last executing test programs: 13.685184444s ago: executing program 0 (id=406): r0 = syz_open_dev$video(&(0x7f0000000580), 0x20100009, 0xea680) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0xf7, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x980913, 0x0, '\x00', @p_u8=0x0}}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r6, 0x1000000}}, 0x20) 13.677892673s ago: executing program 1 (id=407): mmap$IORING_OFF_SQ_RING(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x98, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0xfffffffffffffd9d, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x587, 0x97, 0x3, 0x8}]}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040c04}, 0x24040014) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000e5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012abd7000ffdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="0ce806086c0000000100000004046c00"], 0x2c}, 0x1, 0x0, 0x0, 0x46}, 0x0) 13.150576339s ago: executing program 1 (id=410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='rcu_stall_warning\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000003208"]) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r8 = dup(r7) r9 = syz_io_uring_setup(0x1e71, &(0x7f0000000380)={0x0, 0xa2d3, 0x10100, 0xfffffffe, 0x1eb, 0x0, r8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x100a}, 0x1}) io_uring_enter(r9, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 9.343951013s ago: executing program 1 (id=412): msgctl$IPC_INFO(0x0, 0x3, 0x0) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000180)=""/4096) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x7c}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, 'ri/'}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 9.129424949s ago: executing program 1 (id=415): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2, 0x0, 0x5}, 0x18) r3 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000140)='1', 0x1) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/../file0/file0', [], 0xa, "b524be350e7611b133a163b4ab1b0400000024e974e8a21afa278685f8b184319a8c7bb520df76b782000000000000000748f0998fc48ca49ae39016047f988925afe412f017f895e926610850ea98959add30eecdfbf7ec4c6c186cb815e1624da98fa6e2ed7aaa2ad48833d360600f5c0cd0f84c3d"}, 0x90) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2, 0x0, 0x5}, 0x18) (async) openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$6lowpan_enable(r3, &(0x7f0000000140)='1', 0x1) (async) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/../file0/file0', [], 0xa, "b524be350e7611b133a163b4ab1b0400000024e974e8a21afa278685f8b184319a8c7bb520df76b782000000000000000748f0998fc48ca49ae39016047f988925afe412f017f895e926610850ea98959add30eecdfbf7ec4c6c186cb815e1624da98fa6e2ed7aaa2ad48833d360600f5c0cd0f84c3d"}, 0x90) (async) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) (async) 7.078835216s ago: executing program 1 (id=416): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x4b, 0x10000}}) 7.073116509s ago: executing program 4 (id=417): r0 = syz_io_uring_setup(0x6375, &(0x7f0000000140)={0x0, 0xca65, 0x10000, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000100000000000008", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) capset(&(0x7f0000000240)={0x20071026, r4}, &(0x7f0000000280)={0x7, 0x9, 0x4, 0x1, 0x30, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a050000000000000000000a0000010900030073797a3b9084a1000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00024000000000000000370c000140000000007356b48e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4, 0x0, @loopback, 0xffff}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x80, 0x2500, 0x3, 0x2000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 6.86893649s ago: executing program 1 (id=419): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(r3, 0x0, 0x0, 0x0, 0x9) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0x2, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 6.80734411s ago: executing program 0 (id=420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 6.38223956s ago: executing program 