0 PREEMPT(full) [ 225.727217][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.727227][ T8506] Call Trace: [ 225.727232][ T8506] [ 225.727237][ T8506] dump_stack_lvl+0x16c/0x1f0 [ 225.727261][ T8506] should_fail_ex+0x512/0x640 [ 225.727274][ T8506] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 225.727289][ T8506] should_failslab+0xc2/0x120 [ 225.727303][ T8506] kmem_cache_alloc_noprof+0x75/0x6e0 [ 225.727321][ T8506] ? skb_clone+0x190/0x3f0 [ 225.727339][ T8506] ? skb_clone+0x190/0x3f0 [ 225.727351][ T8506] skb_clone+0x190/0x3f0 [ 225.727365][ T8506] netlink_deliver_tap+0xabd/0xd30 [ 225.727383][ T8506] netlink_unicast+0x64c/0x870 [ 225.727400][ T8506] ? __pfx_netlink_unicast+0x10/0x10 [ 225.727421][ T8506] netlink_sendmsg+0x8c8/0xdd0 [ 225.727438][ T8506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.727457][ T8506] ____sys_sendmsg+0xa98/0xc70 [ 225.727475][ T8506] ? copy_msghdr_from_user+0x10a/0x160 [ 225.727489][ T8506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.727507][ T8506] ? kfree+0x252/0x6d0 [ 225.727519][ T8506] ? __pfx_cmp_ex_search+0x10/0x10 [ 225.727536][ T8506] ___sys_sendmsg+0x134/0x1d0 [ 225.727550][ T8506] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.727576][ T8506] ? __pfx___might_resched+0x10/0x10 [ 225.727593][ T8506] __sys_sendmmsg+0x200/0x420 [ 225.727608][ T8506] ? __pfx___sys_sendmmsg+0x10/0x10 [ 225.727626][ T8506] ? bpf_trace_run2+0x26b/0x590 [ 225.727646][ T8506] ? __might_fault+0x13b/0x190 [ 225.727661][ T8506] ? find_held_lock+0x2b/0x80 [ 225.727676][ T8506] ? syscall_trace_enter+0x1cb/0x240 [ 225.727691][ T8506] __x64_sys_sendmmsg+0x9c/0x100 [ 225.727705][ T8506] do_syscall_64+0xcd/0xfa0 [ 225.727721][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.727732][ T8506] RIP: 0033:0x7f018b98efc9 [ 225.727741][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.727753][ T8506] RSP: 002b:00007f018c8de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 225.727763][ T8506] RAX: ffffffffffffffda RBX: 00007f018bbe6090 RCX: 00007f018b98efc9 [ 225.727770][ T8506] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000008 [ 225.727776][ T8506] RBP: 00007f018c8de090 R08: 0000000000000000 R09: 0000000000000000 [ 225.727782][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.727788][ T8506] R13: 00007f018bbe6128 R14: 00007f018bbe6090 R15: 00007ffce4af2d38 [ 225.727802][ T8506] [ 225.729574][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 226.374638][ T30] kauditd_printk_skb: 8742 callbacks suppressed [ 226.374657][ T30] audit: type=1400 audit(1761642312.554:124255): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.387226][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 226.403689][ T8516] audit: audit_backlog=65 > audit_backlog_limit=64 [ 226.409460][ T5477] audit: audit_lost=7669 audit_rate_limit=0 audit_backlog_limit=64 [ 226.423880][ T8516] audit: audit_lost=7670 audit_rate_limit=0 audit_backlog_limit=64 [ 226.423961][ T5477] audit: backlog limit exceeded [ 226.438119][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 226.445156][ T5477] audit: audit_lost=7671 audit_rate_limit=0 audit_backlog_limit=64 [ 226.447511][ T8516] audit: backlog limit exceeded [ 226.453965][ T8529] audit: audit_backlog=65 > audit_backlog_limit=64 [ 226.612625][ T8531] netlink: 830 bytes leftover after parsing attributes in process `syz.2.818'. [ 226.634400][ T8531] bond_slave_0: entered promiscuous mode [ 226.640429][ T8531] bond_slave_1: entered promiscuous mode [ 229.369947][ T8607] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 229.420433][ T8607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.453915][ T8607] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 229.467859][ T8607] bond2: (slave wlan1): Opening slave failed [ 231.591426][ T30] kauditd_printk_skb: 9951 callbacks suppressed [ 231.591442][ T30] audit: type=1400 audit(1761642317.557:134204): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 231.652566][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 231.705526][ T6577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 231.725009][ T5477] audit: audit_lost=7673 audit_rate_limit=0 audit_backlog_limit=64 [ 231.743877][ T30] audit: type=1400 audit(1761642317.557:134205): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 231.744905][ T5477] audit: backlog limit exceeded [ 231.775043][ T6577] audit: audit_lost=7674 audit_rate_limit=0 audit_backlog_limit=64 [ 231.785304][ T5477] audit: audit_backlog=66 > audit_backlog_limit=64 [ 231.815911][ T6577] audit: backlog limit exceeded [ 231.826286][ T5477] audit: audit_lost=7675 audit_rate_limit=0 audit_backlog_limit=64 [ 232.919473][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.926938][ T8680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.939078][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.946895][ T8680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.985765][ T8680] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 233.013483][ T8680] batman_adv: batadv0: Removing interface: ipvlan2 [ 233.052784][ T8680] batman_adv: batadv0: Removing interface: vlan2 [ 233.380734][ T8699] geneve2: entered promiscuous mode [ 233.386000][ T8699] geneve2: entered allmulticast mode [ 233.421749][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.440001][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.472330][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.513041][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.542963][ T8705] netlink: 'syz.0.881': attribute type 8 has an invalid length. [ 233.831394][ T8719] netlink: 'syz.0.887': attribute type 29 has an invalid length. [ 233.840868][ T8719] netlink: 'syz.0.887': attribute type 3 has an invalid length. [ 233.849409][ T8719] netlink: 76 bytes leftover after parsing attributes in process `syz.0.887'. [ 233.965557][ T8721] FAULT_INJECTION: forcing a failure. [ 233.965557][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 234.003970][ T8721] CPU: 0 UID: 0 PID: 8721 Comm: syz.0.888 Not tainted syzkaller #0 