last executing test programs: 3m21.806055722s ago: executing program 1 (id=326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) fanotify_init(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003ec0)=ANY=[], 0x634}, 0x1, 0xffffff8d}, 0x0) 3m21.288332098s ago: executing program 1 (id=327): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r0 = socket$inet(0x2, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000052000100000000000000ff080200000008000100", @ANYRES64=r1], 0x1c}}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x4040004, &(0x7f0000000380)={0x2, 0x6e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3m21.08696096s ago: executing program 1 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3, 0x12) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000340)={0x1, 0x0, [{0xb, 0x1, 0x0, 0x0, @sint={0xffffffff, 0x3ff}}]}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) 3m20.737881976s ago: executing program 1 (id=334): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00080000001883c905005ceca9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x4e}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b15, &(0x7f00000001c0)={'ip6erspan0\x00', @remote}) ioctl$KDMKTONE(r6, 0x4b30, 0x1ff) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m19.88707921s ago: executing program 1 (id=339): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) unshare(0x24020400) socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x57) 3m18.767186951s ago: executing program 1 (id=346): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2809}], 0x1, 0x0, 0x0, 0x9c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) setresgid(0x0, 0xee01, 0x0) fanotify_init(0xf00, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x29, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x1, 0x2, 0x1, 0x8, 0xb, 0x30, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @ldst={0x3, 0x0, 0x2, 0x0, 0x0, 0x18, 0x8}, @jmp={0x5, 0x1, 0x8, 0x7, 0x1, 0x20, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, 0x0, 0x7f, 0x5b, &(0x7f00000001c0)=""/91, 0x40f00, 0x11, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x4cb, 0x395f8a78}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3, r3, r3], &(0x7f00000003c0)=[{0x1, 0x7f, 0x1, 0x6}, {0x2, 0x2, 0xa, 0xb}], 0x10, 0xd}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) 3m18.612205065s ago: executing program 32 (id=346): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2809}], 0x1, 0x0, 0x0, 0x9c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) setresgid(0x0, 0xee01, 0x0) fanotify_init(0xf00, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100, 0x8000, 0xfc, "7a58beca3900000000000000000000000200"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x29, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x1, 0x2, 0x1, 0x8, 0xb, 0x30, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @ldst={0x3, 0x0, 0x2, 0x0, 0x0, 0x18, 0x8}, @jmp={0x5, 0x1, 0x8, 0x7, 0x1, 0x20, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, 0x0, 0x7f, 0x5b, &(0x7f00000001c0)=""/91, 0x40f00, 0x11, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x4cb, 0x395f8a78}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3, r3, r3], &(0x7f00000003c0)=[{0x1, 0x7f, 0x1, 0x6}, {0x2, 0x2, 0xa, 0xb}], 0x10, 0xd}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) 9.628138809s ago: executing program 5 (id=971): mknod(&(0x7f0000000200)='./file0\x00', 0x82d5f7b0529d7dd7, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffd7b}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0x31}, @in=@broadcast, 0x4e23, 0x3, 0x4e24, 0x3, 0x8, 0x0, 0x0, 0x1d, r2, r3}, {0xfffffffffffffff7, 0x4, 0x9, 0x10, 0x0, 0x1000, 0x8, 0x81}, {0x0, 0x3, 0x3, 0x9}, 0xffffffff, 0x6e6bbd, 0x2, 0x1, 0x3}, {{@in=@multicast2, 0x4d6, 0x6c}, 0xc, @in=@multicast1, 0x3501, 0x0, 0x2, 0x3, 0x1, 0x7fffffff, 0x2}}, 0xe8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x0, 0x0) syz_open_procfs$pagemap(r7, &(0x7f0000000240)) ftruncate(r6, 0x20000000003) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.515487172s ago: executing program 2 (id=972): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x84, @remote, 0x4e24, 0x3, 'lblc\x00', 0x16, 0x2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x101c8, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 9.407371625s ago: executing program 5 (id=973): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x0, 0x3000, 0x0, 0x0, 0x0, 0x3cd}) (async, rerun: 32) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6d61783d303030303030305230bc303006000000303030303030302c00d5989a4d1e4fce0fdc02d7e7f8874befe348bd1f8710f8bb09fc9056d770aa16d5b3eca3c47ce7a7b4b977b2ce842e215293161e97e467018972fd89f4c7acbc7d11ffffffffffffffffee055807cd4979a1edcfefbd88d5d786ac7643336c020f8570db3597797ddc55f7f7a6d2b626439c47fdb26c02614c9be61fcbd69bf425eece075304088dcfb2a0830d32f0b633"]) (rerun: 32) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x12008, &(0x7f00000005c0)=ANY=[@ANYBLOB="2d407b2c7065726d69745f646972656374696f2c7375626a5f74797074481dd2de6fd6f54f9d614754863aef653d405e235c2c61707072616973652c736d61636b66736861743dbc293a232f2e232e402c008ad74b636bffe2811332939481cc43a5ea14a31b6eb62a24e35371340507181dc7a40e8657ae3d1bc13faeadf074c94d45573fc87b6d9652ff2aba50994df6aef66e033f63e081f4ba3eadb43af9c57a53cbe010b69cea51c1919c93a4f3c35f43cb62ca540e835f706a511878aac1dc60921c60216f0ae5df523517ffec7abacc5fa7ce5ebc6364970ebb5962ecee5a9fab32b22eb0ea860ae52e3f5b43f4be4d147aa4e0"]) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = fsmount(r5, 0x0, 0x82) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x10b000, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x262, '\x00', 0x0, r6, 0x3, 0x5, 0x3}, 0x50) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r10, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x3, 0x6ff, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x10, 0x8001, 0x24e}}) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r6, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000b40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x20, 0x46, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41d50db5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x1c}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x54, '\x00', r11, @netfilter, r12, 0x8, &(0x7f0000000a00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xd}, 0x10, r13, r6, 0x4, &(0x7f0000000dc0)=[r6, r6, r6, r14, r6, r6], &(0x7f0000000e00)=[{0x0, 0x2, 0x6, 0xa}, {0x1, 0x5, 0xe, 0x7}, {0x1, 0x4, 0x10, 0xb}, {0x0, 0x3, 0x2, 0x7}], 0x10, 0x9}, 0x94) (async, rerun: 64) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010003"], 0x145d80) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x8, r15, 0x21}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0xfffffffe, {0x60, 0x0, 0x0, r16, {}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff7, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x8000, 0x0, 0x11, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x7}}}}]}, 0x78}}, 0x8004) 8.890223594s ago: executing program 3 (id=974): mkdir(0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000002280)={'L-'}, 0x16, 0x3) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000000)=0x6e) openat(r0, &(0x7f0000000280)='./file0\x00', 0x676082, 0xa0) syz_emit_ethernet(0x11a, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102384, 0x18ff0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20040884, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) 8.818840632s ago: executing program 5 (id=977): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000140)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r3, &(0x7f0000000200)="67ac2960dbf834b888a8b0b37d4eacc9fe6105163ea1b370a4bbe1cd8e6ee5c07d084724e724f7c3ce2fd7a2d8bd189d82ab1aa3550b3304a8986ef6ae5e54ef8d9ea6826878f472359e3544ecc507000000000000000000000000000000f6bee8fc8f3d", 0x64, 0x841, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r6}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.460429429s ago: executing program 2 (id=978): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x67, 0x21c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r2, r2, 0x40, &(0x7f0000000300)={0xc, 0xfffffffd, 0x562}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) 7.846410725s ago: executing program 4 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffdf9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff007f303030"], 0x41) 7.234846267s ago: executing program 5 (id=980): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffddc, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x0, 0xfff1}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_bfifo={{}, {0x0, 0x2, 0xa}}]}, 0xc7}}, 0x8040) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRESDEC], 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 6.979528273s ago: executing program 4 (id=981): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000021c0)='./file0\x00', &(0x7f0000002240), &(0x7f0000002280)={'L-'}, 0x16, 0x3) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8000, &(0x7f0000000200)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x49801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d9", 0x2, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) syz_emit_ethernet(0xe2, &(0x7f00000022c0)={@broadcast, @empty, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x8, 0x32, 0x0, @empty, @empty, {[@cipso={0x86, 0xf, 0x2, [{0x6, 0x3, "e7"}, {0x1, 0x4, "f750"}, {0x0, 0x2}]}, @generic={0x86, 0x5, "ebf860"}, @rr={0x7, 0x7, 0xb4, [@rand_addr=0x64010102]}]}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e380fd3ea06d56270e45c8d3e7d708161ba81dd33c54b00", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"d404000000001b783bef820f0500df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000009b80)=""/102384, 0x18ff0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000001780)='%U', 0x2, 0x24000015, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fcntl$addseals(0xffffffffffffffff, 0x409, 0x6) 6.573756484s ago: executing program 2 (id=982): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x1) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCGPTPEER(r8, 0x5441, 0x4) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000001000)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)="802299b64eaf2359edad87d90f29aab18f74f4e7d2fa63ec4f90becfeef2a3b9452c5611a13792cf8bd7fa6942f89f1f5e92bedf45d79344ddc1e37a00", 0x3d}], 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB="1c00000000000000010000000100f0ff916c4a92028f32bba3984852fe76efe19eea566b5e19272e8ee121ade7cbf7b92bbecdd3b482e697a8de88b28445734b1547e947a34b3a1d07c334125ae1f2468f80183e5e81ee2a72c53340d9fdf746c3d9dda65c", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000c4a001c000000002000000100000001000000", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r6], 0x98, 0x20008080}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000a00)="7a04a0637b67ae8fe43bbbbcd976e9ef7b46287cf7eea1718294e35ea9370802752a210e0349cb3c6fc4e502574ffcbbd31cd5a0b833f67e1965d708e2a8708a4f3009b35834c25a4687c3267df7b3e4c4fab25a18637c8494bf2ccbbf4d56b5fba5bc8454493d0e5843944f07dfe790899107bcbf929c89e55e7bee04651d8c82d033", 0x83}, {&(0x7f0000000ac0)="79589e87b5d5d9980604482df4242a2fb7acdb2607ce7d18dae37fbd03c3f97ed18a594dbdc07e33f388f9c3bf242f29c163a3288b9519f8d1a54c2c71659de5eb92dc7aabc9ab6b99886a44", 0x4c}, {&(0x7f0000000b40)="ff886a49357cd9bf87a2d803176f52ecc10bd5d02233a33fbd6934c331b4ca74b1e75b620dfadd8bc678beb860eb60c9263a5daf3291ad5badbe45beba78c5bd9bd5a84aebc828acc6e896a4fc6a2cfc92c3122e9610525d1e4cb599432de8b4715e594971922a8819ffb9525cc72e49d33f5104f21e7b1302750f84c5c381341214bde972dcf6d34574bb17443883c0cd72082544b1", 0x96}, {&(0x7f0000000c00)="ea088ef508c02218cf6283312872ca4d1d68b32248566ce3ec8a376d378b18af16ac0076b706c9d439c8e85c56a4c77d524b309f3e965cbdff4284d68f4ac61d3738753e9c489b8cc2af4c3cc7bd19719c130440bdb57add7ff8d110f7a34e5e41aed7df7c4bce25a7d059d7dd6042fea95513c44875a53652df70c2c706e6048e8ee3dd58021c9c61e2a63eb263d424a065688559885387f8f0e931b32251a70b1235094484d6befa9371e1ac8da4230b43965b6540114076fdda279ab50b03dab086dce5d5f77ae0f2c2b8a01899a38d716efade5531e3c0f645b38ea326dc8d", 0xe1}, {&(0x7f0000000380)="7d3a19c5df0aa8c0d795b7d286ef1324293fe8e3a2f8f9a52fa859905a80b56dbc34f0023fc02f72623ff49d", 0x27}, {&(0x7f00000004c0)="40bfe35f33af040c0aed553f2769337fc1c709f08489c20089626105f00f761933883966dd09290f3b8b2f8050ac82d49c7b611646e3f957f9d9429302b0a24f981cbf32de31c2f192d99b1bf2e08cce9d011125a50bfd7c4817a8cea1db524dcdca9e4133ad51e7a7367d57b742af6768a80f0b5be9d3dc2b2ab18e4015796898475a1b6f79adf7", 0x5a}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000d80)="15677558880c32876c6f0e9d1ce9d6b1484dfb3d5b150815693610d0ac0c7a484892c50b24923b76614ba10991564d8d0ed7c45b4ae05b4a9ea0c623561b40930c830855a0cfb311ebd20d5a7aa70cfbca17beff4fb13414b7082ed5954adfe95ed08044801ff3ad61754496b79ffcb1f698d8f8c2f58d3c0ecb41cc1bf42156903ab7edfb2b2b4fd3ec199a5b2e42e0f364279e9b7428971588e363e65f90cb069421747f3436211a3415b82d762c0869f7b511ef3f91b17f3178", 0xbb}, {&(0x7f0000001080)="d700fc2024f93742d3b5b7cefa40e7c874bb929db0430368547bad0272b6ba2e035fe28337e0ae33a74aced2be93b1ac66c9d312a7f329f5d89d3e0e5a308b85f562e8d9183ad13a52d7a68e848073af75b04258b4b40d615f75d9c94430431c80adedd9fb539ab05625663c95d66f3bfdee552fd95eac2e2743bb88fbd6622f6037f047908b8818b11253c596bd3f2b8181d24ac22dea5e0c49ed6910e59a38ad80090a971e27db6b9d2819bc7f25e76ba041b710801e6b90faed7687e711f3df52ad69e95f7db258a5fdb5868b1c3d0aa60e523db8fe7259a13dbacdfc8f5cc1ad755aa265ecd35e6ee1d42bb6e10d0b503ece0acec5d5", 0xdf}], 0x9, 0x0, 0xfffffffffffffe7b, 0x800}}], 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r9 = syz_usb_connect(0x1, 0x0, 0x0, 0x0) r10 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_ep_write(r9, 0x80, 0x0, &(0x7f0000000380)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040804) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0xe0, 0x43, 0xa0, 0x0, 0x98, 0x278, 0x178, 0x178, 0x278, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x198, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@empty, [], @ipv4=@local, [], @ipv4=@multicast2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x79}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.129646571s ago: executing program 4 (id=983): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1b7b, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001200000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c823261881662b0d3d16ed35fce61aaf000000000000000000000000000000000000006a0f00"/176], 0xa0}}, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x40) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000200)={0x3000, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f00000002c0)="411eec2ca010ffddca666cb9a6a70624735f5029bc585dc34055e4aeea169558a2e220484244dd3b63973ca9c3ed622196", 0x31}, &(0x7f0000000040)={0x22000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r7 = syz_open_dev$sndpcmp(&(0x7f0000000680), 0x0, 0xa0240) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000006c0)={0x8, [0xfffff4bd, 0xe9f, 0x1000], [{0x8, 0x7, 0x1, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1, 0x1}, {0x1, 0xfffffff7, 0x0, 0x1}, {0x7, 0xffffffff}, {0xab6, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x1}, {0x9, 0x5, 0x0, 0x0, 0x1}, {0x9, 0x845, 0x0, 0x1, 0x1}, {0x9, 0x9}, {0x2, 0xa2d, 0x1, 0x0, 0x1}, {0x10001, 0x9}, {0x8, 0x2, 0x0, 0x1}], 0x5}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5.611760734s ago: executing program 3 (id=984): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0f0666b80500000066b9029800000f01d9baf80c66b824320c8c66efbafc0ced0fc7b704002e2ecc67660f3a175f89040f01c4baf80c66b834ab288566efbafc0c66b8fcffffff66ef0f20c06635100000000f22c00fc71d", 0x58}], 0x1, 0x10, &(0x7f0000000240)=[@cr0, @dstype3={0x7, 0x9}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000001023d4334dc0b8dd64e03504418c2797a90177456e88da58a0032e53fd7420120afe01f3c4790ff634c55ef9f2667000677d412e59edfdf300418f6a43568e9ea1db03bbd20d5ecdbba6e328ceb953ea1fd76ccf8c5990dfb090f65fdd3de05569bb75d77bd49768c5202cdf6cbac13b090c3e1a52cd9386cc92aca2db11d825a2ee31cb41349efeebe0ee38515859b56c38aab0e2a3a79398413b758cc63d9a357246b6f082cbb869155b0be672117b0f52bffd5249709dbe06b2c8b813be"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x60, 0x2000, 0x1e0, 0x320, 0x1, 0x1, 0x0, 0x1000000, {}, {}, {0x0, 0x42}, {0x0, 0x4}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xb6a6, 0x0, 0x4, 0x100}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002"], 0x74}}, 0x4001) 5.543629737s ago: executing program 3 (id=985): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000340), &(0x7f0000000380)={0x0, 0xfb, 0x50, 0x2, 0x7, "ff5fbf9c44d816fbd9791ed37c184498", "b5446d52317b40e482b177747f2ec570b60b9eb76739b324eb071c66c4904bebfde667a3fb9a0fdeea16617ea8c9b7f4c1b18b473371ef5cdcab2d"}, 