0 (id=422): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594", @ANYRES16], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x1ff, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x200004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0x80000000, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x2d8668bf, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x2, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x3dd1, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 2) 5.85214747s ago: executing program 3 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) listen(r3, 0x0) accept4$llc(r3, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 5.751973152s ago: executing program 4 (id=424): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000000000029"], 0x10}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000000008, 0x8b}, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) 5.516491479s ago: executing program 2 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4008050) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r2 = syz_open_dev$video(&(0x7f0000000200), 0x8, 0x408101) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40880) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000380)={0x0, 0x9, 0x5}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x0, 0x7f, 0x8, 0x3, 0x10, 0x6, 0x9, {0x0, @in6={{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}, 0x3, 0xd, 0xfffffff7, 0x4, 0x9}}, &(0x7f0000000840)=0xb0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000880)={r6, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000940)=0x84) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x4, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x8040) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000a80)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) r9 = getpid() sched_setscheduler(r9, 0x3, &(0x7f0000000ac0)=0x4) (async) sendmsg$inet_sctp(r4, &(0x7f0000000dc0)={&(0x7f0000000b00)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="9067ad7faa1d627cb096d7cabf78d82d91cfc6e2c2a77b295db3ea8e55d2cd3c95d1a590cb41648aec577c9fa89b23436f28d9b3b811e3f53c3293ab8696086bc6693581479ca819e5d136e2159e4647d474a3a655ad991f1192cbdfbf1cceaf189f7d28e44583ff69210d70a2ef8c6da9174eb704e5743d3f9d884a392b678b1df93544d0039a0ed831f494694aa97e1e37c9261f934887c48bc7eb87ede29a", 0xa0}, {&(0x7f0000000c00)="b8a7dfcd", 0x4}, {&(0x7f0000000c40)="59dbd9977b4bf2aba47918ccfea7bc70a79caf83f93e57ebeb69d3f51d5f5f5a9a9aaa6538f080fa6f3f411916809a4bc441d1e1fd08c1f71e0b04", 0x3b}, {&(0x7f0000000c80)="54dc5ab8bdff7275dfd6ab21589f938324488e4fc8c697357a7ccc79ef5380c89f6a21fc774d6d2840075b0a70f6f23d45cde81ba13ed3c487", 0x39}], 0x4, &(0x7f0000000d00)=[@authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0xbd, 0x7, 0x8, 0x2, 0x3ff, 0x5, 0xfffffff9, 0x7, r5}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x30000000}}, @sndrcv={0x30, 0x84, 0x1, {0xc132, 0x8, 0x204, 0x7, 0x9, 0x5e, 0x40, 0x3ff, r7}}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0xa8, 0x2}, 0x4048040) (async) waitid(0x2, r9, &(0x7f0000000e00), 0x20000003, &(0x7f0000000e80)) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r10, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, 0x3fa, 0x2, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) read$hidraw(r2, &(0x7f0000001040)=""/96, 0x60) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000010c0)=0xf) r11 = eventfd2(0x13, 0x800) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000001100)=r11) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x20, 0xa, 0x9a, {0x9a, 0xb, "f9ca1b5cfe8f5f521c6392e22794fcd207cd33742276aa992b9d78401e8d34297819c3e87499b90e052cc6122f73e2a4044c92816c1c98b70e17da0f79629c88347b5fa4a10ab3f5f521a247a7c9a6c38eddb93c44669063ee0cece2f0ecad571d30378032859f37363601273ee2866b9c4adedfb96e817d533ebe5c7d9fed33a6c655d6f6c8a831cb4d1c6906af7bc92cc70a6a0796096e"}}, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001540)={0x44, &(0x7f0000001280)={0x20, 0x12, 