PREEMPT(full) [ 234.003995][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.004005][ T8721] Call Trace: [ 234.004012][ T8721] [ 234.004019][ T8721] dump_stack_lvl+0x16c/0x1f0 [ 234.004052][ T8721] should_fail_ex+0x512/0x640 [ 234.004072][ T8721] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 234.004104][ T8721] should_failslab+0xc2/0x120 [ 234.004132][ T8721] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 234.004159][ T8721] ? proc_alloc_inode+0x25/0x200 [ 234.004189][ T8721] ? __pfx_proc_alloc_inode+0x10/0x10 [ 234.004210][ T8721] ? proc_alloc_inode+0x25/0x200 [ 234.004232][ T8721] proc_alloc_inode+0x25/0x200 [ 234.004254][ T8721] alloc_inode+0x64/0x240 [ 234.004279][ T8721] new_inode+0x22/0x1c0 [ 234.004300][ T8721] ? proc_lookup_de+0x201/0x360 [ 234.004332][ T8721] proc_get_inode+0x1d/0x780 [ 234.004359][ T8721] proc_lookup_de+0x236/0x360 [ 234.004388][ T8721] ? __pfx_proc_lookup+0x10/0x10 [ 234.004413][ T8721] proc_lookup+0xcf/0x110 [ 234.004439][ T8721] lookup_open.isra.0+0x4da/0x1580 [ 234.004473][ T8721] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 234.004515][ T8721] ? mnt_get_write_access+0x1e9/0x2f0 [ 234.004544][ T8721] path_openat+0x893/0x2cb0 [ 234.004572][ T8721] ? __pfx_path_openat+0x10/0x10 [ 234.004592][ T8721] ? __lock_acquire+0xb8a/0x1c90 [ 234.004623][ T8721] do_filp_open+0x20b/0x470 [ 234.004642][ T8721] ? __pfx_do_filp_open+0x10/0x10 [ 234.004669][ T8721] ? __pfx_kfree_link+0x10/0x10 [ 234.004703][ T8721] ? alloc_fd+0x471/0x7d0 [ 234.004727][ T8721] do_sys_openat2+0x11b/0x1d0 [ 234.004750][ T8721] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.004776][ T8721] ? bpf_trace_run2+0x2ab/0x590 [ 234.004803][ T8721] __x64_sys_openat+0x174/0x210 [ 234.004844][ T8721] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.004866][ T8721] ? syscall_trace_enter+0x1cb/0x240 [ 234.004889][ T8721] ? rcu_is_watching+0x12/0xc0 [ 234.004916][ T8721] do_syscall_64+0xcd/0xfa0 [ 234.004944][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.004961][ T8721] RIP: 0033:0x7ff25c98d810 [ 234.004976][ T8721] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 234.004993][ T8721] RSP: 002b:00007ff25d85ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 234.005010][ T8721] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff25c98d810 [ 234.005021][ T8721] RDX: 0000000000000002 RSI: 00007ff25d85efa0 RDI: 00000000ffffff9c [ 234.005031][ T8721] RBP: 00007ff25d85efa0 R08: 0000000000000000 R09: 0000000000000000 [ 234.005041][ T8721] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 234.005050][ T8721] R13: 00007ff25cbe6038 R14: 00007ff25cbe5fa0 R15: 00007ffc131eaf38 [ 234.005076][ T8721] [ 234.658376][ T8737] FAULT_INJECTION: forcing a failure. [ 234.658376][ T8737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.700863][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.5.895 Not tainted syzkaller #0 PREEMPT(full) [ 234.700888][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.700896][ T8737] Call Trace: [ 234.700902][ T8737] [ 234.700909][ T8737] dump_stack_lvl+0x16c/0x1f0 [ 234.700940][ T8737] should_fail_ex+0x512/0x640 [ 234.700966][ T8737] _copy_to_user+0x32/0xd0 [ 234.700989][ T8737] simple_read_from_buffer+0xcb/0x170 [ 234.701018][ T8737] proc_fail_nth_read+0x197/0x240 [ 234.701039][ T8737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.701058][ T8737] ? rw_verify_area+0xcf/0x6c0 [ 234.701080][ T8737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.701099][ T8737] vfs_read+0x1e4/0xcf0 [ 234.701120][ T8737] ? __pfx___mutex_lock+0x10/0x10 [ 234.701136][ T8737] ? __pfx_vfs_read+0x10/0x10 [ 234.701156][ T8737] ? __fget_files+0x20e/0x3c0 [ 234.701179][ T8737] ksys_read+0x12a/0x250 [ 234.701193][ T8737] ? __pfx_ksys_read+0x10/0x10 [ 234.701205][ T8737] ? syscall_trace_enter+0x1cb/0x240 [ 234.701229][ T8737] ? rcu_is_watching+0x12/0xc0 [ 234.701254][ T8737] do_syscall_64+0xcd/0xfa0 [ 234.701281][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.701296][ T8737] RIP: 0033:0x7efe0338d9dc [ 234.701310][ T8737] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 234.701326][ T8737] RSP: 002b:00007efe042c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.701344][ T8737] RAX: ffffffffffffffda RBX: 00007efe035e5fa0 RCX: 00007efe0338d9dc [ 234.701355][ T8737] RDX: 000000000000000f RSI: 00007efe042c30a0 RDI: 0000000000000007 [ 234.701364][ T8737] RBP: 00007efe042c3090 R08: 0000000000000000 R09: 0000000000000000 [ 234.701374][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.701382][ T8737] R13: 00007efe035e6038 R14: 00007efe035e5fa0 R15: 00007fff32755918 [ 234.701406][ T8737] [ 236.947243][ T30] kauditd_printk_skb: 11520 callbacks suppressed [ 236.947259][ T30] audit: type=1400 audit(1761642322.562:144999): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 236.998262][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 237.009363][ T5477] audit: audit_lost=7918 audit_rate_limit=0 audit_backlog_limit=64 [ 237.023342][ T30] audit: type=1400 audit(1761642322.599:145000): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.053174][ T5477] audit: backlog limit exceeded [ 237.077938][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 237.091290][ T5477] audit: audit_lost=7919 audit_rate_limit=0 audit_backlog_limit=64 [ 237.100908][ T8800] audit: audit_backlog=65 > audit_backlog_limit=64 [ 237.105423][ T30] audit: type=1400 audit(1761642322.599:145001): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.129191][ T8800] audit: audit_lost=7920 audit_rate_limit=0 audit_backlog_limit=64 [ 239.406705][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.938'. [ 241.067883][ T8880] netlink: 5 bytes leftover after parsing attributes in process `syz.4.950'. [ 241.079018][ T8880] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 241.097550][ T8880] 0ªX¹¦D: entered allmulticast mode [ 241.102853][ T8880] veth0_macvtap: entered allmulticast mode [ 241.117647][ T8880] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 242.305000][ T30] kauditd_printk_skb: 18706 callbacks