0x50, 0x2) (async) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x8, 0x4, 0x1, {0xb, @vbi={0x1, 0x4, 0x9, 0x20323159, [0x1], [0x5, 0x6], 0x13a}}, 0x7}) io_uring_setup(0x59f3, 0x0) userfaultfd(0x80001) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x20502, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x800, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe, 0xced}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x2, 0x0, 0x9, 0xfffffffe, 0x9, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0, 0x3}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d70b20dd", @ANYRES16=r3, @ANYBLOB="000428bd7000fddbdf250900000008000600040000007000038008000500e00000020800030003000000080001000000000014000600fe8000000000000000000000000000aa060007004e23000014000600fc0000000000000000000000000000000800030001000000060007004e2100001400060020010000000000000000000000000001"], 0x8c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r5, &(0x7f00000001c0)="b4979f35a50faecccd29a3094ac1f8741763aa", 0x13, 0x41, 0x0, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000240)={0x32, @local, 0x4e21, 0x4, 'lc\x00', 0x11, 0xe, 0x8}, 0x2c) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) (async) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r2, 0x8044610a, &(0x7f0000000040)={0x0, @raw}) 5.513690929s ago: executing program 0 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6502, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$KVM_GET_TSC_KHZ_vm(r2, 0xaea3) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20000000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) fchdir(r3) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000040000100fcff070004000000010000000400cb800ced01800800108004000f800c000200000000000000000081bf278e5d88ae1ed95dea0db931f757ff72f7bfa3cb06c7f776d6e10512910c73b32b14e22ef1ba6e53264be08d33a83a1d376966b7574963afef9c1b62143ecb65586b107057f860f2563df9fc7f7e2f1f42222ec09f82c55ab4a1"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 5.275621s ago: executing program 5 (id=987): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x68, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @remote}, "8555982c00007000"}}}}}, 0x32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0xfffffffffffffff0, 0x2, 0xfffffffffffffff8, 0xff}) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000180)={0x80000001, "685d368e6537e8c24e603ed6f356d12dee69ca0228427feac64f4975df625a80", 0x0, 0xb760775ebfd23eed}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 4.556861384s ago: executing program 0 (id=988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12) 4.533275446s ago: executing program 4 (id=989): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r0, 0x80000) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES32], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2b}, 0x94) socket$kcm(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f0000000180)=""/4096, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x29, 0x0, &(0x7f00000001c0)="ba30a945e46b03d7dd459192252b6e3c518d8badd03bee300857f60c92e675acf419e99d5ca8758bdc"}) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r6, 0x8b27, &(0x7f0000000040)) 4.467669769s ago: executing program 3 (id=990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a9b2f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b5d0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669114e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb4581f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab9640071550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411254c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486229e5b2e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc24ab0f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78c8fa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000026347ee800", 0x1000}}, 0x1006) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2$9p(&(0x7f0000000100), 0x84000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) 4.127600073s ago: executing program 0 (id=991): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='+p'], 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000304"], 0x50}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0xffffffffffffffff, 0x6, 0x0, 0x4, 0x10003, 0x2000000000000, 0x400200cc4, 0x1000, 0x7d, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x8, 0x8d], 0x38000, 0x2015c0}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="b57c2e3d9122698bc7d2c74b3b79d61eea3b4d786dcc0c85a1a1670b0cd9c3034ab018d7ff312e98cb3887367898eb8eff1702a394b46b08a1d521e5b619c01a172867c0f52931115c76e86000dc4065a30cb16df40a72ecef1c5214d391d492faf9c91ff1d196ed2ea029a09ce7f46a2f1c3316e7296a0a1dee779b4fddabefbc759bbd65dc67e0a42ca6984a06a31cde3716a361025b66b54a46e2fca12c", 0x9f}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, 0x0) 3.418857615s ago: executing program 2 (id=992): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000a98d1935edc91c99e00000030"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000280), &(0x7f0000000540)=r7}, 0x20) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0x1000, 0x93, &(0x7f0000001740)="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", &(0x7f0000000280)=""/147, 0x5, 0x0, 0x800, 0x1000, &(0x7f0000002740)="35397c767f61164e96c02c02a9d8356ea88d9764d975c27c5423003523e49db88a20b4ef50ed1f2ab3418c23ae594ff65d154094d7054c9d90087013a6484afacab9133a2060e2128d03bd787370010ea00a1d96d1eeb0ffe9b6302ca932d24cee0f14c0e65044116a9b3fa19d7bd5fcd6ed17e3c645bda26af7d14139ffbc61e7f7744f5f0960ed61f29db98f475691988d118d5fe06c72df33e41f56b2af3c3cf7e5e9710d3d7614de97c816e7659a6a44f0de1502fdb32abf78ef5547e8b0d8ed5e513126fafe80bae6e549be537336dc176de4d2f13b9f4702bb82c20a271fc7ab9596874c4435532281cb676c748c19ea472e80411a56607c1c196f9d3c340012dfcee5f088b3467918ebcd58ff53c6a6ef281368291250914f2babc2ea46fcf9dcde13c8e0a18bc0cd960a3001ddce248fb1dc5f04e71a8cebd636a3e2d81a564d7ad32f005db92c34958ee814fcb7f96f999e466c317f60e605c42096194a71bb88d312d492ce64138fee72bd0f7e5ccd03eb51d7c294ffb01ba3c896f3b6b9e1fa89f5f9bf00d0dee32d6dd43a4a141a9809517ef9369a1d03d2310c08cababaa2829cfceb88fe1c835aff807d9dc270e89a7f392e2b991fd835212d98362434552ad607b4159e6b55496a18d1374c57ffd2d0d721674faf8b0484504dc8e4ec4431fd5fa9e318890c6a6b08a71d2bd082fa44b3480c0125667b481e958d078718e5b7590c36f29f59245dc81d6875a7f09945d4d3afe688510172e61874ab5e12e29f1c1af2a07690b0f4709b8f93e6ec952fa0a997f8ff6bfbc3ed6ee9a39bb61cf5d331e1c8b51318c9135e8dac2b471009c3c6043f8de7cbc31d4e782e78d0afecdd2c5e810abe3a33c823b0af4a314a4f67f7930387f72ca7fddec46dadba221604194fb8ae096b9a26ac334b91e647278601301477272e27388d4e84357a7b1cde81b7ae0e8e05e0d11725618ca9538286b21cb5a74f55a7ed8f925da9c12cabead56dcd369bae31f81aaf19ea7912cd40fe8657d86a11ab520f4586ac6160c032cabf20def7e2961cde5f5644cdb0a3dc928e036f3cbca6a7ff8d079dddc0715992dfd5170ccb16b363856b1c8a1598e119842648e641d535b67bb9a7ceeb98c68eba953046a575a9c330e19030041e3f631dad22389ad714374724296e39da65f3cb19c466d87050065831d21bf8364b33aefde224b055fe14716d7b113898bd09401c2b5b40cb16e4f467578c38d9fe2dbeadadb681257ac51c8d8d5ef92af1f2b8619a92272e84cc03531f8a1926fd1fa53b8ee4ad4d72410281c5651547843f2e64a9050f4323ef86bd1ed3c1e74d5ee29db3d3ae9bf91c89e1e95fbc271554162f4496c213b76cec5f609412046e7fd41ee8da644424aed49014736f0c8d40cf653a06d7e6e69c245f1eb5b2dfb96864dc24b128ee9ee79819f8c76aad8f6591ab86ca3b3c2444c2fdef375dfaa0842cffae4d2ef9aee987b9c147601c4df6b8ef7b91515aa66c02d2b97a9fc2ba2ddd692034cbf5c271a81c25c12e63c8227ca6ba8ca4a37f316317a724b2ed2272f5f07f40aff606dd0edf49b7d2524281264d57078279726689185e15560c6c6defc86e2cce27e38b90537a392b55f3f0cd343d5eaaf1c109590379238d9ad389ebb8cc9655159c6e6f9e0a3c7fec58dfe85a4ea7aec1ac00ee2ec9d66fd80e887fbb4c74c92d919c1dff8dcebf9e14acdfec5bee0677bfaacbd31334ae231fa8589e26713dbff27bda991983ab171dbd37822754748bf058f966775b9af50ebd55468c682d1073342159da99d291607116736b2a92fa06c44924c34b49f05fab1b39fadc7229cbb6a26cbf1ce247cf0e51629b5c7e27145d037133d415a11ad34d915a8d3da36aecf3af331a3ad18c794ebc6102cae8d322c8ecead6650bf65625ebe376334ca30c3800f567960c7f02470dfd4b5662598b492b6a5e50b36bc7a76e3499dcb72fed2030e749ae1c9a26021f0f13a277ea136c20837e586ab8119eef6dd836be29082d8372b2fef28e9ea3b01fa507a51bf49f42ba0272ca2007dccb7ffffcacd51d6d693f016f2ce24fa5aa178c40e0128604748bc6a7beccd2598da2dd13803ddc3758310d5fa016d809f3304ea0c28bf6cffa2333aaa837c3f9c567d5a2e6ccf2d9bfcb8da31e353c22fe4c9cab51fffaf23f2d9b8120ef420ec94619c58b168fa633837f735f4476db60cfbcf02996b8150201d22150c6a32c3a3c00a1a3d5e8ee17e4a3e0a2e2ea3888973273233f8e4c1265e6f9f439f156726d89f169d06c3cc0b45484f5708702abb61eb35891660a283853623790ab02f65a2c45044be1450a72ca7b9daa24b6230086f3832432c0daab860c684978902354db0965e9923092e2b2e1208d35b8587c117cb5f08c20d5a8259f2064838f23f0ce9b0d832ad4e8fa8c54b54c465534d201796e135e36cb7f950ddb9ad21813d7e5b4236ba2d97eaeb61b9baf9a0797eb4dcfd58996e0b17bbfa732290290d68986633c30fb95d936a32002881f1e486c15964ee6ba21a2953a66b2a7b4f86f7315c93ded1df9800eed3996cccf2f69b84c918436e163b96732a392079d1502d10d7ce2a570512f86acea3e0efd26548eb08b91fbcf4f66737f98ee603730c5f0c542e65860e827ab37775a654f64c19cff83f82d1990ff0cfe45e4a18cc0fc8828487e0e33d2c9451a9a3145e20e9d53d95359624e5279de876c9670f7b510b03d295d7018e2f4f5e55798e19735f1261ec3dd87b17f1b6948bdd877b2219bceb05d1fc1298d153d3e311f23ac918d6e4730f598cc553f474a40c07cf4b48acdafb9a95c348f1d152eb2a8029df22727795c9e37d8c35dfc0621d4ac4e897470210cf8dd", &(0x7f0000003740)="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", 0x2, 0x0, 0x7}, 0x50) 3.337287807s ago: executing program 3 (id=993): ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x2}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES32=r2, @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 3.19051877s ago: executing program 4 (id=994): r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) (async) syz_io_uring_setup(0x641a, 0x0, &(0x7f0000000200), 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 3.139885828s ago: executing program 3 (id=995): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00037000"/13], 0x0}, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=0xee01, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040004000000000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="bdcffbff", @ANYBLOB="10000400000000002000000000000000"], 0x5c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 2.680852509s ago: executing program 0 (id=996): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xc) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) unshare(0x2040400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r6, 0x2, &(0x7f0000001740)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x7, 0x8, r5, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x7, r5, 0x0, 0x0, 0x9, 0x0, 0x3, r5}]) pread64(r4, &(0x7f0000000180)=""/86, 0x56, 0xdf8) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x48481) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000001c0)=r7) syz_emit_ethernet(0x1f, &(0x7f0000000400)={@local, @dev, @void, {@llc_tr={0x11, {@snap={0x55, 0x1, 'F', "e167ef", 0xa00, "5a5278f80ed7ab1e90"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x400, 0x800, 0x2, 0x6, 0x6}, &(0x7f0000000100)=0x98) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x0, 0x0}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r8, 0x6, &(0x7f0000000200)=0x40) 2.622020581s ago: executing program 5 (id=997): syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) (async) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x80) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000140)=0x12) (async) close(r5) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r7 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r8 = fsmount(r7, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYBLOB, @ANYBLOB="4e00bd2db0865c29fc38d2aef8e9fd5b18216dcdcd0d7b390f4015ac7abd5d915029f032a3abf790a99e73425b9b1083b4f66d063b5419bfd69381a66f945ba732eaf09604e10a90f3f6d2b42eff040e233e7e0b75e2b53bc0783c7013fcd05e1891b52354ed96f83b01cd8c9aea3fc03598a2d38b5bb7a713177ad4eece74eef20a4139a691d2be2d16769d7fb338b3504ec867a4dc0695375b4b8ddf033f96b1f9e85f0696ce4d570a5c1045d84a067d0133548bf087c2a1d6b4cab5a6966d071bb3eec71d728c348ed4b927abce741a562844c052ec4e84d503d765", @ANYRES64=r4, @ANYRESOCT=r3, @ANYRES8=r4, @ANYRES8=r7, @ANYRESDEC=r8, @ANYRES64=r0, @ANYRES32=r1, @ANYRES32]) (async, rerun: 64) sched_setscheduler(0x0, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) r10 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000280)=0x2) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xb, 0x2f}, 0x40, 0x6}) (async, rerun: 64) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 2.396757259s ago: executing program 2 (id=998): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) mkdir(0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000002280)={'L-'}, 0x16, 0x3) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(r1, &(0x7f0000000280)='./file0\x00', 0x7e32c2, 0x24) syz_emit_ethernet(0x12a, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x20000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180009293b26be8979dee3eb00000400e4000000000000000000850000000000000095000000000000001751223d5dc099e79ea410925e334dd940980aec6a7b3291dcf34f594355ad42fa6ead18c4cf390c5ccbe7f00a592ab7f00a04ed99d9f7812fa4d729bab0f8f3b3cd6f8ffb580eabf4576274aa432379e4112e88384bf8491f2fd1a312f8fe16ebdf674dc7b5e2cbb8f1a237a6aab86f62a43d07"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r5, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000009b80)=""/102384, 0x18ff0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200408c4, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 979.530482ms ago: executing program 0 (id=999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000000000"], 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x6c, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r5 = mq_open(&(0x7f0000000300)='\xe1\xb7}=\x9ag\v|\xec\b\xb4\x160\xd8W\xadC5\x93} \x00', 0x8c2, 0x30, &(0x7f0000000080)={0x1, 0x100000001, 0x2, 0x9}) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) (async) epoll_create1(0x80000) (async) mq_timedreceive(r5, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) (async) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCSETA(r6, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x39, 0x7ff, 0x22}, 0x2c) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 304.713045ms ago: executing program 2 (id=1000): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='wlan0\x00', 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x21, 0x0, 0x10, 0x0, 0x0, 0xffffffff}) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0xfffffffffffff52b, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0xfffffffffffffa08, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x0, 0x7, 0xe, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000003540)=@pppoe, 0x80, 0xfffffffffffffffc}, 0x5}, {{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x2}, 0x9}, {{&(0x7f0000000600)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/87, 0x57}, {&(0x7f0000003140)=""/127, 0x7f}, {&(0x7f00000031c0)=""/122, 0x7a}, {&(0x7f0000003340)=""/239, 0xef}, {&(0x7f0000003440)=""/199, 0xc7}], 0x5, &(0x7f0000000d40)=""/156, 0x9c}, 0x8001}, {{&(0x7f0000000840)=@x25={0x9, @remote}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000001040)=""/174, 0xae}, {&(0x7f0000000a00)=""/58, 0x3a}, {&(0x7f0000000a80)=""/97, 0x61}, {&(0x7f0000000500)}, {&(0x7f0000000780)=""/50, 0x32}, {&(0x7f0000000b40)=""/10, 0xa}], 0x7}, 0x2}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/246, 0xf6}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000003240)=""/234, 0xea}, {&(0x7f0000002140)=""/4080, 0xff0}], 0x6, &(0x7f0000000680)=""/81, 0x51}, 0x7d}], 0x5, 0x10003, 0x0) mount(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)='cpuset\x00', 0xc2, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) request_key(0x0, &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x99) r4 = io_uring_setup(0x5ce3, &(0x7f0000000580)={0x0, 0xfffffffc, 0x200, 0x0, 0x204}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0605000000bad775aa1b71da", 0xe, 0xfffffffffffffffe) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r5], 0x68}, 0x1, 0x0, 0x0, 0x4890}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffd, @multicast2}, 0x10) 80.280719ms ago: executing program 4 (id=1001): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, 0x0, 0x2000c804) socket(0x1, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7ffffd, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000081) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x2140) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 0 (id=1002): chdir(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ftruncate(r4, 0x2007ffa) sendfile(r5, r4, 0x0, 0x7ffff000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008c1, 