0xbb, "7229a59232850ee6b0cf437bee19f85f22f4f87fbae9ae32622ce783ff1acff8e0d94b3b29feb6849df0bd716f3383e54479d75dc6d6ea702091695b213341c2d3a9fa9ff9b322ffcc3fabded9f5c63dd141d3d63e6b8ddf7789dec285ed546ad6518b1473600ba30f8f370d80e84cea5f9cfbaad7e008713227ee20a5c115d0e2dd175f30a218dd89689ba6e9e9b4bccbe553e7958109eef7cc2904083cc3482fee52591586e00f4ef701a0ed805adcd86084f2d4f904dc4829bd"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001400)={0x20, 0x80, 0x1c, {0x9, 0xc6e, 0xe, 0xa2a9, 0x3, 0xfff, 0xd, 0xff99, 0x8000, 0x4, 0x4, 0xffff}}, &(0x7f0000001440)={0x20, 0x85, 0x4, 0x80}, &(0x7f0000001480)={0x20, 0x83, 0x2}, &(0x7f00000014c0)={0x20, 0x87, 0x2, 0xd189}, &(0x7f0000001500)={0x20, 0x89, 0x2, 0x1}}) (async) fstatfs(r4, &(0x7f00000015c0)=""/96) (async) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000001680), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r12, 0x400, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 4.782578084s ago: executing program 3 (id=426): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) (async, rerun: 32) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) (rerun: 32) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, 0x0) fcntl$notify(r1, 0x402, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000148500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) accept$phonet_pipe(r6, &(0x7f00000002c0), &(0x7f00000003c0)=0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6cf2040000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r7 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) (async) r10 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r11], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0x2, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0xffffffffffffff4e}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r12, &(0x7f0000000080)=[{&(0x7f0000000140)='1', 0x1}], 0x1) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x7, 0x400, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[r12, r6, r6, r6, r6, r6, r0], &(0x7f0000000680)=[{0x5, 0x1, 0xd, 0x1}, {0x1, 0x4, 0xc, 0x4}, {0x0, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xc, 0x7}, {0x4, 0x2, 0xd, 0x1}, {0x0, 0x1, 0x1, 0xb}, {0x4, 0x1, 0x2, 0xc}, {0x3, 0x3, 0x10, 0x8}, {0x1, 0x4, 0x3, 0x6}], 0x10, 0x322}, 0x94) (rerun: 64) 4.446373774s ago: executing program 3 (id=427): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c8e6f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d4bdd8b432e116ff5ba8ecfe721acd0a6142d8867126834d030354025ad45b9a8db855e34f17ea8e46f249fffafe0eeb51d7dd22e3f09f3403079cebec8315f923f13505c7dddfe0102fb6bf12f42be76ecb2ce2aaeeae7d48fac5f6dafadaf5b82291b6c4a71ae", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) syz_fuse_handle_req(r0, &(0x7f00000043c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x401, {0x1, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0x8, 0x0, 0x7, 0x200000000001, 0x1000, 0x0, 0x7fff, 0x8000, 0x0, r2, 0xee00, 0xb099, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000006500)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[], 0xff2e) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x521f) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) r7 = syz_open_pts(r5, 0x0) r8 = dup3(r7, r5, 0x0) read$FUSE(r8, &(0x7f0000002600)={0x2020}, 0x2020) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x2, 0x2}, {"43a5f401180ab59fdca40a547826a41e29559607d047e5c146dbb9273da014ff40a1b3fc19cae2c3ecf58c6abfd1a8571d741bf0cc21a1e8c406b053c37a"}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x4, r9, 0x0, 0x1, 0x4}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x11, 0x1, '/dev/net/tun\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000800}, 0x20008804) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r13, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r13, 0x7}}, 0x48) 4.409851101s ago: executing program 2 (id=428): r0 = socket(0xa, 0x1, 0x84) ppoll(&(0x7f00000000c0)=[{r0, 0x8002}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x100]}, 0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='cachefiles_ondemand_cread\x00', r3, 0x0, 0x6}, 0x18) r5 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)}], 