suppressed [ 242.305018][ T30] audit: type=1400 audit(1761642327.585:163676): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 242.347159][ T30] audit: type=1400 audit(1761642327.585:163677): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 242.388897][ T30] audit: type=1400 audit(1761642327.585:163678): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 242.390419][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 242.390829][ T6577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 242.426135][ T5477] audit: audit_lost=7931 audit_rate_limit=0 audit_backlog_limit=64 [ 242.435346][ T5477] audit: backlog limit exceeded [ 242.440699][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 242.447516][ T30] audit: type=1400 audit(1761642327.585:163679): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 242.447832][ T5477] audit: audit_lost=7932 audit_rate_limit=0 audit_backlog_limit=64 [ 244.207508][ T8927] sctp: [Deprecated]: syz.3.966 (pid 8927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.207508][ T8927] Use struct sctp_sack_info instead [ 245.448774][ T8960] netlink: 'syz.0.979': attribute type 10 has an invalid length. [ 245.481321][ T8960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.509894][ T8960] batadv0: entered promiscuous mode [ 245.528102][ T8960] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 245.631562][ T8960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.641377][ T8960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.662705][ T8960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.674676][ T8960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.694799][ T8960] bond0: (slave batadv0): Releasing backup interface [ 246.189348][ T8972] netlink: 168 bytes leftover after parsing attributes in process `syz.5.984'. [ 247.665277][ T30] kauditd_printk_skb: 15264 callbacks suppressed [ 247.665293][ T30] audit: type=1400 audit(1761642332.589:178941): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 247.733898][ T30] audit: type=1400 audit(1761642332.589:178942): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 247.736751][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.756853][ T9009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.772024][ T9009] audit: audit_lost=7934 audit_rate_limit=0 audit_backlog_limit=64 [ 247.783028][ T5813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.790214][ T9011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.790483][ T9009] audit: backlog limit exceeded [ 247.802873][ T5813] audit: audit_lost=7935 audit_rate_limit=0 audit_backlog_limit=64 [ 247.805845][ T9012] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.837394][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1002'. [ 247.958149][ T9012] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 247.967279][ T9012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.999'. [ 248.151918][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 249.642854][ T9071] FAULT_INJECTION: forcing a failure. [ 249.642854][ T9071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.697732][ T9071] CPU: 0 UID: 0 PID: 9071 Comm: syz.4.1020 Not tainted syzkaller #0 PREEMPT(full) [ 249.697762][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.697772][ T9071] Call Trace: [ 249.697778][ T9071] [ 249.697786][ T9071] dump_stack_lvl+0x16c/0x1f0 [ 249.697821][ T9071] should_fail_ex+0x512/0x640 [ 249.697846][ T9071] _copy_to_user+0x32/0xd0 [ 249.697871][ T9071] simple_read_from_buffer+0xcb/0x170 [ 249.697902][ T9071] proc_fail_nth_read+0x197/0x240 [ 249.697925][ T9071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.697947][ T9071] ? rw_verify_area+0xcf/0x6c0 [ 249.697972][ T9071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.697992][ T9071] vfs_read+0x1e4/0xcf0 [ 249.698012][ T9071] ? __pfx___mutex_lock+0x10/0x10 [ 249.698029][ T9071] ? __pfx_vfs_read+0x10/0x10 [ 249.698052][ T9071] ? __fget_files+0x20e/0x3c0 [ 249.698078][ T9071] ksys_read+0x12a/0x250 [ 249.698094][ T9071] ? __pfx_ksys_read+0x10/0x10 [ 249.698108][ T9071] ? syscall_trace_enter+0x1cb/0x240 [ 249.698131][ T9071] ? rcu_is_watching+0x12/0xc0 [ 249.698159][ T9071] do_syscall_64+0xcd/0xfa0 [ 249.698186][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.698204][ T9071] RIP: 0033:0x7f7fc118d9dc [ 249.698219][ T9071] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.698235][ T9071] RSP: 002b:00007f7fc2045030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.698253][ T9071] RAX: ffffffffffffffda RBX: 00007f7fc13e5fa0 RCX: 00007f7fc118d9dc [ 249.698264][ T9071] RDX: 000000000000000f RSI: 00007f7fc20450a0 RDI: 0000000000000003 [ 249.698274][ T9071] RBP: 00007f7fc2045090 R08: 0000000000000000 R09: 0000000000000000 [ 249.698283][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.698293][ T9071] R13: 00007f7fc13e6038 R14: 00007f7fc13e5fa0 R15: 00007ffdf655cbc8 [ 249.698319][ T9071] [ 251.314678][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 251.350402][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 251.359734][ T9100] netlink: 'syz.4.1033': attribute type 11 has an invalid length. [ 251.367634][ T9100] netlink: 'syz.4.1033': attribute type 13 has an invalid length. [ 251.398215][ T9100] bridge0: entered allmulticast mode [ 251.465254][ T9100] bridge_slave_1: left allmulticast mode [ 251.481244][ T9100] bridge_slave_1: left promiscuous mode [ 251.489295][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.505022][ T9100] bridge_slave_0: left allmulticast mode [ 251.532259][ T9100] bridge_slave_0: left promiscuous mode [ 251.546066][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.651459][ T9107] bond0: Removing last ns target with arp_interval on [ 251.663287][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.367379][ T9118] FAULT_INJECTION: forcing a failure. [ 252.367379][ T9118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.443423][ T9118] CPU: 0 UID: 0 PID: 9118 Comm: syz.5.1038 Not tainted syzkaller #0 PREEMPT(full) [ 252.443451][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.443462][ T9118] Call Trace: [ 252.443467][ T9118] [ 252.443474][ T9118] dump_stack_lvl+0x16c/0x1f0 [ 252.443504][ T9118] should_fail_ex+0x512/0x640 [ 252.443522][ T9118] ? page_copy_sane+0xcd/0x2d0 [ 252.443542][ T9118] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 252.443573][ T9118] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 252.443591][ T9118] ? shmem_write_begin+0x176/0x300 [ 252.443618][ T9118] ? __pfx_shmem_write_begin+0x10/0x10 [ 252.443650][ T9118] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 252.443675][ T9118] generic_perform_write+0x221/0x900 [ 252.443705][ T9118] ? __pfx_generic_perform_write+0x10/0x10 [ 252.443730][ T9118] ? generic_update_time+0xcf/0xf0 [ 252.443750][ T9118] ? mnt_put_write_access_file+0x45/0xf0 [ 252.443770][ T9118] shmem_file_write_iter+0x10e/0x140 [ 252.443789][ T9118] aio_write+0x3b9/0x910 [ 252.443808][ T9118] ? __pfx_aio_write+0x10/0x10 [ 252.443826][ T9118] ? __lock_acquire+0xb8a/0x1c90 [ 252.443868][ T9118] ? __might_fault+0xe3/0x190 [ 252.443890][ T9118] ? __might_fault+0x13b/0x190 [ 252.443915][ T9118] ? io_submit_one+0x1243/0x1df0 [ 252.443933][ T9118] io_submit_one+0x1243/0x1df0 [ 252.443954][ T9118] ? __lock_acquire+0xb8a/0x1c90 [ 252.443978][ T9118] ? __pfx_io_submit_one+0x10/0x10 [ 252.444005][ T9118] ? __might_fault+0xe3/0x190 [ 252.444026][ T9118] ? __might_fault+0x13b/0x190 [ 252.444053][ T9118] ? __x64_sys_io_submit+0x1a9/0x350 [ 252.444072][ T9118] __x64_sys_io_submit+0x1a9/0x350 [ 252.444095][ T9118] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 252.444122][ T9118] ? rcu_is_watching+0x12/0xc0 [ 252.444151][ T9118] do_syscall_64+0xcd/0xfa0 [ 252.444181][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.444199][ T9118] RIP: 0033:0x7efe0338efc9 [ 252.444214][ T9118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.444228][ T9118] RSP: 002b:00007efe042c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 252.444244][ T9118] RAX: ffffffffffffffda RBX: 00007efe035e5fa0 RCX: 00007efe0338efc9 [ 252.444254][ T9118] RDX: 0000200000000780 RSI: 0000000000000002 RDI: 00007efe0429a000 [ 252.444264][ T9118] RBP: 00007efe042c3090 R08: 0000000000000000 R09: 0000000000000000 [ 252.444273][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.444282][ T9118] R13: 00007efe035e6038 R14: 00007efe035e5fa0 R15: 00007fff32755918 [ 252.444308][ T9118] [ 253.024429][ T30] kauditd_printk_skb: 26759 callbacks suppressed [ 253.024443][ T30] audit: type=1400 audit(1761642337.603:190212): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.055355][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.112982][ T5477] audit: audit_lost=13100 audit_rate_limit=0 audit_backlog_limit=64 [ 253.164424][ T5477] audit: backlog limit exceeded [ 253.172926][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.180069][ T9124] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.186275][ T30] audit: type=1400 audit(1761642337.603:190213): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.219415][ T9124] audit: audit_lost=13101 audit_rate_limit=0 audit_backlog_limit=64 [ 253.227406][ T9124] audit: backlog limit exceeded [ 253.232644][ T5477] audit: audit_lost=13102 audit_rate_limit=0 audit_backlog_limit=64 [ 255.058439][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1059'. [ 256.925652][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 256.941193][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1076'. [ 257.015707][ T9217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9217 comm=syz.3.1076 [ 257.111750][ T9225] sctp: [Deprecated]: syz.0.1080 (pid 9225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.111750][ T9225] Use struct sctp_sack_info instead [ 257.690295][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.696737][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.359332][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 258.370790][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 258.381930][ T30] kauditd_printk_skb: 13443 callbacks suppressed [ 258.381948][ T30] audit: type=1400 audit(1761642342.607:203233): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.394823][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.414916][ T9252] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.416505][ T5477] audit: audit_lost=13244 audit_rate_limit=0 audit_backlog_limit=64 [ 258.430723][ T5477] audit: backlog limit exceeded [ 258.431087][ T9252] audit: audit_lost=13245 audit_rate_limit=0 audit_backlog_limit=64 [ 258.435751][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.435769][ T5477] audit: audit_lost=13246 audit_rate_limit=0 audit_backlog_limit=64 [ 258.462260][ T5477] audit: backlog limit exceeded [ 258.467295][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.493502][ T9248] ceph: No mds server is up or the cluster is laggy [ 258.554477][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 258.601224][ T6635] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.615107][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 258.628322][ T6635] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.649225][ T6635] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.657974][ T6635] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.803834][ T9262] sctp: [Deprecated]: syz.4.1093 (pid 9262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.803834][ T9262] Use struct sctp_sack_info instead [ 259.556766][ T9287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1101'. [ 260.327933][ T9299] sctp: [Deprecated]: syz.4.1105 (pid 9299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.327933][ T9299] Use struct sctp_sack_info instead [ 261.825937][ T9336] sctp: [Deprecated]: syz.2.1118 (pid 9336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.825937][ T9336] Use struct sctp_sack_info instead [ 262.986624][ T9362] sctp: [Deprecated]: syz.4.1130 (pid 9362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.986624][ T9362] Use struct sctp_sack_info instead [ 263.738263][ T30] kauditd_printk_skb: 