0x0, 0x0) kernel console output (not intermixed with test programs): t:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.138259][ T30] audit: type=1400 audit(1767421035.871:885): avc: denied { ioctl } for pid=7816 comm="syz.5.496" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.146049][ T6586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.165185][ T933] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 218.604089][ T30] audit: type=1400 audit(1767421035.871:886): avc: denied { set_context_mgr } for pid=7816 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 218.691792][ T3786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.705525][ T3786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.735175][ T3786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.750438][ T933] usb 5-1: Using ep0 maxpacket: 32 [ 218.759368][ T933] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 218.792971][ T3786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.824321][ T933] usb 5-1: config 0 has no interface number 0 [ 218.831575][ T30] audit: type=1400 audit(1767421035.891:887): avc: denied { map } for pid=7816 comm="syz.5.496" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.900964][ T933] usb 5-1: config 0 interface 151 has no altsetting 0 [ 218.909363][ T933] usb 5-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 218.923170][ T933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.933496][ T933] usb 5-1: Product: syz [ 218.937745][ T933] usb 5-1: Manufacturer: syz [ 218.942547][ T933] usb 5-1: SerialNumber: syz [ 218.947291][ T5827] Bluetooth: hci0: ACL packet for unknown connection handle 217 [ 218.958047][ T933] usb 5-1: config 0 descriptor?? [ 218.974570][ T933] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 219.766465][ T7832] : renamed from lo (while UP) [ 220.113064][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 220.113075][ T30] audit: type=1400 audit(1767421037.991:895): avc: denied { write } for pid=7840 comm="syz.2.501" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 220.166985][ T7843] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 220.179730][ T7843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.190681][ T933] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 220.256535][ T7843] bond1: (slave gretap1): making interface the new active one [ 220.267762][ T30] audit: type=1400 audit(1767421038.131:896): avc: denied { bind } for pid=7845 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.288326][ T7843] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 220.324231][ T7843] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7843 comm=syz.0.502 [ 220.357357][ T933] sq905c 5-1:0.151: probe with driver sq905c failed with error -110 [ 220.369779][ T7846] IPVS: set_ctl: invalid protocol: 98 100.1.1.2:20000 [ 220.378763][ T5875] IPVS: starting estimator thread 0... [ 220.432212][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 220.454499][ T7854] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 220.480674][ T7851] IPVS: using max 79 ests per chain, 189600 per kthread [ 220.538526][ T30] audit: type=1400 audit(1767421038.411:897): avc: denied { write } for pid=7845 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 220.567423][ T30] audit: type=1400 audit(1767421038.441:898): avc: denied { getopt } for pid=7845 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.649447][ T30] audit: type=1326 audit(1767421038.461:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.0.506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8abd8f749 code=0x0 [ 220.741410][ T7863] netlink: 1424 bytes leftover after parsing attributes in process `syz.5.508'. [ 220.876520][ T5875] usb 5-1: USB disconnect, device number 23 [ 223.486151][ T30] audit: type=1400 audit(1767421041.361:900): avc: denied { ioctl } for pid=7886 comm="syz.0.514" path="socket:[20001]" dev="sockfs" ino=20001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.563528][ T30] audit: type=1400 audit(1767421041.421:901): avc: denied { write } for pid=7886 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.740850][ T7893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.514'. [ 223.741898][ T30] audit: type=1400 audit(1767421041.621:902): avc: denied { connect } for pid=7894 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.987877][ T30] audit: type=1400 audit(1767421041.861:903): avc: denied { connect } for pid=7894 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.537349][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.522'. [ 224.650177][ T30] audit: type=1400 audit(1767421042.521:904): avc: denied { ioctl } for pid=7918 comm="syz.3.524" path="socket:[20065]" dev="sockfs" ino=20065 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.766126][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.890789][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.924507][ T5875] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 225.014026][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.144256][ T5875] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 225.197505][ T5875] usb 4-1: config 0 has no interface number 0 [ 225.204098][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.213456][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.225111][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.233051][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.242194][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.249615][ T5875] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.278024][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.280709][ T5875] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.301665][ T30] audit: type=1400 audit(1767421043.181:905): avc: denied { accept } for pid=7927 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 225.360380][ T5875] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.390456][ T5875] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 225.408851][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.422431][ T30] audit: type=1400 audit(1767421043.301:906): avc: denied { create } for pid=7933 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.448758][ T30] audit: type=1400 audit(1767421043.311:907): avc: denied { setopt } for pid=7933 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.506410][ T5875] usb 4-1: config 0 descriptor?? [ 225.536572][ T30] audit: type=1400 audit(1767421043.351:908): avc: denied { write } for pid=7933 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.652137][ T60] bridge_slave_1: left allmulticast mode [ 225.657785][ T60] bridge_slave_1: left promiscuous mode [ 225.677640][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.702967][ T60] bridge_slave_0: left allmulticast mode [ 225.718831][ T60] bridge_slave_0: left promiscuous mode [ 225.728069][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.783148][ T30] audit: type=1400 audit(1767421043.661:909): avc: denied { read write } for pid=7943 comm="syz.2.533" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.867513][ T30] audit: type=1400 audit(1767421043.661:910): avc: denied { open } for pid=7943 comm="syz.2.533" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.936373][ T30] audit: type=1400 audit(1767421043.661:911): avc: denied { ioctl } for pid=7943 comm="syz.2.533" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 226.138816][ T5875] usbhid 4-1:0.16: can't add hid device: -71 [ 226.149176][ T5875] usbhid 4-1:0.16: probe with driver usbhid failed with error -71 [ 226.162870][ T5875] usb 4-1: USB disconnect, device number 15 [ 226.231618][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.243192][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.253515][ T60] bond0 (unregistering): Released all slaves [ 226.397166][ T7930] chnl_net:caif_netlink_parms(): no params data found [ 226.497298][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.507356][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.516303][ T7930] bridge_slave_0: entered allmulticast mode [ 226.525912][ T7930] bridge_slave_0: entered promiscuous mode [ 226.549102][ T7930] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.560410][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.567606][ T7930] bridge_slave_1: entered allmulticast mode [ 226.576194][ T7930] bridge_slave_1: entered promiscuous mode [ 226.641546][ T60] hsr_slave_0: left promiscuous mode [ 226.648470][ T60] hsr_slave_1: left promiscuous mode [ 226.654707][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.662562][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.670955][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.678451][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.701504][ T60] veth1_macvtap: left promiscuous mode [ 226.707078][ T60] veth0_macvtap: left promiscuous mode [ 226.712774][ T60] veth1_vlan: left promiscuous mode [ 226.718102][ T60] veth0_vlan: left promiscuous mode [ 226.754088][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.764050][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.772311][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.779971][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.787567][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.232232][ T7980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7980 comm=syz.0.541 [ 227.265456][ T30] audit: type=1400 audit(1767421045.141:912): avc: denied { unmount } for pid=7687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 227.292445][ T5819] Bluetooth: hci1: command tx timeout [ 227.337405][ T60] team0 (unregistering): Port device team_slave_1 removed [ 227.393467][ T60] team0 (unregistering): Port device team_slave_0 removed [ 228.323603][ T30] audit: type=1400 audit(1767421046.201:913): avc: denied { create } for pid=7992 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 228.349207][ T30] audit: type=1400 audit(1767421046.221:914): avc: denied { ioctl } for pid=7992 comm="syz.2.545" path="socket:[20366]" dev="sockfs" ino=20366 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 228.479644][ T7930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.502410][ T7930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.569499][ T7930] team0: Port device team_slave_0 added [ 228.581316][ T5902] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 228.602445][ T7930] team0: Port device team_slave_1 added [ 228.665432][ T7998] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7998 comm=syz.3.546 [ 228.700230][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.715569][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.752406][ T7930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.766663][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.776277][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.808447][ T5902] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 228.817143][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.830242][ T7930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.842033][ T5902] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 228.851104][ T5902] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 228.862769][ T5902] usb 3-1: Manufacturer: syz [ 228.870420][ T5819] Bluetooth: hci3: command tx timeout [ 228.887951][ T5902] usb 3-1: config 0 descriptor?? [ 228.907505][ T7930] hsr_slave_0: entered promiscuous mode [ 228.914005][ T7930] hsr_slave_1: entered promiscuous mode [ 228.919988][ T7930] debugfs: 'hsr0' already exists in 'hsr' [ 228.925821][ T7930] Cannot create hsr debugfs directory [ 228.971789][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.982618][ T5902] rc_core: IR keymap rc-hauppauge not found [ 228.988515][ T5902] Registered IR keymap rc-empty [ 228.997834][ T5902] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 229.010909][ T5902] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 229.070592][ T5875] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 229.093003][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.184567][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.227445][ T7971] chnl_net:caif_netlink_parms(): no params data found [ 229.234682][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 229.283804][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.342484][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.350634][ T8006] rc rc0: two consecutive events of type space [ 229.351317][ T5819] Bluetooth: hci1: command tx timeout [ 229.363044][ T5875] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 229.374909][ T5875] usb 4-1: can't read configurations, error -71 [ 229.458622][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.465999][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.475363][ T7971] bridge_slave_0: entered allmulticast mode [ 229.482310][ T7971] bridge_slave_0: entered promiscuous mode [ 229.502497][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.509940][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.518011][ T7971] bridge_slave_1: entered allmulticast mode [ 229.524873][ T7971] bridge_slave_1: entered promiscuous mode [ 229.587600][ T7971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.603198][ T7971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.612447][ T5902] usb 3-1: USB disconnect, device number 18 [ 229.652634][ T7971] team0: Port device team_slave_0 added [ 229.658327][ T60] bridge_slave_1: left allmulticast mode [ 229.664561][ T60] bridge_slave_1: left promiscuous mode [ 229.670204][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.678975][ T60] bridge_slave_0: left allmulticast mode [ 229.685811][ T60] bridge_slave_0: left promiscuous mode [ 229.693757][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.912335][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.924089][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.933904][ T60] bond0 (unregistering): Released all slaves [ 229.948283][ T7971] team0: Port device team_slave_1 added [ 230.010778][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.017790][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.044550][ T7971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.076643][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.086896][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.113060][ T7971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.142706][ T8027] syzkaller0: entered promiscuous mode [ 230.153495][ T8027] syzkaller0: entered allmulticast mode [ 230.154462][ T8029] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 230.834754][ T7971] hsr_slave_0: entered promiscuous mode [ 230.841503][ T7971] hsr_slave_1: entered promiscuous mode [ 230.848024][ T7971] debugfs: 'hsr0' already exists in 'hsr' [ 230.853906][ T7971] Cannot create hsr debugfs directory [ 230.880422][ T60] hsr_slave_0: left promiscuous mode [ 230.886050][ T60] hsr_slave_1: left promiscuous mode [ 230.896445][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.905633][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.915220][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.922683][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.961663][ T5819] Bluetooth: hci3: command tx timeout [ 230.976142][ T60] veth1_macvtap: left promiscuous mode [ 230.982865][ T60] veth0_macvtap: left promiscuous mode [ 230.988552][ T60] veth1_vlan: left promiscuous mode [ 230.994014][ T60] veth0_vlan: left promiscuous mode [ 231.104037][ T5875] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 231.270353][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 231.314058][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 231.322888][ T5875] usb 4-1: config 64 has an invalid interface number: 103 but max is 0 [ 231.331912][ T5875] usb 4-1: config 64 has no interface number 0 [ 231.342003][ T5875] usb 4-1: config 64 interface 103 has no altsetting 0 [ 231.353338][ T5875] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=8d.88 [ 231.362806][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.370987][ T5875] usb 4-1: Product: syz [ 231.379544][ T5875] usb 4-1: Manufacturer: syz [ 231.394780][ T5875] usb 4-1: SerialNumber: syz [ 231.430462][ T5819] Bluetooth: hci1: command tx timeout [ 231.617648][ T5875] snd-usb-audio 4-1:64.103: probe with driver snd-usb-audio failed with error -71 [ 231.636076][ T5875] usb 4-1: USB disconnect, device number 18 [ 231.713320][ T60] team0 (unregistering): Port device team_slave_1 removed [ 231.765123][ T60] team0 (unregistering): Port device team_slave_0 removed [ 232.054215][ T7930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.090809][ T7930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.120046][ T7930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.163588][ T7930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.449820][ T7930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.468330][ T7930] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.485267][ T4799] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.492383][ T4799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.508039][ T4799] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.515175][ T4799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.608559][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.014837][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.030671][ T5819] Bluetooth: hci3: command tx timeout [ 233.118808][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.187589][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.199020][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.207725][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.217608][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.225107][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.417383][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.518647][ T5827] Bluetooth: hci1: command tx timeout [ 235.097663][ T7971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.110484][ T5827] Bluetooth: hci3: command tx timeout [ 235.119765][ T7971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.143093][ T7971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.163312][ T7971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.183393][ T7930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.211339][ T8072] chnl_net:caif_netlink_parms(): no params data found [ 235.260340][ T933] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 235.280445][ T5827] Bluetooth: hci2: command tx timeout [ 235.321752][ T60] bridge_slave_1: left allmulticast mode [ 235.327398][ T60] bridge_slave_1: left promiscuous mode [ 235.347450][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.369158][ T60] bridge_slave_0: left allmulticast mode [ 235.383450][ T60] bridge_slave_0: left promiscuous mode [ 235.390062][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.435362][ T933] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 235.447570][ T933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.469445][ T933] usb 4-1: Product: syz [ 235.475870][ T933] usb 4-1: Manufacturer: syz [ 235.486023][ T933] usb 4-1: SerialNumber: syz [ 235.602245][ T933] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.616922][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 235.616935][ T30] audit: type=1400 audit(1767421053.491:926): avc: denied { firmware_load } for pid=6320 comm="kworker/1:9" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 235.628068][ T6320] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.955420][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.966725][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.976397][ T60] bond0 (unregistering): Released all slaves [ 236.081075][ T8072] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.088370][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.099495][ T8072] bridge_slave_0: entered allmulticast mode [ 236.108029][ T8072] bridge_slave_0: entered promiscuous mode [ 236.171983][ T8072] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.185909][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.193342][ T8072] bridge_slave_1: entered allmulticast mode [ 236.203436][ T8072] bridge_slave_1: entered promiscuous mode [ 236.238297][ T8072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.258638][ T8072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.408925][ T8109] random: crng reseeded on system resumption [ 236.450524][ T30] audit: type=1400 audit(1767421054.281:927): avc: denied { write } for pid=8086 comm="syz.3.569" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.541172][ T30] audit: type=1400 audit(1767421054.281:928): avc: denied { open } for pid=8086 comm="syz.3.569" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.634372][ T8072] team0: Port device team_slave_0 added [ 236.644116][ T8072] team0: Port device team_slave_1 added [ 236.673698][ T60] hsr_slave_0: left promiscuous mode [ 236.679625][ T60] hsr_slave_1: left promiscuous mode [ 236.686354][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.694192][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.702668][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.710113][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.732417][ T60] veth1_macvtap: left promiscuous mode [ 236.737977][ T60] veth0_macvtap: left promiscuous mode [ 236.746332][ T60] veth1_vlan: left promiscuous mode [ 236.751679][ T60] veth0_vlan: left promiscuous mode [ 236.790351][ T6320] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 236.797583][ T6320] ath9k_htc: Failed to initialize the device [ 236.841078][ T6320] usb 4-1: ath9k_htc: USB layer deinitialized [ 237.110674][ T60] team0 (unregistering): Port device team_slave_1 removed [ 237.143294][ T60] team0 (unregistering): Port device team_slave_0 removed [ 237.350376][ T5827] Bluetooth: hci2: command tx timeout [ 237.375080][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.382314][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.409627][ T8072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.429876][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.437256][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.464215][ T8072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.555369][ T8072] hsr_slave_0: entered promiscuous mode [ 237.565564][ T8072] hsr_slave_1: entered promiscuous mode [ 237.573295][ T8072] debugfs: 'hsr0' already exists in 'hsr' [ 237.579099][ T8072] Cannot create hsr debugfs directory [ 237.589889][ T7930] veth0_vlan: entered promiscuous mode [ 237.631540][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.659643][ T7930] veth1_vlan: entered promiscuous mode [ 237.678789][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.716989][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.724138][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.733726][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.740834][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.810151][ T7971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.820909][ T7971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.871907][ T8121] af_packet: tpacket_rcv: packet too big, clamped from 7100 to 3696. macoff=96 [ 237.881575][ T8121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.985629][ T7930] veth0_macvtap: entered promiscuous mode [ 238.005532][ T7930] veth1_macvtap: entered promiscuous mode [ 238.092179][ T5875] usb 4-1: USB disconnect, device number 19 [ 238.176805][ T7971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.188977][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.212329][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.226301][ T1174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.236594][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.252606][ T1174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.275837][ T1174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.411103][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.418932][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.456379][ T8072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.468209][ T8072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.477570][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.485430][ T5875] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 238.493074][ T8072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.500204][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.512112][ T8072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.577723][ T7971] veth0_vlan: entered promiscuous mode [ 238.678137][ T7971] veth1_vlan: entered promiscuous mode [ 238.680638][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 238.692230][ T5875] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 238.703254][ T5875] usb 4-1: config 0 has no interface number 0 [ 238.711500][ T5875] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.715103][ T7971] veth0_macvtap: entered promiscuous mode [ 238.741069][ T5875] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 238.752836][ T5875] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.764346][ T5875] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.777699][ T5875] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 239.087472][ T7971] veth1_macvtap: entered promiscuous mode [ 239.123240][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.124124][ T8072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.152459][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.153532][ T5875] usb 4-1: config 0 descriptor?? [ 239.162359][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.182809][ T8072] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.184057][ T5875] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 239.198924][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.208760][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.225296][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.236785][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.253114][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.260304][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.273143][ T8153] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.576'. [ 239.285817][ T30] audit: type=1400 audit(1767421057.161:929): avc: denied { connect } for pid=8152 comm="syz.0.576" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 239.318646][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.325783][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.371528][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.390618][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.400921][ T5902] usb 4-1: USB disconnect, device number 20 [ 239.430958][ T5827] Bluetooth: hci2: command tx timeout [ 239.492170][ T5902] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 239.511532][ T30] audit: type=1400 audit(1767421057.391:930): avc: denied { setopt } for pid=8154 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.548647][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.603938][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.603977][ T30] audit: type=1400 audit(1767421057.441:931): avc: denied { bind } for pid=8154 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.732158][ T30] audit: type=1400 audit(1767421057.601:932): avc: denied { create } for pid=8154 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 239.919143][ T8072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.958374][ T8072] veth0_vlan: entered promiscuous mode [ 239.968090][ T8072] veth1_vlan: entered promiscuous mode [ 240.002662][ T8072] veth0_macvtap: entered promiscuous mode [ 240.010473][ T8072] veth1_macvtap: entered promiscuous mode [ 240.287133][ T30] audit: type=1400 audit(1767421058.161:933): avc: denied { mount } for pid=8173 comm="syz.3.579" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 240.328634][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.471851][ T974] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 240.614937][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.635877][ T30] audit: type=1400 audit(1767421058.511:934): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 240.677442][ T2933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.700308][ T2933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.711793][ T2933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.816676][ T2933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.825426][ T974] usb 6-1: Using ep0 maxpacket: 8 [ 240.849460][ T974] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.184491][ T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 3328, setting to 64 [ 241.218586][ T30] audit: type=1400 audit(1767421059.091:935): avc: denied { mount } for pid=8179 comm="syz.3.581" name="/" dev="ramfs" ino=23365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 241.257262][ T974] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 241.287341][ T8182] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.318870][ T974] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 241.448060][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.460424][ T974] usb 6-1: Product: syz [ 241.511164][ T5827] Bluetooth: hci2: command tx timeout [ 241.530491][ T974] usb 6-1: Manufacturer: syz [ 241.553971][ T974] usb 6-1: SerialNumber: syz [ 241.560438][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.571655][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.629080][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.636888][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.646297][ T974] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 241.715575][ T30] audit: type=1400 audit(1767421059.591:936): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 241.737482][ T974] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 241.770648][ T974] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 242.084823][ T30] audit: type=1400 audit(1767421059.941:937): avc: denied { execute } for pid=8192 comm="syz.2.564" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 242.145701][ T30] audit: type=1400 audit(1767421059.941:938): avc: denied { execute_no_trans } for pid=8192 comm="syz.2.564" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.060060][ T30] audit: type=1400 audit(1767421060.921:939): avc: denied { getopt } for pid=8187 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.341446][ T5966] usb 6-1: USB disconnect, device number 8 [ 243.400913][ T8207] Device name cannot be null; rc = [-22] [ 243.829361][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.587'. [ 243.839732][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.587'. [ 243.975451][ T8219] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 244.098721][ T30] audit: type=1400 audit(1767421061.971:940): avc: denied { firmware_load } for pid=8218 comm="syz.0.590" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 244.098781][ T8219] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 244.562399][ T30] audit: type=1400 audit(1767421062.071:941): avc: denied { getopt } for pid=8210 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.320342][ T30] audit: type=1400 audit(1767421063.191:942): avc: denied { listen } for pid=8224 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 246.155000][ T30] audit: type=1400 audit(1767421064.011:943): avc: denied { execute } for pid=8235 comm="syz.3.594" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 246.244095][ T30] audit: type=1400 audit(1767421064.071:944): avc: denied { write } for pid=8235 comm="syz.3.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.027774][ T30] audit: type=1400 audit(1767421064.071:945): avc: denied { ioctl } for pid=8235 comm="syz.3.594" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 247.081302][ T30] audit: type=1400 audit(1767421064.091:946): avc: denied { connect } for pid=8235 comm="syz.3.