0x1, &(0x7f0000006240)=ANY=[@ANYBLOB="1c00000000000030509f824f35dc513e60c3ea2a2f95fb31e413bc6765615a", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x20040001}}, {{&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000c00)="58b51e16dd9805fffbc95e717dca23d99f76e8a63d5a1ca5de6c90c80172b0f8b60b998a0096124212ed8b11362c10fd1d32db385e2bd7374a78c8611db279d34b2080a87ed4cd44cfc4d68d42152bcb2d1b3f4c4d5f37e75c44b218d89af46b9b11b1e8a6439e58f21d315788c0b9f17826a98480e2673707a602ac", 0x7c}, {&(0x7f0000000d40)="07befd0fce528da7ab1574f2485c8f96866d76c9bb475b5388d8cffeb1afa38ab8d2e45a6df8055e48dfb468b089b0504d3525f80cc4db33d65e7ce8ccb6741ee6e9475d04977493de5076d1f48ab2a50994bfa0a9d3fd8c0a40f49235d416e419c11c1126b012b3aaaf22603dab05d98649d8fad75d308b101b7426802d243be517e94351227f981e1456c62ddb2508cb19c342b53e534d00080a648d04d42a42ef91ba3eb9c652245108cfa16017320f567d0c44ef844a9adfc18c6066f89c4f982de09b67e85730cc9aaa93d9f7343564a155c3a5935b7c92410a9fb9c0e55366050c6e9e125c82cdaf1d00342b263bddc721669a6703d526", 0xfa}, {&(0x7f0000000e40)="55d21f650d45f7196162adbdf51f4c4000c040306920ff4caaa505ac64db87718f83d88a2215f5e348fff906550154b933108c48db8dad8c0b6589b7dceca105abafd8aa6d57afee63f390af979e2cfa58bdc2e24e82403e8a1ef960ab53b02d97644026de97189431863faa3701cf3ff506aa7ee14cb728fc66e945aafa01a41a2b5a09eb1c71ed0e429ce08808aa2dc1bd2ba4b1c0d0f080f16139d29303ed3611b8366a8be59c9bae1af4ea3b46353e2cdeb06850481e5e9e7ae374019b786bd48edcff328b1e39b28ecca4", 0xcd}, {&(0x7f0000000f40)="c570ab05a1ddc3fbf22ff1f295fb90b105d8748cea83b7325baa935646f0b38869dd9a85c94fac49c8bab83bef5d771f72e524dc46765122fcacaa16c3b11acef965d03d98e97d5544399af735bd816af37a948c51eac97e2178e9d5703a69c986ba4f06a6626142437fe6554b071a2d54287c275a8d7553cfa9bd7cd50e4329c564a051d116db30d0cb2b9856994ad3db52c480e05d5192cb31c90ed59d9b0cbc2eeaad9da7535fef850e187936b37fe380be7d633bb9b02e5aaec9f913aa8a556a788f2fe42936c94219fb5c71d561a1e0a315eb0ec56765", 0xd9}], 0x4, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x4000}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000c80)="a8c67638b6565830f3846dfbaa96a66d262593518f76f074e254a519fa70c8eb482da71c29d9c3506e01e30db12320a5500381be706c367458409ddc8d90461cf0f17fb78ed506d9c558df39e9af5dff0a8cbdf80f852ea9", 0x58}, {&(0x7f0000002400)="17f027620b5fa95b1f34d23efca57d63eaa9c1223d75e281c796e406bfd1afbfc7f4720e3f31e0449f3df65bb8c14d7baaa68476eea569a7e1d10894cf80bc0a992cb879985a4ee9133a4ecd8a87490350e92d00199db2ce232524a75cbbbdb74c489df707015d4bb7289d59c2ea50ae428250413d66cb0b7d372091f1f893cd2b7e3cc4cd6f12fced47c8ff53fc8a8d9858f16618179d23d0cff638ebbe4dc325a468be26c610fbe16b7d3888d1044135636166cab4c7a6d5bf03df929cee6cba7fc9a4c3b4371c3866a62b690382222c3052bcb30672d200b113f10e8fc32f72118998ef3a9132739fd7ad5682876d0e5a2b7316cc4d18faffb960e8649b555c876aab3bc772c96a5cf58ebc0a8d3d5d23801a02b5b36805f249e1593cbe4dcd7464e58b962dcbf754d4f32b2b459234e88a7929612315d46370ab763dfcb843c9176cb641588d5bdf4d2fa5017a5dca6a1f3ed80644acf26472a64172ac873d97bb8307656699e6f8734ed82ee271ca54ac583edaef1b39e2627e3ad8f7377e1182b1e41bc03d1842b09ed29c8ae18da32d1e8e96efd34a34795c5e3e2da332324f45928eb67017af245fd12ee1149eb181ba7cd995a044fd671078d82c2d95a1f8f39c0e38bcd7d9ac4a8f6fe1a492c7b46ea6cf7e736fddf336b33c3c44c469a631957200817cab9b713504e7e064544f3bc89b7de15f693b7fd7d2d915988bda831bdc4385cf5057ea536cd296fff22ed8d2615ac359e04d697010b0a737cdec6b62305cd092deb59a505b20ccfff1940a358f18ec3c638b494c6cc82120c42ea6691be1daa4a96a4a71ce1d36a2f226167743fe509ce10df625b0f7914ef1cd2a9e816163e0c5a36f4bbfd69731ffb9f9f8eae62d2fcaff321f87eeaa653d62ec891e1f8f582f3d1a3f8854a2dd028771574ec3a20e21d77f1e8fa7240d451dc679dc7f020e990104e4a8417d8d5f3369e2455cda963b57811a8fe62d5d3ba988bbd9244dc9e15629fbc9876fb0e5e335596719b6f3f76a9e43233d0c23ce8c82deb8cb6bba38dc46323dcad49cb6d0be493296d05173e4873082c70c84cd137501d9975e4cdca1c351db140f79faf2a538e3821945d330ea8742d88c15c897f28c097e932aff0cb66df332ddd88a8aa072d5025c82a6cfc429148a92dd88898344c7c18b8b1311e1cbd3dad77b4b384473b633dcda5e0a52af0d2479be0c9e62dde90c69ad926fca01b3ed55b5ce0bcfdf52ea66562aa7fdac090ca40b95e4458f26b6dd8204be2a5e641a2392f0b68c4ead34f3f2c9dbb4573c40976bf46f3eb2afdb1e815c507c8098ed718f2d84f5ccbe897267813f4376902f7f1548e33bce48de43d209892fb0fd00b0810a94e863abf45e2f2b609102f20005803396c7501aa532f8a3953d3acd05cbaf50ed1b18ce8c16a034943a845fe0fc07ecfc634dffa3ad8075d2b6b6119766be06878f4e9779db5bb3ed1a9c7d08a9b071ed8eb3719f5af2f11dc05a68e66b54ca373dc10b7ced701d35c0f2a938f7467ebc1f1272577f081d1805c811f4eee72dc3511fc2a820f4c692e8b4a5e9726356cf5321b63c032c31485dbe81a3236cede471c438ad654afafbdfdbb15b2522a13a6e003b227c450bc5f858ccd50b95a0a01ad4a712f2410d4d0a9727863ae8c19620a72f88d89d5d134d827473e38a920ae681b10078ff8f52762c78293b625c5723762d226a370af08b034d27607ece42dc25b5750e0dd23ca8b69fa866ede4f61e07823a4c8d6d45a0195795dd0808a4ee1513bcb453d023b4cce1f21311cc1766f798d09bafa23878e3c6dd6d5b3b56dea8a9da39e8d7f7ed459c3ff5a2688e436973e442bdb2dde8e423ecb98f93a746f6cd2793525d8f61e49875093ae14c15f58c7737254c6367febd7ed4ae163d0552a843a8f2eda54887901e79bcfaa2c42bb620f4fc968ae3c3c8b4626c55fc0837a4cf81d65d1ccf9f970eb9ec03df717a42ccd76457b069d30e8e33afac41ac440298a42315d0ee0ce35eb3931e23e5e195339e0552ef19de71ff028520060ad7db0b6236a7afc35aa6ee31f029f5e8d08d1bad0a6e5a542919cdde096e2c367561947894de079c950ff133f66314d103db93f712ccfd9b0dd0c23b56a47045cb3b762d1669229ddc5aef01d27846579df0323d10a34ca44cb953814095c2e425810a381cefe6af091245f3b63f76252786ecac437206a7eb464dc1ff3650f1ee5dd1146d1d43e0dbe4296dec265bf8609bff2037e79aca2ee963255a27fc65e382a2176cb987e8c7dfb986c1aa7a8a05f556c31ec4a35c5a1ff6dc7f438af15ca4927ca8e9b02761cc7264d35ae3b079d6fec273f41e7738860263832340a07cf72f3cf59917a3130b05d5b26bcc541e9b82a1c23b1a980001d145e0567042a789b52764983ba4bfc7e36259557427c013de38947e056e44feca5a1ed49ab9217ef366a7064e3505843ff08044dd2c7298ddda8459d660696a1a86d3977de87916cdd50560d694c2940babfcedc418745313148a29b6a4124f3d7993dd5ec7099e6831cd6319791c75f4b6dd97b9381247eb41430d7ae9fc3173c4c1f81b9cdb9c95fa7f7f1bbc4693ad3ba5f654577428aa5f82b3bd5d3770c232759014700c1d4f52f05a9b66ac21fc74f2718ef4feb41d52baa4326aafa54c15c118882234df2f3f9a15b2e9f89a1499450e87f36541e74f2f86d1944a4e8602f87ba0d97da06a501f0355020fad8f3c44d039362cf32f54895901156091e0b4ecef701ffc6144748e6884a2291e7a8d40831b9bf9c77eb2bdef7cff6d732950b7565daccc9095b496b14ea50553b7b75dfd4615fbed5657bd576f214394b8ee9dc1f0222f0b3d01ef5448e343c71eaea5f77c5f7dacb4d327f57ab405c29790cc02f79bf380b54abb39ec114b00812ea388c52f55254b73a027b74393ea54fe2509ce2e99a6bf7f204ba90ff8ee646a27d6ca1e776e94a7c67c1b288d09ce04df163b2093ea56c0c9a4509ab7267195aabbe8b2613e5b60f63dfee81fffa23d0ab455b37508ec3942a1543b7df5980354373db0a9218c72b1a1bc9d30455b13cf950075513655556d7267ad7974bc7229537301757dc1a138b9ce84ec72d2e96440361db9cf0b9b0e1042c9f41917a15e667a76155325623932c4dfc120fbfad1cb7478408b44279c6e16decce0d7fcaa9b06d782cb5209a8b428862b08b63bdb9e9dc20c2a294bf1d4fb822c49696b596a160fbdb1ac003c0aed49e4150dfe04153a23e933d4196c639a397ce924f1e6412ab8afd1b94ac9c1a8310f165b9f023e42e6ad488bf379ee5cbcc7d2dbd442023641c7778043d9f7ab127a13743702a4be433545439a089d10debd98b5cbf2a42eaf73a7fee0ea7f4963eaf5a005720983f150ca7028c30fb61b5d13b580d4c3ed67fa604a3046bc8a516cf1b95afc70d3184c3e1b0bf2cc5d0330de80000924ed749efb96d8092ad09e1d3ca631033dc47f1fc5cfb2fcd4207aa5e9e7c45bf33435d2d622c640407bf16e412fd9bae788af554492bf77eb1cbd79d6b9400858bedab928db73ae6e03612c52e2d0784b758478ed1c720cfeb73734ba44fb0c14d5cab63b7fb2a4f3ea5b140cfd555bca89137102253b68c1ac16675fa34d8120b033eb68e59108e86207aca53adc4743edf74945854ffb1866ad85c7cdb99d49533dd303a0484be910a05180c078963325654c0479709822daeeda98c1192e7e043cf0e9196b8f825215a0542981ceea40213029f1ba1ad69195636b23448d3738d8179c3d10507a534906b212db89a3f2860ebae06b7bf0cc833fd05ce030c78f4b87e1e6e2870df5eb0dffe260174444805ef4bc5f7d5ac587c58fd151edecf025be7a25c6effabc3f7a4726f279b1a7a93ebf106467947cf8e607458311f79731d0e2b7436034894c02d5e988d608ce10110f7d48e6151b7dd5e8c50b23eb4dea01398e542cdb82a4aa07a4a93b42328e9ac2d78ec3e7bdde752cae5cbcd5409f6696645f6d2da16e3662597418f698f1be2f8f81001fc62ee784a2e4774d1b70c29b4e2e04239f91b63c02a8573a0c6068fd4f921d466c3ce9bbeb1ae2ac42e317f905b67a856bbe04e797c62f69a2ed6fc40285ce29bbceffc5450fc2f8a2f0f2e973ba7bc208a0abbf0b2682cf1ee621a290b7fead371b1be18654ddc0e4bafe8ffeb96226034797b3085e85ee0ac491cb7bee7f98ebb284