11179 callbacks suppressed [ 263.738279][ T30] audit: type=1400 audit(1761642347.621:213948): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.802584][ T30] audit: type=1400 audit(1761642347.630:213949): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.803295][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.853958][ T30] audit: type=1400 audit(1761642347.630:213950): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.899573][ T30] audit: type=1400 audit(1761642347.630:213951): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.940948][ T5477] audit: audit_lost=13402 audit_rate_limit=0 audit_backlog_limit=64 [ 263.958101][ T5477] audit: backlog limit exceeded [ 263.970401][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.973127][ T30] audit: type=1400 audit(1761642347.630:213952): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.002358][ T30] audit: type=1400 audit(1761642347.630:213953): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.717433][ T9412] bridge_slave_0: left allmulticast mode [ 264.743198][ T9412] bridge_slave_0: left promiscuous mode [ 264.769368][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 264.770093][ T9412] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.823646][ T9412] bridge_slave_1: left allmulticast mode [ 264.848129][ T9412] bridge_slave_1: left promiscuous mode [ 264.861549][ T9412] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.878222][ T9412] bond0: (slave bond_slave_0): Releasing backup interface [ 264.916753][ T9412] bond_slave_0: left promiscuous mode [ 264.934143][ T9420] FAULT_INJECTION: forcing a failure. [ 264.934143][ T9420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.949880][ T9420] CPU: 0 UID: 0 PID: 9420 Comm: syz.3.1151 Not tainted syzkaller #0 PREEMPT(full) [ 264.949908][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.949919][ T9420] Call Trace: [ 264.949926][ T9420] [ 264.949933][ T9420] dump_stack_lvl+0x16c/0x1f0 [ 264.949966][ T9420] should_fail_ex+0x512/0x640 [ 264.949991][ T9420] _copy_to_user+0x32/0xd0 [ 264.950015][ T9420] simple_read_from_buffer+0xcb/0x170 [ 264.950046][ T9420] proc_fail_nth_read+0x197/0x240 [ 264.950068][ T9420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.950091][ T9420] ? rw_verify_area+0xcf/0x6c0 [ 264.950116][ T9420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.950137][ T9420] vfs_read+0x1e4/0xcf0 [ 264.950157][ T9420] ? __pfx___mutex_lock+0x10/0x10 [ 264.950175][ T9420] ? __pfx_vfs_read+0x10/0x10 [ 264.950198][ T9420] ? __fget_files+0x20e/0x3c0 [ 264.950224][ T9420] ksys_read+0x12a/0x250 [ 264.950240][ T9420] ? __pfx_ksys_read+0x10/0x10 [ 264.950255][ T9420] ? syscall_trace_enter+0x1cb/0x240 [ 264.950278][ T9420] ? rcu_is_watching+0x12/0xc0 [ 264.950304][ T9420] do_syscall_64+0xcd/0xfa0 [ 264.950332][ T9420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.950350][ T9420] RIP: 0033:0x7f4d97b8d9dc [ 264.950366][ T9420] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.950383][ T9420] RSP: 002b:00007f4d98982030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.950400][ T9420] RAX: ffffffffffffffda RBX: 00007f4d97de6180 RCX: 00007f4d97b8d9dc [ 264.950412][ T9420] RDX: 000000000000000f RSI: 00007f4d989820a0 RDI: 0000000000000005 [ 264.950422][ T9420] RBP: 00007f4d98982090 R08: 0000000000000000 R09: 0000000000000000 [ 264.950432][ T9420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.950442][ T9420] R13: 00007f4d97de6218 R14: 00007f4d97de6180 R15: 00007ffccebd1cd8 [ 264.950468][ T9420] [ 265.281394][ T9412] bond0: (slave bond_slave_1): Releasing backup interface [ 265.295730][ T9412] bond_slave_1: left promiscuous mode [ 265.344679][ T9412] team0: Port device team_slave_0 removed [ 265.387088][ T9412] team0: Port device team_slave_1 removed [ 265.405274][ T9412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.511231][ T36] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 265.558063][ T36] bond1: (slave macvlan2): link status definitely down, disabling slave [ 267.282651][ T9457] CUSE: unknown device info "" [ 267.287641][ T9457] CUSE: zero length info key specified [ 268.108510][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1172'. [ 268.176024][ T9472] team1: entered promiscuous mode [ 268.183377][ T9472] team1: entered allmulticast mode [ 268.203281][ T9472] 8021q: adding VLAN 0 to HW filter on device team1 [ 268.558753][ T9487] sctp: [Deprecated]: syz.5.1178 (pid 9487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.558753][ T9487] Use struct sctp_sack_info instead [ 269.094257][ T30] kauditd_printk_skb: 11086 callbacks suppressed [ 269.094273][ T30] audit: type=1400 audit(1761642352.644:224924): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 269.135571][ T30] audit: type=1400 audit(1761642352.644:224925): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 269.160719][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.166451][ T9498] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.167259][ T5477] audit: audit_lost=13442 audit_rate_limit=0 audit_backlog_limit=64 [ 269.174094][ T9498] audit: audit_lost=13443 audit_rate_limit=0 audit_backlog_limit=64 [ 269.182189][ T30] audit: type=1400 audit(1761642352.644:224926): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 269.195323][ T9498] audit: backlog limit exceeded [ 269.211988][ T5477] audit: backlog limit exceeded [ 269.222996][ T9499] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.956044][ T9511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1188'. [ 270.165822][ T9520] FAULT_INJECTION: forcing a failure. [ 270.165822][ T9520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.180576][ T9520] CPU: 1 UID: 0 PID: 9520 Comm: syz.5.1192 Not tainted syzkaller #0 PREEMPT(full) [ 270.180603][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.180614][ T9520] Call Trace: [ 270.180620][ T9520] [ 270.180627][ T9520] dump_stack_lvl+0x16c/0x1f0 [ 270.180660][ T9520] should_fail_ex+0x512/0x640 [ 270.180684][ T9520] _copy_from_iter+0x29f/0x1720 [ 270.180710][ T9520] ? __alloc_skb+0x200/0x380 [ 270.180733][ T9520] ? __pfx__copy_from_iter+0x10/0x10 [ 270.180752][ T9520] ? netlink_autobind.isra.0+0x158/0x370 [ 270.180783][ T9520] netlink_sendmsg+0x820/0xdd0 [ 270.180809][ T9520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.180840][ T9520] ____sys_sendmsg+0xa98/0xc70 [ 270.180869][ T9520] ? copy_msghdr_from_user+0x10a/0x160 [ 270.180891][ T9520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.180924][ T9520] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 270.180946][ T9520] ___sys_sendmsg+0x134/0x1d0 [ 270.180969][ T9520] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.180989][ T9520] ? __lock_acquire+0x622/0x1c90 [ 270.181045][ T9520] __sys_sendmsg+0x16d/0x220 [ 270.181066][ T9520] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.181086][ T9520] ? __pfx_bpf_trace_run2+0x10/0x10 [ 270.181116][ T9520] ? syscall_trace_enter+0x1cb/0x240 [ 270.181139][ T9520] ? rcu_is_watching+0x12/0xc0 [ 270.181164][ T9520] do_syscall_64+0xcd/0xfa0 [ 270.181192][ T9520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.181210][ T9520] RIP: 0033:0x7efe0338efc9 [ 270.181224][ T9520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.181240][ T9520] RSP: 002b:00007efe042c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.181258][ T9520] RAX: ffffffffffffffda RBX: 00007efe035e5fa0 RCX: 00007efe0338efc9 [ 270.181269][ T9520] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 270.181280][ T9520] RBP: 00007efe042c3090 R08: 0000000000000000 R09: 0000000000000000 [ 270.181289][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.181299][ T9520] R13: 00007efe035e6038 R14: 00007efe035e5fa0 R15: 00007fff32755918 [ 270.181324][ T9520] [ 270.441015][ T5881] IPVS: starting estimator thread 0... [ 270.489331][ T9527] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 270.537346][ T9524] IPVS: using max 83 ests per chain, 199200 per kthread [ 272.425030][ T9566] gretap0: entered promiscuous mode [ 272.926801][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.934393][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.049915][ T9583] bridge_slave_1: left allmulticast mode [ 273.055673][ T9583] bridge_slave_1: left promiscuous mode [ 273.061899][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.159368][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1217'. [ 273.192606][ T9583] bridge_slave_0: left allmulticast mode [ 273.198745][ T9583] bridge_slave_0: left promiscuous mode [ 273.207942][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.425388][ T31] INFO: task kworker/1:7:5924 blocked for more than 143 seconds. [ 273.442712][ T31] Not tainted syzkaller #0 [ 273.473959][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.485661][ T31] task:kworker/1:7 state:D stack:22664 pid:5924 tgid:5924 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 273.498771][ T31] Workqueue: usb_hub_wq hub_event [ 273.722625][ T31] Call Trace: [ 273.726117][ T31] [ 273.729151][ T31] __schedule+0x1190/0x5de0 [ 273.757274][ T31] ? __pfx___schedule+0x10/0x10 [ 273.798022][ T31] ? find_held_lock+0x2b/0x80 [ 273.802773][ T31] ? schedule+0x2d7/0x3a0 [ 273.807108][ T31] schedule+0xe7/0x3a0 [ 273.811968][ T31] schedule_timeout+0x257/0x290 [ 273.817513][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 273.823883][ T31] ? mark_held_locks+0x49/0x80 [ 273.829203][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.839792][ T31] __wait_for_common+0x2fc/0x4e0 [ 273.845651][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 273.852587][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 273.858728][ T31] ? __pfx_device_del+0x10/0x10 [ 273.864478][ T31] ? kobject_put+0xab/0x5a0 [ 273.869068][ T31] i2c_del_adapter+0x546/0x6f0 [ 273.874314][ T31] ? usb_free_stream_buffers.isra.0+0x1b8/0x2b0 [ 273.881137][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 273.887191][ T31] ? rcu_is_watching+0x12/0xc0 [ 273.892418][ T31] ? kfree+0x252/0x6d0 [ 273.896880][ T31] ? usb_urb_exit+0x1ff/0x2b0 [ 273.901913][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 273.907231][ T31] dvb_usb_device_exit+0x334/0x580 [ 273.912803][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 273.929088][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.935075][ T31] cxusb_probe+0x1c9/0x7d0 [ 273.940310][ T31] ? mark_held_locks+0x49/0x80 [ 273.945572][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 273.954113][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.960038][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 273.966456][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 273.973011][ T31] usb_probe_interface+0x303/0xa40 [ 273.978646][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 273.985068][ T31] really_probe+0x241/0xa90 [ 273.990228][ T31] __driver_probe_device+0x1de/0x440 [ 273.995976][ T31] driver_probe_device+0x4c/0x1b0 [ 274.001497][ T31] __device_attach_driver+0x1df/0x310 [ 274.011846][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 274.017805][ T31] bus_for_each_drv+0x159/0x1e0 [ 274.022935][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 274.028621][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.034500][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 274.040837][ T31] __device_attach+0x1e4/0x4b0 [ 274.046144][ T31] ? __pfx___device_attach+0x10/0x10 [ 274.051967][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 274.057893][ T31] bus_probe_device+0x17f/0x1c0 [ 274.063240][ T31] device_add+0x1148/0x1aa0 [ 274.068361][ T31] ? __pfx_device_add+0x10/0x10 [ 274.073596][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 274.079351][ T31] usb_set_configuration+0x1187/0x1e20 [ 274.084866][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 274.091018][ T31] usb_generic_driver_probe+0xb1/0x110 [ 274.096634][ T31] usb_probe_device+0xef/0x3e0 [ 274.101714][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 274.110430][ T31] really_probe+0x241/0xa90 [ 274.115490][ T31] __driver_probe_device+0x1de/0x440 [ 274.121501][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 