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 247.193452][ T30] audit: type=1400 audit(1767421065.061:947): avc: denied { create } for pid=8252 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 249.045867][ T30] audit: type=1400 audit(1767421066.591:948): avc: denied { recv } for pid=8252 comm="syz.4.598" saddr=10.128.0.169 src=30006 daddr=10.128.1.155 dest=35560 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 249.117957][ T30] audit: type=1400 audit(1767421066.851:949): avc: denied { ioctl } for pid=8252 comm="syz.4.598" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.167111][ T5825] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 249.187737][ T5825] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 249.325937][ T30] audit: type=1400 audit(1767421067.031:950): avc: denied { read write } for pid=8264 comm="syz.5.604" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 249.363490][ T30] audit: type=1400 audit(1767421067.031:951): avc: denied { open } for pid=8264 comm="syz.5.604" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 249.568557][ T8275] Device name cannot be null; rc = [-22] [ 249.663468][ T6320] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 249.800323][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 249.821675][ T6320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.838744][ T6320] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.849741][ T6320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.859718][ T6320] usb 4-1: config 0 descriptor?? [ 249.950380][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 249.957507][ T24] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 249.966685][ T24] usb 5-1: config 4 has no interface number 0 [ 249.972894][ T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.984153][ T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.997124][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 250.007771][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.021597][ T24] hub 5-1:4.128: USB hub found [ 250.072988][ T6320] usbhid 4-1:0.0: can't add hid device: -71 [ 250.079034][ T6320] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 250.089302][ T6320] usb 4-1: USB disconnect, device number 21 [ 250.272285][ T24] hub 5-1:4.128: 2 ports detected [ 250.277457][ T24] hub 5-1:4.128: Using single TT (err -22) [ 250.317962][ T8282] netlink: 144 bytes leftover after parsing attributes in process `syz.2.608'. [ 250.855525][ T30] audit: type=1400 audit(1767421068.421:952): avc: denied { create } for pid=8279 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 250.925014][ T24] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 250.937213][ T24] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 251.037890][ T6320] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 251.046981][ T24] usb 5-1: USB disconnect, device number 24 [ 251.200420][ T6320] usb 4-1: Using ep0 maxpacket: 32 [ 251.206940][ T6320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.229977][ T6320] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 251.257227][ T6320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.274319][ T6320] usb 4-1: config 0 descriptor?? [ 251.299426][ T6320] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 251.326183][ T6320] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 251.356534][ T30] audit: type=1400 audit(1767421069.231:953): avc: denied { egress } for pid=974 comm="kworker/0:2" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 251.417950][ T30] audit: type=1400 audit(1767421069.231:954): avc: denied { sendto } for pid=974 comm="kworker/0:2" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 251.552374][ T8266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.644202][ T8304] Device name cannot be null; rc = [-22] [ 251.681285][ T5966] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 251.893699][ T5825] usb 4-1: USB disconnect, device number 22 [ 251.903817][ T5825] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 251.982005][ T5966] usb 3-1: Using ep0 maxpacket: 8 [ 252.003301][ T5966] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 252.018751][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.027728][ T5966] usb 3-1: Product: syz [ 252.034831][ T8312] Device name cannot be null; rc = [-22] [ 252.060171][ T5966] usb 3-1: Manufacturer: syz [ 252.065891][ T5966] usb 3-1: SerialNumber: syz [ 252.086765][ T8311] overlay: ./file0 is not a directory [ 252.322627][ T5966] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 252.687123][ T8320] Device name cannot be null; rc = [-22] [ 253.252196][ T5876] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 253.411526][ T5876] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 253.440374][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.935701][ T30] audit: type=1400 audit(1767421071.441:955): avc: denied { audit_read } for pid=8326 comm="syz.4.619" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.963915][ T5876] usb 6-1: config 0 descriptor?? [ 254.658199][ T5825] usb 3-1: USB disconnect, device number 19 [ 256.463107][ T5876] usb 6-1: Cannot read MAC address [ 256.468340][ T5876] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 256.490686][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.496964][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.503925][ T5825] usblp0: removed [ 256.506231][ T30] audit: type=1400 audit(1767421073.021:956): avc: denied { ioctl } for pid=8314 comm="syz.5.616" path="socket:[23807]" dev="sockfs" ino=23807 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.548239][ T5876] usb 6-1: USB disconnect, device number 9 [ 256.555923][ T30] audit: type=1400 audit(1767421073.021:957): avc: denied { write } for pid=8314 comm="syz.5.616" path="socket:[23807]" dev="sockfs" ino=23807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.631446][ T30] audit: type=1400 audit(1767421074.511:958): avc: denied { connect } for pid=8339 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.651642][ T6710] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 256.666781][ T30] audit: type=1400 audit(1767421074.541:959): avc: denied { write } for pid=8339 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.845407][ T30] audit: type=1326 audit(1767421074.701:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e04d8f749 code=0x7ffc0000 [ 256.940493][ T6710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.952296][ T6710] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.060946][ T6710] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 257.075807][ T30] audit: type=1326 audit(1767421074.711:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e04d8f749 code=0x7ffc0000 [ 257.099932][ T6710] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 257.113988][ T6710] usb 4-1: config 1 interface 1 has no altsetting 0 [ 257.120916][ T30] audit: type=1326 audit(1767421074.711:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e04d8f749 code=0x7ffc0000 [ 257.146653][ T6710] usb 4-1: string descriptor 0 read error: -71 [ 257.154232][ T6710] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.166758][ T6710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.210964][ T30] audit: type=1326 audit(1767421074.711:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7e04d8f749 code=0x7ffc0000 [ 257.981979][ T30] audit: type=1326 audit(1767421074.711:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e04d8f749 code=0x7ffc0000 [ 258.023383][ T6710] usb 4-1: can't set config #1, error -71 [ 258.030129][ T6710] usb 4-1: USB disconnect, device number 23 [ 258.044989][ T30] audit: type=1326 audit(1767421074.711:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e04d8f749 code=0x7ffc0000 [ 258.639391][ T6586] Bluetooth: (null): Invalid header checksum [ 258.965668][ T6586] Bluetooth: (null): Invalid header checksum [ 258.995231][ T6586] Bluetooth: (null): Invalid header checksum [ 259.029424][ T6586] Bluetooth: (null): Invalid header checksum [ 259.072938][ T6586] Bluetooth: (null): Invalid header checksum [ 259.812839][ T8374] use of bytesused == 0 is deprecated and will be removed in the future, [ 259.821477][ T8374] use the actual size instead. [ 261.075012][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 262.216335][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 262.216350][ T30] audit: type=1400 audit(1767421080.051:1032): avc: denied { map } for pid=8395 comm="syz.5.637" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.250962][ T30] audit: type=1400 audit(1767421080.051:1033): avc: denied { execute } for pid=8395 comm="syz.5.637" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.110321][ T6003] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 263.143758][ T30] audit: type=1400 audit(1767421081.011:1034): avc: denied { bind } for pid=8400 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 263.282505][ T8407] netlink: 72 bytes leftover after parsing attributes in process `syz.3.638'. [ 264.063421][ T6003] usb 3-1: Using ep0 maxpacket: 32 [ 264.083175][ T30] audit: type=1400 audit(1767421081.861:1035): avc: denied { read } for pid=8420 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 264.086269][ T6003] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 264.136889][ T8431] FAULT_INJECTION: forcing a failure. [ 264.136889][ T8431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.160480][ T6003] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.220296][ T6003] usb 3-1: config 0 has no interface number 0 [ 264.232097][ T8431] CPU: 1 UID: 0 PID: 8431 Comm: syz.4.645 Not tainted syzkaller #0 PREEMPT(full) [ 264.232121][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.232131][ T8431] Call Trace: [ 264.232136][ T8431] [ 264.232143][ T8431] dump_stack_lvl+0x16c/0x1f0 [ 264.232169][ T8431] should_fail_ex+0x512/0x640 [ 264.232198][ T8431] _copy_from_user+0x2e/0xd0 [ 264.232223][ T8431] futex_parse_waitv+0xfc/0x5f0 [ 264.232248][ T8431] ? __pfx_futex_wake_mark+0x10/0x10 [ 264.232265][ T8431] ? __pfx_futex_parse_waitv+0x10/0x10 [ 264.232287][ T8431] ? rcu_is_watching+0x12/0xc0 [ 264.232304][ T8431] ? __kmalloc_noprof+0x35d/0x910 [ 264.232330][ T8431] ? __do_sys_futex_waitv+0x221/0x2c0 [ 264.232357][ T8431] __do_sys_futex_waitv+0x245/0x2c0 [ 264.232382][ T8431] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 264.232420][ T8431] do_syscall_64+0xcd/0xf80 [ 264.232443][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.232459][ T8431] RIP: 0033:0x7f11fbf8f749 [ 264.232473][ T8431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.232488][ T8431] RSP: 002b:00007f11fcd91038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 264.232504][ T8431] RAX: ffffffffffffffda RBX: 00007f11fc1e5fa0 RCX: 00007f11fbf8f749 [ 264.232514][ T8431] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 264.232524][ T8431] RBP: 00007f11fcd91090 R08: 0000000000000001 R09: 0000000000000000 [ 264.232533][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.232543][ T8431] R13: 00007f11fc1e6038 R14: 00007f11fc1e5fa0 R15: 00007ffc841b73e8 [ 264.232567][ T8431] [ 264.600093][ T6003] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.625631][ T30] audit: type=1400 audit(1767421082.501:1036): avc: denied { execute } for pid=8433 comm="syz.5.646" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=23937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 264.721278][ T6003] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 264.730444][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.750414][ T6003] usb 3-1: Product: syz [ 264.760320][ T6003] usb 3-1: Manufacturer: syz [ 264.780331][ T6003] usb 3-1: SerialNumber: syz [ 264.797225][ T6003] usb 3-1: config 0 descriptor?? [ 264.827782][ T6003] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 265.069455][ T6003] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 265.077795][ T6003] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 265.095497][ T8440] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=8440 comm=syz.4.648 [ 265.372207][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.410559][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.754112][ T8449] Device name cannot be null; rc = [-22] [ 266.472290][ T6003] usb 3-1: USB disconnect, device number 20 [ 267.688133][ T30] audit: type=1400 audit(1767421085.551:1037): avc: denied { connect } for pid=8453 comm="syz.5.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.008787][ T30] audit: type=1400 audit(1767421085.881:1038): avc: denied { connect } for pid=8463 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.416716][ T8469] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 269.798123][ T8488] input: syz1 as /devices/virtual/input/input14 [ 270.983444][ T30] audit: type=1400 audit(1767421088.861:1039): avc: denied { ioctl } for pid=8499 comm="syz.4.664" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 271.500383][ T6969] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 271.710305][ T6969] usb 5-1: Using ep0 maxpacket: 32 [ 271.747516][ T6969] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 271.760448][ T8506] netlink: 'syz.5.666': attribute type 10 has an invalid length. [ 271.765864][ T6969] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 271.855779][ T6969] usb 5-1: config 1 has no interface number 1 [ 271.879293][ T6969] usb 5-1: too many endpoints for config 1 interface 5 altsetting 249: 41, using maximum allowed: 30 [ 271.900434][ T8506] macvlan0: entered promiscuous mode [ 271.937025][ T8506] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 272.019061][ T6969] usb 5-1: config 1 interface 5 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 272.041211][ T6969] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 272.053581][ T6969] usb 5-1: config 1 interface 5 has no altsetting 0 [ 272.061973][ T8510] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.070924][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 272.090953][ T6969] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.100173][ T30] audit: type=1400 audit(1767421089.971:1040): avc: denied { mount } for pid=8509 comm="syz.2.668" name="/" dev="hugetlbfs" ino=24099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 273.370495][ T6969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.378848][ T6969] usb 5-1: Product: syz [ 273.383043][ T6969] usb 5-1: Manufacturer: syz [ 273.387630][ T6969] usb 5-1: SerialNumber: syz [ 273.607933][ T6969] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 273.620525][ T6969] usb 5-1: found format II with max.bitrate = 2, frame size=1024 [ 273.636879][ T6969] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 273.660321][ T6969] usb 5-1: found format II with max.bitrate = 2, frame size=1024 [ 273.691365][ T6969] usb 5-1: USB disconnect, device number 25 [ 273.720332][ T6003] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 273.790441][ T5966] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 273.940351][ T6003] usb 3-1: Using ep0 maxpacket: 32 [ 273.952628][ T6003] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 273.965295][ T6003] usb 3-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 273.995373][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.015779][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.032469][ T6003] usb 3-1: Manufacturer: syz [ 274.052466][ T6003] usb 3-1: config 0 descriptor?? [ 274.059808][ T5966] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 274.101158][ T30] audit: type=1400 audit(274.076:1041): avc: denied { append } for pid=8537 comm="syz.3.658" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.202013][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.382763][ T6003] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 274.396063][ T5966] usb 6-1: config 0 descriptor?? [ 275.534457][ T6003] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.544510][ T6003] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 275.555281][ T8549] fuse: Unknown parameter '0xffffffffffffffff' [ 275.563588][ T6003] usb 3-1: media controller created [ 275.695450][ T8551] Invalid logical block size (768) [ 275.710280][ T8551] overlayfs: overlapping lowerdir path [ 275.827562][ T6003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.830503][ T30] audit: type=1400 audit(275.656:1042): avc: denied { append } for pid=8544 comm="syz.4.677" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.888908][ T6003] az6027: usb out operation failed. (-71) [ 275.903948][ T5966] kye 0003:0458:0153.000A: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.5-1/input0 [ 275.923698][ T6003] az6027: usb out operation failed. (-71) [ 275.940779][ T6003] stb0899_attach: Driver disabled by Kconfig [ 275.946744][ T6003] az6027: no front-end attached [ 275.946744][ T6003] [ 275.987894][ T6003] az6027: usb out operation failed. (-71) [ 275.987921][ T6003] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 275.989369][ T6003] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 275.990756][ T6003] dvb-usb: schedule remote query interval to 400 msecs. [ 275.990773][ T6003] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 275.994881][ T6003] usb 3-1: USB disconnect, device number 21 [ 276.189397][ T6003] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 276.348729][ T8535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8535 comm=syz.5.674 [ 276.493688][ T30] audit: type=1400 audit(276.466:1043): avc: denied { getopt } for pid=8553 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.582278][ T30] audit: type=1400 audit(276.556:1044): avc: denied { write } for pid=8558 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 277.100306][ T5825] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 277.413614][ T8569] can0: slcan on ttyS3. [ 277.622458][ T8569] can0 (unregistered): slcan off ttyS3. [ 277.766243][ T8574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 277.772936][ T8574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 277.781422][ T8574] vhci_hcd vhci_hcd.0: Device attached [ 278.300723][ T6969] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 278.865512][ T8576] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 278.872731][ T8575] vhci_hcd: connection closed [ 278.879428][ T3938] vhci_hcd vhci_hcd.2: stop threads [ 278.910942][ T3938] vhci_hcd vhci_hcd.2: release socket [ 278.917164][ T3938] vhci_hcd vhci_hcd.2: disconnect device [ 279.037006][ T30] audit: type=1326 audit(278.926:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 279.543318][ T5929] usb 6-1: USB disconnect, device number 10 [ 279.557334][ T30] audit: type=1326 audit(278.926:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 279.603498][ T6003] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 279.622332][ T30] audit: type=1326 audit(278.926:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 279.661598][ T30] audit: type=1326 audit(278.926:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 279.685326][ T30] audit: type=1326 audit(278.926:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 279.941646][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.952631][ T30] audit: type=1400 audit(278.926:1050): avc: denied { getopt } for pid=8586 comm="syz.5.