c2cad50445f4b8275cd4a6dfc6bdaf7d6594435a70de40f02ea3e8d6a5161a5330c7fbb66619a20988ef5721f2e5e8ea9f6141f3e410e470eceda90fbe37b92a83d5f3adc37c6d0ba7e78773b6b438b97c1ac849e86b6cb0d1eb8b294c55278d92ccff9c70770465bd8817ce3ed82c1fa4056844448496e3f856db4b8aea1a44efa261cdd7d051199aa33ef00480f381c9551a30edd1935dde0e5b2cbc5bd34cfa370ebd2c05c29ce7aff38507a28049e71146e46cbfb4e53c346d77269bd31da73519e7e09c8d5555560b6e3031687339a18d53b0f0eb3578396ed3e1708d677978a86fd60df2e9c1ebdba00e4d889bdc5a1d87032531be770096dc3c15dedf59cd37dc892bfaadab360b70d1ad8b07ad4398bf456624e11916ef7c705c211ba1aa217b9249f5dd2d3ef36329ef1ccc650b519ea8ed285ce9f46a48ee7624b946809208823097c656ce75b604aa44b90de3ed38f244da61c70765e1383e79c78bcd07b5390d29e6d597db85e58cd06fb38445b1441ab6c37622f0ab4a37bf3365271760db7655789b3bb70fd4d6edef2e78786a9ce7e16197e289540b8156dc46d578067dd7d2ccec333a36ae6006daf0a47351efbb9f85737672db42e617adf843cd1c250b254a499ca29b1895d235771c4d0f7fd15bbde5d7562b355f18ed151e19da6e20b38784a63d92727326c96a21cfe27b3775ef385308220c4b374487f63dcacae63c2ac42e7a1b48fb19c57720fda07e779abfb03105352ca0ad504dbd06916135590e55d392b1851107e026c72cf19a796a976de43da19a440bfe53bae9118362ecb75aa356904b350dd8c1a406801346c26241444e0da2b72e0683e2e8322caa6b37366de62c9fe8bbdf5ccf2777937afe5889be6d809c00df0037ae3aabcae6233eb2cd43e39133215f95a61bfb70c0e64165444b76478e0170c521263ce609f389491e564008443bd3f60f1e6171ea88a4b8775d868cd6ed98a6f041e3c9f4205d0e8b44b1b36e06bbb3618712a1bcef1ea125e72c8533d9c1d8d9ea25e0d1ebf56024c75bab28e0e242304f06ac017e9296e0d3f9ed45bf210079dffce83ed45d9f2cd910c48d951e55cddbaa897ecb795f32a5a1b71b19c0fa9007dd3d0cccf015bc9f36669513e6f2da11b6814d6bd147c3a7742213798158ce3703ff8c632b8248854bef23dfe7587041ec37b52164b7f18092a6291566a6f9818fac0ef46d994db51fbb2ebedc4a1ba12e99518c844e25ea5788c0035d897e4bbac188572b967d219670b9cc450c894de398f2420d331c153259b6ec68df27af9e2c08863d0fdafb50208b470e54b2591880c16bba90ae008e7e810cc7a0fdc4576e9bd05d3b93fd42125c46a11deca185fd7fb7977fff378fe873a26be3cac16388f6348a5a5834bb037323073a5143860cc13282d8ea78d3dd020426b7bb36ccde7fce6ac5d0168259f320b0c574caceb888c348d312071cf6db3b8d6223ea01b6afc9141501cdbe368a5090dd48a087af98c9b2c86ce7d5967f8229050bb5", 0x1000}], 0x2, 0x0, 0x0, 0x2000c904}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f00000012c0)="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", 0xff}, {&(0x7f0000003400)="5eae2ff1867af53c7eaf73b25ec19df33ba9ad4775caf5ef079012389b82780eebfabbdb2aa2bda80223e076f8fa2d8b", 0x30}, {&(0x7f0000003440)="5f19e0656aff9fe8aab3428c55147a7064d10aa7ac2e2d677bb9b14cbe81f13028c36fb831c61517867bac4d7a428b1d66154e63a496029d19808f21f0e150c08d3be6cdd7387f572f512850dd21b657a62cd074920a5abaa7e11ebaf67453b30340e5f60a4f34375e32bc15306fd686004f48136b69fafc547d9b2bdf6326be3c2bfb183c4260c6b422a90ff5e3ed32d62d7827b734472140a6cc4db546654e7a939cfaaa137b0955d9418f7c9b9f7efaa498193d0b4bd1c42e9396cf71372fc9299e", 0xc3}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000004540)}], 0x5, &(0x7f0000004680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000046c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005800)=[{&(0x7f0000004740)="868ed06e5306a8c9de5e638bc10c6c29a14e1a58211e8db274a092ca1dbb3c24705f9ed527c89f13bbab245494085547716238bbf7beb2e207dfc769189a268b65e6a17bafe4cd8b6d9c0ed54ab4c64e65b48b7bc553aa6370ae997df53fe3f57c7962b90d91078c47244eeaa4eb2e98a3d31f3cb55096a230c7e992a7d5d076e13d1a5fc873f610efa58aff7cd4c2f6aae1c1f0369dfb8b9e791c8d4822d816c375be467e0b062e83bf9ffa3f440d48720bbd7e920688c0c4052ecc97c261ed", 0xc0}, {&(0x7f0000004800)="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", 0xe00}], 0x2, 0x0, 0x0, 0x20}}, {{&(0x7f0000005840)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005940)=[{&(0x7f00000058c0)="298935b584e92f278804a9d7f7017a3650e09dc799f0919019fe492f31ac75fe69a101061d41cbc9ae2a0f8883f81cddae", 0x31}], 0x1, &(0x7f0000005980)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000059c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005f40)=[{&(0x7f0000005a40)="5f78b468fac9f1c75ca5441af826f1111c4729f61e2aa6", 0x17}, {&(0x7f0000005b40)="47f33284aebf7f9acdd04e7c54a4a8f844f32a9662d62d5a42625ec6ed40fa9827d82b9ad18305ad", 