274.127522][ T31] driver_probe_device+0x4c/0x1b0 [ 274.133232][ T31] __device_attach_driver+0x1df/0x310 [ 274.139134][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 274.145744][ T31] bus_for_each_drv+0x159/0x1e0 [ 274.151368][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 274.157230][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.163101][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 274.169480][ T31] __device_attach+0x1e4/0x4b0 [ 274.174938][ T31] ? __pfx___device_attach+0x10/0x10 [ 274.180769][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 274.186697][ T31] bus_probe_device+0x17f/0x1c0 [ 274.192004][ T31] device_add+0x1148/0x1aa0 [ 274.207241][ T31] ? __pfx_device_add+0x10/0x10 [ 274.212603][ T31] ? add_device_randomness+0xb7/0xf0 [ 274.218560][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 274.225081][ T31] usb_new_device+0xd07/0x1a60 [ 274.230955][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 274.236664][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 274.241885][ T31] ? mark_held_locks+0x49/0x80 [ 274.246847][ T31] hub_event+0x2f34/0x4fe0 [ 274.251294][ T31] ? __pfx_hub_event+0x10/0x10 [ 274.256549][ T31] ? assoc_array_insert+0x810/0x3970 [ 274.262430][ T31] ? rcu_is_watching+0x12/0xc0 [ 274.267682][ T31] process_one_work+0x9cf/0x1b70 [ 274.273433][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 274.279345][ T31] ? __pfx_process_one_work+0x10/0x10 [ 274.285242][ T31] ? assign_work+0x1a0/0x250 [ 274.290468][ T31] worker_thread+0x6c8/0xf10 [ 274.295533][ T31] ? __kthread_parkme+0x19e/0x250 [ 274.301127][ T31] ? __pfx_worker_thread+0x10/0x10 [ 274.306637][ T31] kthread+0x3c5/0x780 [ 274.311107][ T31] ? __pfx_kthread+0x10/0x10 [ 274.315739][ T31] ? rcu_is_watching+0x12/0xc0 [ 274.320522][ T31] ? __pfx_kthread+0x10/0x10 [ 274.326632][ T31] ret_from_fork+0x675/0x7d0 [ 274.331704][ T31] ? __pfx_kthread+0x10/0x10 [ 274.336859][ T31] ret_from_fork_asm+0x1a/0x30 [ 274.342118][ T31] [ 274.345548][ T31] INFO: task syz.1.123:6398 blocked for more than 144 seconds. [ 274.353968][ T31] Not tainted syzkaller #0 [ 274.358926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.368967][ T31] task:syz.1.123 state:D stack:26584 pid:6398 tgid:6389 ppid:5819 task_flags:0x400140 flags:0x00080002 [ 274.381515][ T31] Call Trace: [ 274.384807][ T31] [ 274.387993][ T31] __schedule+0x1190/0x5de0 [ 274.392526][ T31] ? __pfx___schedule+0x10/0x10 [ 274.398003][ T31] ? find_held_lock+0x2b/0x80 [ 274.403155][ T31] ? schedule+0x2d7/0x3a0 [ 274.408101][ T31] ? usbdev_open+0x1b6/0x8b0 [ 274.413142][ T31] schedule+0xe7/0x3a0 [ 274.417661][ T31] schedule_preempt_disabled+0x13/0x30 [ 274.423842][ T31] __mutex_lock+0x818/0x1060 [ 274.429002][ T31] ? klist_put+0xc7/0x1b0 [ 274.433774][ T31] ? usbdev_open+0x1b6/0x8b0 [ 274.438764][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 274.444212][ T31] ? kobject_put+0xab/0x5a0 [ 274.449155][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 274.455452][ T30] kauditd_printk_skb: 13120 callbacks suppressed [ 274.455467][ T30] audit: type=1400 audit(1761642357.649:237160): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.463422][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.483291][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 274.489975][ T5477] audit: audit_lost=13740 audit_rate_limit=0 audit_backlog_limit=64 [ 274.495058][ T31] ? usbdev_open+0x1b6/0x8b0 [ 274.503557][ T5477] audit: backlog limit exceeded [ 274.507867][ T31] usbdev_open+0x1b6/0x8b0 [ 274.512687][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.523518][ T30] audit: type=1400 audit(1761642357.649:237161): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.524034][ T5477] audit: audit_lost=13741 audit_rate_limit=0 audit_backlog_limit=64 [ 274.554652][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 274.554901][ T5477] audit: backlog limit exceeded [ 274.559845][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 274.565493][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.570300][ T30] audit: type=1400 audit(1761642357.649:237162): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.597575][ T31] ? chrdev_open+0x58c/0x6a0 [ 274.602262][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 274.607222][ T31] chrdev_open+0x234/0x6a0 [ 274.611829][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 274.616784][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 274.623917][ T31] do_dentry_open+0x982/0x1530 [ 274.628704][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 274.635021][ T31] vfs_open+0x82/0x3f0 [ 274.639122][ T31] path_openat+0x1de4/0x2cb0 [ 274.643941][ T31] ? __pfx_path_openat+0x10/0x10 [ 274.649227][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 274.654926][ T31] do_filp_open+0x20b/0x470 [ 274.659947][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 274.666758][ T31] ? alloc_fd+0x471/0x7d0 [ 274.671605][ T31] do_sys_openat2+0x11b/0x1d0 [ 274.678441][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.684227][ T31] ? bpf_trace_run2+0x2ab/0x590 [ 274.690625][ T31] __x64_sys_openat+0x174/0x210 [ 274.696170][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 274.702166][ T31] ? syscall_trace_enter+0x1cb/0x240 [ 274.708042][ T31] ? rcu_is_watching+0x12/0xc0 [ 274.713371][ T31] do_syscall_64+0xcd/0xfa0 [ 274.718564][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.725042][ T31] RIP: 0033:0x7fea79d8d810 [ 274.730002][ T31] RSP: 002b:00007fea7ab56b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 274.739652][ T31] RAX: ffffffffffffffda RBX: 0000000000000102 RCX: 00007fea79d8d810 [ 274.748499][ T31] RDX: 0000000000000102 RSI: 00007fea7ab56c10 RDI: 00000000ffffff9c [ 274.757429][ T31] RBP: 00007fea7ab56c10 R08: 0000000000000000 R09: 0000000000000000 [ 274.766457][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 274.775631][ T31] R13: 00007fea79fe6128 R14: 00007fea79fe6090 R15: 00007fff2bc15e28 [ 274.785675][ T31] [ 274.789174][ T31] [ 274.789174][ T31] Showing all locks held in the