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.960342][ T6003] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 279.981622][ T30] audit: type=1326 audit(278.926:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 280.061635][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.070080][ T30] audit: type=1326 audit(278.926:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 280.074821][ T6003] usb 5-1: config 0 descriptor?? [ 280.099506][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.690'. [ 280.103200][ T6710] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 280.117844][ T30] audit: type=1326 audit(278.926:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 280.143636][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.690'. [ 280.201445][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 280.201726][ T30] audit: type=1326 audit(278.926:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 280.213852][ T8599] openvswitch: netlink: Message has 2688 unknown bytes. [ 280.479456][ T8602] serio: Serial port ttyS3 [ 281.031718][ T6710] usb 4-1: device descriptor read/64, error -71 [ 281.062254][ T6036] IPVS: starting estimator thread 0... [ 281.104474][ T8601] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 281.132658][ T30] audit: type=1326 audit(278.926:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.5.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0e18f749 code=0x7ffc0000 [ 281.158891][ T8604] IPVS: using max 37 ests per chain, 88800 per kthread [ 281.280700][ T6710] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 281.333674][ T6003] holtek 0003:1241:5015.000B: item fetching failed at offset 3/5 [ 281.341973][ T6003] holtek 0003:1241:5015.000B: parse failed [ 281.347816][ T6003] holtek 0003:1241:5015.000B: probe with driver holtek failed with error -22 [ 281.410604][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 281.421575][ T8611] fuse: Unknown parameter '0xffffffffffffffff' [ 281.438176][ T6710] usb 4-1: device descriptor read/64, error -71 [ 281.467927][ T8613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 281.553280][ T6710] usb usb4-port1: attempt power cycle [ 281.800208][ T8616] fuse: Unknown parameter '0xffffffffffffffff' [ 281.862720][ T8618] overlayfs: overlapping lowerdir path [ 281.900815][ T6710] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 281.963355][ T6710] usb 4-1: device descriptor read/8, error -71 [ 282.200371][ T6710] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 282.226889][ T6710] usb 4-1: device descriptor read/8, error -71 [ 282.340880][ T6710] usb usb4-port1: unable to enumerate USB device [ 283.174148][ T6036] usb 5-1: USB disconnect, device number 26 [ 283.500474][ T6969] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 284.725997][ T5827] Bluetooth: hci2: link tx timeout [ 284.731727][ T5827] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.880574][ T6036] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 285.040399][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 285.040415][ T30] audit: type=1400 audit(284.976:1079): avc: denied { getopt } for pid=8656 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 285.300303][ T6036] usb 5-1: Using ep0 maxpacket: 8 [ 285.335888][ T30] audit: type=1400 audit(285.266:1080): avc: denied { watch } for pid=8656 comm="syz.2.708" path="anon_inode:[signalfd]" dev="anon_inodefs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 285.398820][ T6036] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 285.418330][ T6036] usb 5-1: config 0 has no interface number 0 [ 285.438018][ T6036] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.477534][ T30] audit: type=1400 audit(285.276:1081): avc: denied { setopt } for pid=8661 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 285.541783][ T6036] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 285.545914][ T30] audit: type=1400 audit(285.276:1082): avc: denied { connect } for pid=8661 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 285.593021][ T30] audit: type=1400 audit(285.276:1083): avc: denied { getopt } for pid=8661 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 285.612150][ T30] audit: type=1400 audit(285.336:1084): avc: denied { listen } for pid=8663 comm="syz.2.710" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.638510][ T6036] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.669484][ T6036] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 285.690178][ T6036] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 285.704454][ T6036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.721936][ T6036] usb 5-1: config 0 descriptor?? [ 285.824298][ T8673] netlink: 188 bytes leftover after parsing attributes in process `syz.3.713'. [ 285.993227][ T6036] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 286.133321][ T8678] 8021q: VLANs not supported on lo [ 286.300151][ T6003] usb 5-1: USB disconnect, device number 27 [ 286.343648][ T6003] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 286.396354][ T30] audit: type=1400 audit(286.366:1085): avc: denied { setopt } for pid=8679 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 287.182635][ T30] audit: type=1400 audit(286.386:1086): avc: denied { create } for pid=8679 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 287.190296][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 287.444686][ T6586] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.516595][ T30] audit: type=1400 audit(287.476:1087): avc: denied { create } for pid=8676 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 287.883306][ T6586] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.046624][ T6586] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.062676][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.090332][ T30] audit: type=1400 audit(288.046:1088): avc: denied { create } for pid=8676 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 288.127935][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.135982][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.144132][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.152208][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.296523][ T6586] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.004587][ T6586] bridge_slave_1: left allmulticast mode [ 289.020363][ T6586] bridge_slave_1: left promiscuous mode [ 289.031132][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.307010][ T6586] bridge_slave_0: left allmulticast mode [ 289.323009][ T6586] bridge_slave_0: left promiscuous mode [ 289.349488][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.419593][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 289.769213][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.779245][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.791656][ T6586] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 289.802541][ T6586] bond0 (unregistering): Released all slaves [ 289.830082][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 289.910781][ T5966] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 290.037921][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.045612][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.052768][ T8693] bridge_slave_0: entered allmulticast mode [ 290.062083][ T8693] bridge_slave_0: entered promiscuous mode [ 290.073864][ T5966] usb 5-1: unable to get BOS descriptor or descriptor too short [ 290.082769][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.083504][ T5966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.091229][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.103893][ T5966] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 290.105988][ T8693] bridge_slave_1: entered allmulticast mode [ 290.120861][ T5966] usb 5-1: config 1 interface 0 has no altsetting 1 [ 290.126750][ T8693] bridge_slave_1: entered promiscuous mode [ 290.154566][ T5966] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 290.163784][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.171793][ T6586] hsr_slave_0: left promiscuous mode [ 290.171809][ T5966] usb 5-1: Product: syz [ 290.181344][ T6586] hsr_slave_1: left promiscuous mode [ 290.181390][ T5966] usb 5-1: Manufacturer: syz [ 290.187142][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.191244][ T5966] usb 5-1: SerialNumber: syz [ 290.204818][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.207547][ T5966] smsusb:smsusb_probe: board id=8, interface number 0 [ 290.219234][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.227045][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.235287][ T5819] Bluetooth: hci3: command tx timeout [ 290.252452][ T6586] veth1_macvtap: left promiscuous mode [ 290.257993][ T6586] veth0_macvtap: left promiscuous mode [ 290.263656][ T6586] veth1_vlan: left promiscuous mode [ 290.269494][ T6586] veth0_vlan: left promiscuous mode [ 292.006850][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 292.138873][ T6586] team0 (unregistering): Port device team_slave_0 removed [ 292.312621][ T5819] Bluetooth: hci3: command tx timeout [ 292.607293][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 292.607303][ T30] audit: type=1400 audit(292.576:1090): avc: denied { create } for pid=8738 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 292.912271][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.935947][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.990683][ T8693] team0: Port device team_slave_0 added [ 293.025361][ T8693] team0: Port device team_slave_1 added [ 293.081212][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.091862][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.118344][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.170642][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.189319][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.266731][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.305007][ T30] audit: type=1400 audit(293.276:1091): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 293.325405][ T30] audit: type=1400 audit(293.276:1092): avc: denied { ioctl } for pid=8747 comm="syz.4.732" path="socket:[25766]" dev="sockfs" ino=25766 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 293.544146][ T8693] hsr_slave_0: entered promiscuous mode [ 293.551350][ T8693] hsr_slave_1: entered promiscuous mode [ 293.557461][ T8693] debugfs: 'hsr0' already exists in 'hsr' [ 293.567412][ T8693] Cannot create hsr debugfs directory [ 293.572466][ T30] audit: type=1400 audit(293.536:1093): avc: denied { ioctl } for pid=8754 comm="syz.2.735" path="socket:[26810]" dev="sockfs" ino=26810 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 293.626172][ T30] audit: type=1400 audit(293.536:1094): avc: denied { write } for pid=8754 comm="syz.2.735" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 293.680015][ T6003] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 293.852403][ T6003] usb 4-1: Using ep0 maxpacket: 8 [ 294.272854][ T6003] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 294.282419][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.300190][ T6003] usb 4-1: Product: syz [ 294.308893][ T6003] usb 4-1: Manufacturer: syz [ 294.319082][ T6003] usb 4-1: SerialNumber: syz [ 294.447212][ T5819] Bluetooth: hci3: command tx timeout [ 294.476228][ T6003] usb 4-1: config 0 descriptor?? [ 294.484870][ T6003] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 294.698960][ T30] audit: type=1400 audit(294.666:1095): avc: denied { append } for pid=8763 comm="syz.2.737" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 294.957341][ T30] audit: type=1400 audit(294.926:1096): avc: denied { setopt } for pid=8768 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.368876][ T5966] smsusb:smsusb_probe: usb_set_interface failed, rc -110 [ 295.384386][ T5966] smsusb 5-1:1.0: probe with driver smsusb failed with error -110 [ 295.433166][ T8693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.478813][ T8693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 295.504602][ T8693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.534625][ T8693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.649580][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.651181][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.745386][ T8693] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.745760][ T8753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.733'. [ 295.752656][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.779793][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.786852][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.798991][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.806043][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.822997][ T6710] usb 4-1: USB disconnect, device number 28 [ 295.895637][ T8790] 9p: Bad value for 'rfdno' [ 296.046713][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.449690][ T8693] veth0_vlan: entered promiscuous mode [ 296.485273][ T5819] Bluetooth: hci3: command tx timeout [ 296.647907][ T8693] veth1_vlan: entered promiscuous mode [ 296.700386][ T8693] veth0_macvtap: entered promiscuous mode [ 296.739156][ T30] audit: type=1400 audit(296.676:1097): avc: denied { mount } for pid=8806 comm="syz.3.745" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 296.742147][ T8693] veth1_macvtap: entered promiscuous mode [ 297.525744][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.568446][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.612922][ T7295] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.650325][ T7295] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.685222][ T7295] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.756210][ T7295] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.966429][ T7295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.997576][ T7295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.067891][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.192792][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.499094][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.572184][ T30] audit: type=1400 audit(298.546:1098): avc: denied { remount } for pid=8829 comm="syz.5.716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 298.572294][ T8830] tmpfs: Cannot change global quota limit on remount [ 298.603539][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.138138][ T8857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.729066][ T8857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.428248][ T6710] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 302.935389][ T6710] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 302.958002][ T6710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.973829][ T6710] usb 3-1: config 0 descriptor?? [ 304.956428][ T6710] usb 3-1: Cannot read MAC address [ 304.979737][ T8875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47906 sclass=netlink_route_socket pid=8875 comm=syz.4.762 [ 305.092103][ T6710] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 305.106922][ T6710] usb 3-1: USB disconnect, device number 22 [ 305.738166][ T30] audit: type=1400 audit(305.706:1099): avc: denied { read } for pid=8886 comm="syz.3.765" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 305.833327][ T8888] netlink: 'syz.4.764': attribute type 21 has an invalid length. [ 305.841150][ T8888] netlink: 128 bytes leftover after parsing attributes in process `syz.4.764'. [ 305.850578][ T8888] netlink: 'syz.4.764': attribute type 4 has an invalid length. [ 305.858242][ T8888] netlink: 'syz.4.764': attribute type 5 has an invalid length. [ 305.865912][ T8888] netlink: 3 bytes leftover after parsing attributes in process `syz.4.764'. [ 306.216319][ T30] audit: type=1400 audit(305.706:1100): avc: denied { open } for pid=8886 comm="syz.3.765" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 306.240088][ T30] audit: type=1400 audit(305.706:1101): avc: denied { append } for pid=8886 comm="syz.3.765" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 306.352457][ T8891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8891 comm=syz.3.765 [ 306.845619][ T30] audit: type=1400 audit(306.816:1102): avc: denied { watch } for pid=8906 comm="syz.3.771" path="/170" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 306.868127][ T8907] netlink: 'syz.0.772': attribute type 17 has an invalid length. [ 306.876059][ T30] audit: type=1400 audit(306.816:1103): avc: denied { watch_reads } for pid=8906 comm="syz.3.771" path="/170/file0" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 306.876093][ T8907] netlink: 5 bytes leftover after parsing attributes in process `syz.0.772'. [ 306.907213][ T8907] macvtap0: entered allmulticast mode [ 306.907493][ T8908] openvswitch: netlink: IP tunnel dst address not specified [ 306.920478][ T8907] veth0_macvtap: entered allmulticast mode [ 306.927795][ T8907] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 307.135850][ T30] audit: type=1400 audit(307.106:1104): avc: denied { read } for pid=5954 comm="kworker/1:6" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=27265 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 307.217367][ T30] audit: type=1400 audit(307.186:1105): avc: denied { bind } for pid=8912 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 307.499450][ T8931] 9p: Bad value for 'rfdno' [ 307.610309][ T6003] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 307.854283][ T30] audit: type=1400 audit(307.786:1106): avc: denied { bind } for pid=8932 comm="syz.4.