0x28}, {&(0x7f0000005b80)="7a55df06245030c7470127096fc82455b8402d31f049b0", 0x17}, {&(0x7f0000005bc0)="29f6969f63537a7ec1a0c72d288db9bd6df52691a231e6871370edc969ca18937801728f24a744ec357aaf838d8fa094f16371dbca5a27824e4ae55f292c2d87f59b182543bea8315bd1e6a4e86ae52771382f239f6bbeb718fcd5548784e452e801fcc6b828f40a7fda44abf0731a90989f31432452f97620531806eb67edbff0f0c0ac3512735cc0b9bcef0ca1641adab3fb125d8ad0d406ec385c3f6623c45cc213bbca15e5ade2023e39c2870c5ef11294034b79a07bd5adbc73b9fe", 0xbe}, {&(0x7f0000005c80)="5625cd4c33e1f0d68f97b74d247ef7b8661e3714504aa2c9073cfd78e384125040c173643b55aa564db0b9bfa894c20b2951df20111a9e5c45a4d1b8005083f6a5b14a5172704159150172bd039d9c0860f2ce5734b09cbfa36ab2ac94b5ece2120c824cc28b", 0x66}, {&(0x7f0000005e40)="1efc6b8ab80bcd0b8b3c583eb37ab61b0e2eca303f0aa5fdeb893b430e8f7c183cadbcce71477f1b8d29428ae79e50867862f6a1aebc6dfee5aab206e0486ccc73b56792f855f0bb8478d7ec1f23a1dc2fd34cb7", 0x54}, {&(0x7f0000005ec0)="30fdff754dfa7b201896a94e32885674a8ca2d4706102cecddc808a5761ce7b3c2ca3b4923a1a2722bcdaa90621ad0a8a1ea03891e443821f669e6cf09b7603b9ef5a8899dedc5f223b29997d1", 0x4d}], 0x7, &(0x7f0000005fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xc0, 0x5}}], 0x7, 0x4000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000b40)={0x2, 'vlan0\x00', {}, 0x6}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) write(r1, &(0x7f0000000240)="9ae6e3", 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x7c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r10, 0x0, 0xd}, 0x18) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$inet_udplite(0x2, 0x2, 0x88) 3.900720153s ago: executing program 4 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (fail_nth: 2) 3.536257008s ago: executing program 4 (id=430): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000000000029"], 0x10}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000000008, 0x8b}, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000000)=0x74000000) r10 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x80900) fsetxattr(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="73b26375726974c221bf980040ffefbe71574484b2f8a8aad07e9e84ea54d4eddd15153562a9f26617c07f58bc8a3b789e8a038ee6d974200e72cd3bcbf2a725bb80a6f1142a99bc3a0b3f0f61f851c8f5a0a4bf5eae562b1a9b016d9516bc68ce0de0d89b8a7ea6bb007b79352d16ca4f171735f829f919db047f18e06288ab960481fdcbd8f066869ecaccd328cbb113bba0c2788cd4b3e061fd441a219ecb3be67b1e6aaa8c5f70ef0a5f20fcbf64b651"], &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x15, 0x2) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) epoll_pwait(r11, 0x0, 0x0, 0x2, 0x0, 0x0) write$dsp(r11, &(0x7f0000002000)='`', 0x1) 3.524106559s ago: executing program 2 (id=431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 3.445480329s ago: executing program 0 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) (fail_nth: 2) 3.348646631s ago: executing program 3 (id=433): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x880) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={r7, 0x3}, 0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000000206010000000006000000000000000005000400000000000900020073797a30b4000000240007800c00028008000140ac1414280c0001800800014080ffffff050014000200000005000500020000000500010006000000"], 0x5c}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000097e3075ad39065cd72319ca29942e7fbecc18690de53b500639afa8e9e4138760902effa0ff4e653bd043116c5"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.318099699s ago: executing program 3 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x5c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x4b}]}, &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100e2"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x4, 0x0, [{0x776, 0x0, 0x2}, {0x40000084, 0x0, 0x266}, {0x8d2, 0x0, 0x5}, {0x904, 0x0, 0x6}]}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @remote, 0x80020}, 0x1c, &(0x7f00000000c0)}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x7, 0x1, [0x0]}, 