system: [ 274.840217][ T31] 1 lock held by khungtaskd/31: [ 274.845127][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 274.857026][ T31] 2 locks held by dhcpcd/5477: [ 274.861868][ T31] 2 locks held by getty/5572: [ 274.866562][ T31] #0: ffff88814cc0a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 274.877034][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 274.887521][ T31] 4 locks held by udevd/5821: [ 274.892328][ T31] #0: ffff8880777300a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 274.902303][ T31] #1: ffff8880347abc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 274.911936][ T31] #2: ffff88805974c2d8 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 274.922545][ T31] #3: ffff88805852c198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 274.933783][ T31] 3 locks held by kworker/0:5/5881: [ 274.939010][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 274.949675][ T31] #1: ffffc9000432fd00 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 274.959348][ T31] #2: ffffffff8e3cf9f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 274.970078][ T31] 5 locks held by kworker/1:7/5924: [ 274.975899][ T31] #0: ffff88823be12f48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 274.986891][ T31] #1: ffffc900044dfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 274.998234][ T31] #2: ffff8881443df198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 275.007314][ T31] #3: ffff88805852c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 275.016724][ T31] #4: ffff88805852a160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 275.025976][ T31] 1 lock held by syz.1.123/6398: [ 275.031065][ T31] #0: ffff8881443df198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 275.040353][ T31] [ 275.042683][ T31] ============================================= [ 275.042683][ T31] [ 275.054348][ T31] NMI backtrace for cpu 0 [ 275.054365][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 275.054385][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.054395][ T31] Call Trace: [ 275.054401][ T31] [ 275.054408][ T31] dump_stack_lvl+0x116/0x1f0 [ 275.054439][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 275.054455][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 275.054481][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 275.054508][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 275.054528][ T31] watchdog+0xf3f/0x1170 [ 275.054553][ T31] ? rcu_is_watching+0x12/0xc0 [ 275.054575][ T31] ? __pfx_watchdog+0x10/0x10 [ 275.054593][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.054617][ T31] ? __kthread_parkme+0x19e/0x250 [ 275.054642][ T31] ? __pfx_watchdog+0x10/0x10 [ 275.054659][ T31] kthread+0x3c5/0x780 [ 275.054676][ T31] ? __pfx_kthread+0x10/0x10 [ 275.054691][ T31] ? rcu_is_watching+0x12/0xc0 [ 275.054717][ T31] ? __pfx_kthread+0x10/0x10 [ 275.054735][ T31] ret_from_fork+0x675/0x7d0 [ 275.054750][ T31] ? __pfx_kthread+0x10/0x10 [ 275.054767][ T31] ret_from_fork_asm+0x1a/0x30 [ 275.054805][ T31] [ 275.054811][ T31] Sending NMI from CPU 0 to CPUs 1: [ 275.181246][ C1] NMI backtrace for cpu 1 [ 275.181262][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted syzkaller #0 PREEMPT(full) [ 275.181281][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.181288][ C1] RIP: 0010:rcu_is_watching+0x41/0xc0 [ 275.181312][ C1] Code: a2 93 89 c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed e0 3e cd 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5c 48 03 1c ed e0 3e cd 8d 48 b8 00 00 00 00 00 fc ff df 48 89 [ 275.181326][ C1] RSP: 0018:ffffc90000a67d28 EFLAGS: 00000246 [ 275.181340][ C1] RAX: dffffc0000000000 RBX: ffffffff93a292a8 RCX: ffffffff81b9b927 [ 275.181350][ C1] RDX: 1ffffffff1b9a7dd RSI: ffffffff8bf06dc0 RDI: ffffffff8dcd3ee8 [ 275.181359][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 275.181367][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff81b9b555 [ 275.181375][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.181384][ C1] FS: 0000000000000000(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000 [ 275.181398][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.181407][ C1] CR2: 00000000ffffffff CR3: 0000000075aab000 CR4: 00000000003526f0 [ 275.181415][ C1] Call Trace: [ 275.181421][ C1] [ 275.181427][ C1] lock_release+0x201/0x2f0 [ 275.181447][ C1] kauditd_thread+0x5fa/0xa70 [ 275.181463][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 275.181477][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 275.181495][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.181520][ C1] ? __kthread_parkme+0x19e/0x250 [ 275.181540][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 275.181556][ C1] kthread+0x3c5/0x780 [ 275.181569][ C1] ? __pfx_kthread+0x10/0x10 [ 275.181583][ C1] ? rcu_is_watching+0x12/0xc0 [ 275.181598][ C1] ? __pfx_kthread+0x10/0x10 [ 275.181611][ C1] ret_from_fork+0x675/0x7d0 [ 275.181623][ C1] ? __pfx_kthread+0x10/0x10 [ 275.181636][ C1] ret_from_fork_asm+0x1a/0x30 [ 275.181661][ C1] [ 279.805833][ T30] kauditd_printk_skb: 28655 callbacks suppressed [ 279.805853][ T30] audit: type=1400 audit(1761642362.653:264340): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.813133][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.833706][ T30] audit: type=1400 audit(1761642362.653:264341): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.840296][ T5477] audit: audit_lost=14235 audit_rate_limit=0 audit_backlog_limit=64 [ 279.861576][ T30] audit: type=1400 audit(1761642362.653:264342): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.869783][ T5477] audit: backlog limit exceeded [ 279.891067][ T30] audit: type=1400 audit(1761642362.653:264343): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.896527][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.917395][ T30] audit: type=1400 audit(1761642362.653:264344): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.945255][ T30] audit: type=1400 audit(1761642362.653:264345): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0