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 307.979755][ T30] audit: type=1400 audit(307.886:1107): avc: denied { write } for pid=8932 comm="syz.4.779" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 308.068726][ T6003] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 308.081793][ T6003] usb 3-1: config 0 interface 0 has no altsetting 0 [ 308.102584][ T6003] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 308.111778][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 308.120016][ T6003] usb 3-1: Product: syz [ 308.128643][ T6003] usb 3-1: Manufacturer: syz [ 308.203603][ T6003] usb 3-1: SerialNumber: syz [ 308.252548][ T6003] usb 3-1: config 0 descriptor?? [ 308.288619][ T6003] usb 3-1: selecting invalid altsetting 0 [ 308.882414][ T8947] netlink: 'syz.5.783': attribute type 4 has an invalid length. [ 308.927948][ T8947] netlink: 'syz.5.783': attribute type 4 has an invalid length. [ 309.815145][ T8953] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 309.923477][ T30] audit: type=1400 audit(309.716:1108): avc: denied { bind } for pid=8948 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.032753][ T8953] team0: Port device dummy0 added [ 310.163750][ T974] usb 3-1: USB disconnect, device number 23 [ 310.266263][ T8969] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 310.317805][ T8971] 9p: Bad value for 'rfdno' [ 310.494786][ T6710] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 311.001591][ T6710] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 311.009952][ T6710] usb 6-1: config 0 has no interface number 0 [ 311.020654][ T6710] usb 6-1: config 0 interface 41 has no altsetting 0 [ 311.032588][ T6710] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 311.042426][ T6710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.051264][ T6710] usb 6-1: Product: syz [ 311.055686][ T6710] usb 6-1: Manufacturer: syz [ 311.060464][ T6710] usb 6-1: SerialNumber: syz [ 311.066976][ T6710] usb 6-1: config 0 descriptor?? [ 311.069247][ T8985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8985 comm=syz.0.794 [ 311.360057][ T6710] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 311.391771][ T8991] loop4: detected capacity change from 0 to 2560 [ 311.409891][ T6710] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 311.435542][ T6710] usb 6-1: USB disconnect, device number 11 [ 311.447466][ T8991] buffer_io_error: 3375 callbacks suppressed [ 311.447483][ T8991] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 311.467464][ T8991] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 311.477340][ T8991] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 311.487875][ T8991] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 311.597284][ T8991] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 311.678916][ T8991] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 311.842584][ T8991] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 312.027432][ T8991] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 312.098264][ T8991] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 312.173236][ T8991] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 312.215286][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 312.215306][ T30] audit: type=1400 audit(312.186:1114): avc: denied { setopt } for pid=9005 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.583776][ T9010] 9p: Bad value for 'rfdno' [ 313.071375][ T9016] netlink: 128 bytes leftover after parsing attributes in process `syz.0.803'. [ 313.293836][ T30] audit: type=1400 audit(312.856:1115): avc: denied { getopt } for pid=9011 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 313.338410][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.347163][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.405424][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 313.446252][ T6018] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 313.573744][ T974] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 313.720361][ T6018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.775651][ T6018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.805763][ T6018] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.828875][ T6018] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.839257][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.849042][ T6018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.859650][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.876601][ T6018] usb 3-1: config 0 descriptor?? [ 313.878290][ T974] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 313.913147][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.923083][ T974] usb 6-1: config 0 descriptor?? [ 313.948788][ T30] audit: type=1326 audit(313.916:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3bd8f749 code=0x7ffc0000 [ 314.000368][ T30] audit: type=1326 audit(313.916:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3bd8f749 code=0x7ffc0000 [ 314.035077][ T9031] audit: audit_backlog=65 > audit_backlog_limit=64 [ 314.042101][ T9031] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 314.050073][ T9031] audit: backlog limit exceeded [ 314.050369][ T30] audit: type=1326 audit(313.916:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3bd8f749 code=0x7ffc0000 [ 314.090299][ T30] audit: type=1326 audit(313.916:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3bd8f749 code=0x7ffc0000 [ 314.142070][ T30] audit: type=1326 audit(313.916:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.3.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f2d3bd8f749 code=0x7ffc0000 [ 314.176127][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 314.185434][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 314.206702][ T2933] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.215769][ T2933] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.243201][ T2933] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.272499][ T2933] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.341871][ T6018] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 314.373829][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.384138][ T974] cp2112 0003:10C4:EA90.000D: item fetching failed at offset 5/7 [ 314.393213][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.409117][ T974] cp2112 0003:10C4:EA90.000D: parse failed [ 314.448503][ T974] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -22 [ 314.575236][ T6018] usb 6-1: USB disconnect, device number 12 [ 315.860289][ T974] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 315.898822][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 316.041041][ T974] usb 3-1: device descriptor read/64, error -32 [ 316.300291][ T974] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 316.430301][ T974] usb 3-1: device descriptor read/64, error -32 [ 316.634439][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.642639][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.715948][ T974] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 316.760976][ T974] usb 3-1: device descriptor read/8, error -32 [ 318.041457][ T5966] usb 3-1: USB disconnect, device number 24 [ 318.740124][ T5966] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 318.910289][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 318.956651][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.974685][ T9113] fuse: Bad value for 'group_id' [ 318.979642][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.991074][ T9113] fuse: Bad value for 'group_id' [ 319.006460][ T5966] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 319.065464][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.075670][ T5966] usb 4-1: config 0 descriptor?? [ 319.193847][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 319.193862][ T30] audit: type=1400 audit(319.166:1264): avc: denied { create } for pid=9118 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 319.312406][ T9120] sctp: [Deprecated]: syz.5.834 (pid 9120) Use of int in max_burst socket option deprecated. [ 319.312406][ T9120] Use struct sctp_assoc_value instead [ 319.456197][ T30] audit: type=1400 audit(319.276:1265): avc: denied { sys_admin } for pid=9118 comm="syz.5.834" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 319.477136][ T30] audit: type=1400 audit(319.316:1266): avc: denied { accept } for pid=9125 comm="syz.4.836" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.506661][ T5966] ft260 0003:0403:6030.000E: unknown main item tag 0x7 [ 320.005033][ T5966] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 320.129179][ T30] audit: type=1400 audit(320.096:1267): avc: denied { listen } for pid=9136 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.418217][ T9144] [U]  [ 320.425008][ T9144] [U] K{ [ 320.549146][ T9144] [U] T 1ŠFFˊ`GJǘGO/MC [ 320.578699][ T9144] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 320.606859][ T5889] usb 4-1: USB disconnect, device number 29 [ 320.626912][ T9144] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 320.708914][ T9144] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 320.743127][ T9148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.795465][ T9144] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 320.909723][ T9148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.375679][ T9144] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 321.400625][ T9144] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 321.977325][ T30] audit: type=1400 audit(321.946:1268): avc: denied { listen } for pid=9153 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.997038][ T9154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9154 comm=syz.0.842 [ 322.035715][ T9154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9154 comm=syz.0.842 [ 322.073045][ T30] audit: type=1400 audit(322.046:1269): avc: denied { accept } for pid=9153 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.110674][ T9144] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< HID v0.00 Device [syz0] on syz1 [ 335.062680][ T9306] veth1_macvtap: left promiscuous mode [ 335.068221][ T9306] macsec0: entered promiscuous mode [ 335.231961][ T9306] veth1_macvtap: entered promiscuous mode [ 335.239955][ T9306] macsec0: left promiscuous mode [ 335.251946][ T9305] veth1_macvtap: left promiscuous mode [ 335.257397][ T9305] macsec0: entered promiscuous mode [ 335.340402][ T9304] veth1_macvtap: entered promiscuous mode [ 335.346242][ T9304] macsec0: left promiscuous mode [ 335.735631][ T30] audit: type=1400 audit(335.706:1321): avc: denied { mount } for pid=9308 comm="syz.4.884" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 335.874054][ T9315] netlink: 96 bytes leftover after parsing attributes in process `syz.2.878'. [ 336.744582][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 337.541670][ T30] audit: type=1400 audit(337.516:1322): avc: denied { unmount } for pid=7930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 337.900101][ T9347] atomic_op ffff88802aced198 conn xmit_atomic 0000000000000000 [ 338.111476][ T9349] Bluetooth: MGMT ver 1.23 [ 339.110980][ T30] audit: type=1400 audit(339.086:1323): avc: denied { write } for pid=9355 comm="syz.2.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 339.477492][ T30] audit: type=1400 audit(339.446:1324): avc: denied { lock } for pid=9341 comm="syz.3.891" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 339.695112][ T9358] veth1_macvtap: left promiscuous mode [ 339.700670][ T9358] macsec0: entered promiscuous mode [ 339.709516][ T9358] veth1_macvtap: entered promiscuous mode [ 339.715345][ T9358] macsec0: left promiscuous mode [ 339.723435][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'. [ 339.840003][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.898'. [ 340.042284][ T9375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.086724][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 340.107816][ T9375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.634542][ T9391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=9391 comm=syz.4.902 [ 342.848954][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 343.088749][ T30] audit: type=1400 audit(342.946:1325): avc: denied { open } for pid=9395 comm="syz.2.904" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 343.166040][ T30] audit: type=1400 audit(342.956:1326): avc: denied { ioctl } for pid=9395 comm="syz.2.904" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 344.793677][ T9414] misc userio: Invalid payload size [ 344.808355][ T9414] misc userio: No port type given on /dev/userio [ 344.894309][ T9417] misc userio: The device must be registered before sending interrupts [ 345.815708][ T9429] overlay: Unknown parameter 'euid' [ 345.859522][ T9431] netlink: 'syz.5.916': attribute type 61 has an invalid length. [ 346.303612][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 346.787059][ T9440] syz.3.917 (9440) used greatest stack depth: 18952 bytes left [ 347.389788][ T30] audit: type=1400 audit(347.356:1327): avc: denied { shutdown } for pid=9445 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.429468][ T9446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.448878][ T30] audit: type=1400 audit(347.396:1328): avc: denied { read write } for pid=9445 comm="syz.3.918" dev="sockfs" ino=29288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.516753][ T30] audit: type=1400 audit(347.416:1329): avc: denied { bind } for pid=9445 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.932757][ T9464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.246601][ T9466] netlink: 'syz.5.922': attribute type 4 has an invalid length. [ 348.254454][ T9466] netlink: 17 bytes leftover after parsing attributes in process `syz.5.922'. [ 349.428061][ T30] audit: type=1400 audit(349.396:1330): avc: denied { name_bind } for pid=9468 comm="syz.0.923" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 349.459120][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 349.680868][ T9478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 350.309613][ T9492] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 351.430262][ T30] audit: type=1400 audit(351.296:1331): avc: denied { mounton } for pid=9505 comm="syz.5.936" path="/syzcgroup/unified/syz5" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 351.564082][ T5819] Bluetooth: hci3: link tx timeout [ 351.570047][ T5819] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 351.850343][ T30] audit: type=1400 audit(351.576:1332): avc: denied { shutdown } for pid=9505 comm="syz.5.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 352.015276][ T9519] 9pnet_fd: Insufficient options for proto=fd [ 352.355700][ T9525] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 352.368464][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 352.493480][ T9525] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 352.540246][ T9528] netlink: 264 bytes leftover after parsing attributes in process `syz.2.943'. [ 352.549690][ T30] audit: type=1400 audit(352.506:1333): avc: denied { accept } for pid=9527 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 353.750431][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 354.048725][ T9555] mmap: syz.4.950 (9555): VmData 37597184 exceed data ulimit 4096. Update limits or use boot option ignore_rlimit_data. [ 354.111150][ T6710] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 354.641269][ T6710] usb 3-1: device descriptor read/64, error -71 [ 355.188097][ T9575] hfsplus: unable to find HFS+ superblock [ 355.552330][ T6710] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 355.710286][ T6710] usb 3-1: device descriptor read/64, error -71 [ 355.844857][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 356.220831][ T6710] usb usb3-port1: attempt power cycle [ 356.540369][ T6018] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 357.627113][ T9606] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 357.690282][ T6018] usb 4-1: Using ep0 maxpacket: 16 [ 357.701770][ T6018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.720656][ T5929] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 357.728219][ T6018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.738290][ T6018] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 357.748525][ T6018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.760191][ T6018] usb 4-1: config 0 descriptor?? [ 357.769098][ T30] audit: type=1400 audit(357.736:1334): avc: denied { connect } for pid=9609 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 358.073963][ T5929] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.085564][ T5929] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 358.096213][ T5929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.105521][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.120161][ T9600] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 358.122733][ T9613] sp0: Synchronizing with TNC [ 358.141269][ T30] audit: type=1400 audit(358.116:1335): avc: denied { recv } for pid=9611 comm="syz.4.965" saddr=10.128.0.169 src=43884 daddr=10.128.1.155 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 358.186046][ T5929] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.398692][ T9600] FAULT_INJECTION: forcing a failure. [ 358.398692][ T9600] name failslab, interval 1, probability 0, space 0, times 0 [ 358.411740][ T9600] CPU: 0 UID: 0 PID: 9600 Comm: syz.5.960 Not tainted syzkaller #0 PREEMPT(full) [ 358.411762][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.411772][ T9600] Call Trace: [ 358.411777][ T9600] [ 358.411783][ T9600] dump_stack_lvl+0x16c/0x1f0 [ 358.411807][ T9600] should_fail_ex+0x512/0x640 [ 358.411826][ T9600] ? fs_reclaim_acquire+0xae/0x150 [ 358.411841][ T9600] should_failslab+0xc2/0x120 [ 358.411861][ T9600] __kmalloc_noprof+0xeb/0x910 [ 358.411886][ T9600] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.411917][ T9600] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.411935][ T9600] tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.411950][ T9600] ? tomoyo_profile+0x47/0x60 [ 358.411967][ T9600] tomoyo_path_number_perm+0x245/0x580 [ 358.411978][ T9600] ? tomoyo_path_number_perm+0x237/0x580 [ 358.411990][ T9600] ? rcu_watching_snap_stopped_since+0x74/0x110 [ 358.412008][ T9600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 358.412050][ T9600] ? find_held_lock+0x2b/0x80 [ 358.412072][ T9600] ? hook_file_ioctl_common+0x144/0x410 [ 358.412092][ T9600] ? __fget_files+0x20e/0x3c0 [ 358.412110][ T9600] security_file_ioctl+0x9b/0x240 [ 358.412124][ T9600] __x64_sys_ioctl+0xb7/0x210 [ 358.412139][ T9600] do_syscall_64+0xcd/0xf80 [ 358.412160][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.412176][ T9600] RIP: 0033:0x7f83b898f749 [ 358.412188][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.412202][ T9600] RSP: 002b:00007f83b9761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.412217][ T9600] RAX: ffffffffffffffda RBX: 00007f83b8be6180 RCX: 00007f83b898f749 [ 358.412225][ T9600] RDX: 0000200000000140 RSI: 0000000000005404 RDI: 0000000000000005 [ 358.412231][ T9600] RBP: 00007f83b9761090 R08: 0000000000000000 R09: 0000000000000000 [ 358.412237][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.412243][ T9600] R13: 00007f83b8be6218 R14: 00007f83b8be6180 R15: 00007fff10bc03a8 [ 358.412256][ T9600] [ 358.619916][ T9600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 359.122758][ T6018] usbhid 4-1:0.0: can't add hid device: -71 [ 359.130496][ T6018] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 359.143481][ T6018] usb 4-1: USB disconnect, device number 31 [ 359.210648][ T9618] gretap1: entered allmulticast mode [ 359.394471][ T9631] futex_wake_op: syz.4.970 tries to shift op by -1; fix this program [ 359.405325][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.413800][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.951038][ T5929] usb 6-1: USB disconnect, device number 14 [ 360.032617][ T9638] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 360.195309][ T30] audit: type=1400 audit(360.166:1336): avc: denied { mounton } for pid=9645 comm="syz.5.973" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.195335][ T9647] binder: Bad value for 'max' [ 360.225892][ T9647] binder: Bad value for 'max' [ 360.232112][ T9647] binder: Bad value for 'max' [ 360.238298][ T9647] binder: Bad value for 'max' [ 360.244433][ T9647] binder: Bad value for 'max' [ 360.642640][ T9647] binder: Bad value for 'max' [ 361.034245][ T9663] netlink: 96 bytes leftover after parsing attributes in process `syz.4.976'. [ 362.269866][ T9672] ./file0: Can't lookup blockdev [ 362.619507][ T9674] netlink: 72 bytes leftover after parsing attributes in process `syz.5.980'. [ 362.930485][ T6018] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 363.238506][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 4 [ 363.259039][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 13368, setting to 1023 [ 363.281430][ T6018] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 363.300536][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.309145][ T9680] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 363.354795][ T6018] usb 6-1: config 0 descriptor?? [ 363.645812][ T6018] ath6kl: Failed to submit usb control message: -71 [ 363.654534][ T6018] ath6kl: unable to send the bmi data to the device: -71 [ 363.676039][ T6018] ath6kl: Unable to send get target info: -71 [ 363.739353][ T9685] Device name cannot be null; rc = [-22] [ 363.827812][ T6018] ath6kl: Failed to init ath6kl core: -71 [ 363.848272][ T6018] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 363.886888][ T6018] usb 6-1: USB disconnect, device number 15 [ 363.980554][ T30] audit: type=1400 audit(363.946:1337): avc: denied { write } for pid=9686 comm="syz.3.984" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 364.082110][ T30] audit: type=1400 audit(364.046:1338): avc: denied { setattr } for pid=9688 comm="syz.3.985" name="RAWv6" dev="sockfs" ino=31029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.524503][ T9699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 364.533410][ T9699] openvswitch: netlink: Flow key attr not present in new flow. [ 365.118054][ T30] audit: type=1400 audit(365.086:1339): avc: denied { write } for pid=9702 comm="syz.4.989" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.588103][ T30] audit: type=1400 audit(365.266:1340): avc: denied { ioctl } for pid=9702 comm="syz.4.989" path="socket:[31057]" dev="sockfs" ino=31057 ioctlcmd=0x8b27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 366.181499][ T30] audit: type=1400 audit(366.136:1341): avc: denied { bind } for pid=9709 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.320862][ T5889] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 368.053281][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 368.120105][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 368.252705][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.391735][ T5889] usb 4-1: config 0 descriptor?? [ 474.590184][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 474.597155][ C1] rcu: 0-...!: (1 GPs behind) idle=72a4/1/0x4000000000000000 softirq=43996/43997 fqs=0 [ 474.607646][ C1] rcu: (detected by 1, t=10505 jiffies, g=33969, q=280 ncpus=2) [ 474.615349][ C1] Sending NMI from CPU 1 to CPUs 0: [ 474.615373][ C0] NMI backtrace for cpu 0 [ 474.615383][ C0] CPU: 0 UID: 0 PID: 5811 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 474.615397][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.615404][ C0] RIP: 0010:check_preemption_disabled+0x24/0xe0 [ 474.615426][ C0] Code: 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d d5 91 3a 08 65 8b 05 ca 91 3a 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b <5d> 41 5c c3 cc cc cc cc 9c 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 [ 474.615437][ C0] RSP: 0018:ffffc90000007e10 EFLAGS: 00000082 [ 474.615448][ C0] RAX: 0000000000000000 RBX: ffff8880b8428540 RCX: ffffffff81aacc8f [ 474.615456][ C0] RDX: ffff88807b36a4c0 RSI: ffffffff8bf2b380 RDI: ffffffff8bf2b3c0 [ 474.615464][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 474.615470][ C0] R10: 0000000000000001 R11: ffff88807b36aff0 R12: ffff8880b8428440 [ 474.615478][ C0] R13: 0000000000000001 R14: ffff888029f38300 R15: ffffffff8980a5c0 [ 474.615485][ C0] FS: 0000555592fe5500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 474.615498][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.615506][ C0] CR2: 00007fff847ccff8 CR3: 000000006634e000 CR4: 00000000003526f0 [ 474.615514][ C0] Call Trace: [ 474.615518][ C0] [ 474.615523][ C0] rcu_is_watching+0x12/0xc0 [ 474.615536][ C0] __hrtimer_run_queues+0x9f4/0xc40 [ 474.615556][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 474.615573][ C0] ? read_tsc+0x9/0x20 [ 474.615591][ C0] ? rcu_is_watching+0x12/0xc0 [ 474.615602][ C0] hrtimer_interrupt+0x397/0x8e0 [ 474.615618][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 474.615634][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 474.615648][ C0] [ 474.615652][ C0] [ 474.615656][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 474.615669][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 474.615683][ C0] Code: e9 3d 16 5e 00 be 03 00 00 00 5b e9 32 da ed 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 48 c7 f3 11 65 8b 05 59 c7 f3 11 a9 00 01 ff 00 74 1d [ 474.615693][ C0] RSP: 0018:ffffc900033d7d80 EFLAGS: 00000293 [ 474.615701][ C0] RAX: 0000000000000000 RBX: ffff888031de6360 RCX: 0000000000000000 [ 474.615708][ C0] RDX: 0000000000000000 RSI: ffffffff823efa36 RDI: ffffc900033d7e88 [ 474.615716][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10063bcc6d [ 474.615723][ C0] R10: ffff888031de636f R11: ffff88807b36aff0 R12: ffff888059c23a70 [ 474.615731][ C0] R13: ffffc900033d7e88 R14: 0000000000000000 R15: 0000000000000000 [ 474.615741][ C0] ? lookup_dcache+0x16/0x170 [ 474.615755][ C0] lookup_dcache+0x16/0x170 [ 474.615767][ C0] lookup_one_qstr_excl+0x2a/0x250 [ 474.615779][ C0] ? mnt_want_write+0x161/0x450 [ 474.615794][ C0] do_unlinkat+0x27b/0x660 [ 474.615810][ C0] ? __might_fault+0xe3/0x190 [ 474.615822][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 474.615842][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 474.615855][ C0] __x64_sys_unlink+0xc5/0x110 [ 474.615871][ C0] do_syscall_64+0xcd/0xf80 [ 474.615887][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.615898][ C0] RIP: 0033:0x7fd8abd8ecf7 [ 474.615909][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.615919][ C0] RSP: 002b:00007fff847cd298 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 474.615930][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8abd8ecf7 [ 474.615938][ C0] RDX: 00007fff847cd2c0 RSI: 00007fff847cd350 RDI: 00007fff847cd350 [ 474.615945][ C0] RBP: 00007fff847cd350 R08: 0000000000000000 R09: 0000000000000000 [ 474.615952][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff847ce3e0 [ 474.615960][ C0] R13: 00007fd8abe13d7d R14: 000000000005a168 R15: 00007fff847ce420 [ 474.615972][ C0] [ 474.616367][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g33969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 475.009536][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 475.019496][ C1] rcu: RCU grace-period kthread stack dump: [ 475.025369][ C1] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 475.038844][ C1] Call Trace: [ 475.042109][ C1] [ 475.045032][ C1] ? __schedule+0x10b9/0x6150 [ 475.049699][ C1] __schedule+0x1139/0x6150 [ 475.054193][ C1] ? __lock_acquire+0x436/0x2890 [ 475.059121][ C1] ? __mod_timer+0x8f2/0xd30 [ 475.063710][ C1] ? __pfx___schedule+0x10/0x10 [ 475.068554][ C1] ? find_held_lock+0x2b/0x80 [ 475.073238][ C1] ? schedule+0x2d7/0x3a0 [ 475.077564][ C1] schedule+0xe7/0x3a0 [ 475.081626][ C1] schedule_timeout+0x123/0x290 [ 475.086473][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 475.091839][ C1] ? __pfx_process_timeout+0x10/0x10 [ 475.097121][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 475.102919][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 475.108369][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 475.113132][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 475.118408][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.123595][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 475.128519][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 475.133365][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 475.139171][ C1] rcu_gp_kthread+0x26d/0x380 [ 475.143835][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 475.149022][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.153773][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.158963][ C1] ? __kthread_parkme+0x19e/0x250 [ 475.163976][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 475.169164][ C1] kthread+0x3c5/0x780 [ 475.173224][ C1] ? __pfx_kthread+0x10/0x10 [ 475.177806][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.182552][ C1] ? __pfx_kthread+0x10/0x10 [ 475.187134][ C1] ret_from_fork+0x983/0xb10 [ 475.191713][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 475.196812][ C1] ? __switch_to+0x7af/0x10d0 [ 475.201476][ C1] ? __pfx_kthread+0x10/0x10 [ 475.206053][ C1] ret_from_fork_asm+0x1a/0x30 [ 475.210821][ C1] [ 475.213823][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 475.220127][ C1] CPU: 1 UID: 0 PID: 7930 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 475.229562][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.239600][ C1] RIP: 0010:smp_call_function_many_cond+0xdfd/0x15e0 [ 475.246265][ C1] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 35 5d 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 [ 475.265855][ C1] RSP: 0018:ffffc90002ef7720 EFLAGS: 00000293 [ 475.271908][ C1] RAX: 0000000000000000 RBX: ffff8880b84431e0 RCX: ffffffff81b28bb1 [ 475.279862][ C1] RDX: ffff8880475f8000 RSI: ffffffff81b28b8b RDI: 0000000000000005 [ 475.287818][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 475.295770][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 475.303722][ C1] R13: ffffed101708863d R14: 0000000000000001 R15: 0000000000000000 [ 475.311674][ C1] FS: 0000555580736500(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 475.320592][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.327164][ C1] CR2: 00002000001d8030 CR3: 000000007e8c2000 CR4: 00000000003526f0 [ 475.335126][ C1] Call Trace: [ 475.338392][ C1] [ 475.341313][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 475.346505][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 475.352822][ C1] ? ldt_dup_context+0x1a2/0x300 [ 475.357756][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 475.362942][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 475.368041][ C1] flush_tlb_mm_range+0x2f0/0x12c0 [ 475.373137][ C1] ? find_held_lock+0x2b/0x80 [ 475.377804][ C1] ? dup_mmap+0xcea/0x20e0 [ 475.382212][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 475.387744][ C1] ? up_write+0x282/0x4e0 [ 475.392067][ C1] dup_mmap+0xd04/0x20e0 [ 475.396309][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 475.400989][ C1] copy_process+0x3b9f/0x7430 [ 475.405657][ C1] ? do_wp_page+0x1c04/0x5010 [ 475.410333][ C1] ? __pfx_copy_process+0x10/0x10 [ 475.415351][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 475.420381][ C1] kernel_clone+0xfc/0x910 [ 475.424786][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 475.429813][ C1] __do_sys_clone+0xce/0x120 [ 475.434397][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 475.439580][ C1] ? count_memcg_events+0x122/0x290 [ 475.444776][ C1] ? do_user_addr_fault+0x843/0x1370 [ 475.450057][ C1] do_syscall_64+0xcd/0xf80 [ 475.454559][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.460440][ C1] RIP: 0033:0x7f11fbf85e93 [ 475.464843][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 475.484437][ C1] RSP: 002b:00007ffc841b7668 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 475.492839][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f11fbf85e93 [ 475.500797][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 475.508757][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 475.516711][ C1] R10: 00005555807367d0 R11: 0000000000000246 R12: 0000000000000000 [ 475.524664][ C1] R13: 000000000000005b R14: 0000000000059cf7 R15: 00007ffc841b7800 [ 475.532635][ C1]