0xa) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="ba2100ec208700f466b91e0200000f323ef0811a88e40f79b1da5e26fb66b81a29612d0f23d00f21f866350000000b66b9400600000f3299", 0x38}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.301196283s ago: executing program 0 (id=435): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x6b}], 0x1, 0x1002b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.170933684s ago: executing program 2 (id=436): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$uinput_user_dev(r3, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xffff}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100000, 0x5, 0x4, 0xd, 0x3, 0x9, 0x1f, 0xc795, 0x8, 0x7fff, 0x10001, 0x4, 0x4, 0x1, 0x18, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x3, 0x0, 0x0, 0x1, 0xd, 0x2, 0x0, 0x1, 0x40, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x2, 0x6, 0x0, 0x8, 0x7, 0x75, 0x0, 0x80000e8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0x0, 0xdf, 0x287f], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x3, 0x8, 0x9, 0x7f, 0x75, 0x0, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xfffffffb, 0x1, 0x7ff, 0x4, 0x4d, 0x1, 0x0, 0xd, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x2a, 0x8, 0x5, 0x3, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x8, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x5, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6, 0x313], [0x3, 0xfffffff8, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xfffffff8, 0x9, 0x1, 0x700, 0xffffffff, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x9, 0x6, 0x1, 0x3, 0xffffffff, 0x709, 0x9, 0x9, 0x0, 0x7, 0xff, 0x7fffffff, 0x5, 0x6, 0x43cd, 0x5, 0xd, 0x8000, 0x4, 0x40, 0x7, 0x7, 0x4, 0x10001, 0x4, 0xffff89a1, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0xa, 0xfffffff5, 0xd, 0x2, 0x10000, 0x1d, 0x3, 0x4, 0x3fffc, 0x1], [0x7, 0x8, 0x213, 0x789c, 0x40, 0x6, 0x1000, 0x8000, 0x2, 0x9, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0x9, 0x7fffffff, 0x0, 0xffff, 0x0, 0x6, 0x7, 0xf4f1, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x2, 0x1, 0x1, 0x1000, 0x81, 0xff, 0xb6, 0x3, 0xffff, 0x10, 0xa114, 0x20000003, 0x6, 0x800, 0x4, 0x40, 0xfffffffb, 0x0, 0x0, 0xfffffffb, 0x7, 0x800, 0x0, 0x5, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2275, &(0x7f00000018c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) prlimit64(r4, 0x6, 0x0, &(0x7f0000000080)) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) get_robust_list(0x0, 0x0, &(0x7f0000000140)) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.426210561s ago: executing program 4 (id=437): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@deltclass={0x10ac, 0x29, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xc, 0xffff}, {0xb, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @tclass_kind_options=@c_htb={{0x8}, {0x1064, 0x2, [@TCA_HTB_RATE64={0xc}, @TCA_HTB_CTAB={0x404, 0x3, [0x4, 0x63d, 0xfffffff7, 0x8001, 0x5, 0x401, 0xff, 0x69384189, 0x4, 0x4, 0x1a, 0x7, 0x5a, 0x1, 0x1ff, 0xffff6266, 0x0, 0x9, 0x3, 0x7, 0x4, 0x1, 0xfffffffb, 0x0, 0x100, 0x2, 0x5, 0x5fc, 0x2905c5bb, 0x2e, 0x6, 0x9, 0x6f84c53, 0x5, 0x7, 0x7, 0x8, 0x4, 0x7, 0xfffffff8, 0x8, 0x8001, 0x4, 0x8, 0x4, 0x80e9, 0x8, 0x9, 0x5, 0x5, 0x5, 0x3670, 0x7f, 0x4, 0x4, 0xc642, 0x8, 0x750, 0x6, 0x5, 0xc922, 0x1, 0x8, 0x3ff, 0x10000, 0x6, 0x401, 0xfffffffa, 0xcd, 0x0, 0x80, 0x3, 0x1000000, 0x80000001, 0xfffffff6, 0x8, 0xae, 0x0, 0x80000001, 0xee, 0x7, 0xb, 0xded, 0x7, 0x4, 0x7f, 0x6, 0x9, 0xf, 0x7ff, 0x0, 0x5, 0x8001, 0xf, 0x7ff, 0xb, 0x1, 0x5, 0xc, 0x6, 0x6, 0x9, 0x7, 0xe8, 0xfffffffa, 0x5, 0x0, 0x8, 0x6, 0xfffffffc, 0x953, 0xfffffffc, 0xff, 0x7, 0x4, 0xa3, 0x80, 0xf111, 0x0, 0x10, 0x6, 0xfffffff5, 0x8, 0x4, 0xa4, 0xfffffffa, 0x8, 0x4, 0xa, 0xf31, 0x7, 0x6a, 0x0, 0x1, 0x60c1, 0x7, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x6, 0x69, 0x7, 0xf5, 0xfffffe00, 0x3, 0x3, 0x0, 0x6, 0x841, 0x8001, 0x2, 0xd, 0x7, 0x1000, 0x1, 0x8, 0xff, 0x7, 0x7ff, 0x1, 0x41, 0x2, 0x3, 0x5, 0x5, 0xea9, 0x4, 0x0, 0x83, 0x6, 0x1911, 0x80000000, 0x8, 0x0, 0x7f, 0x2, 0x817, 0xe3f, 0x3, 0xfffff001, 0xfffffff7, 0x2, 0x0, 0x6364, 0x1, 0x3, 0xd, 0x0, 0x6, 0x9, 0x40, 0x3, 0x1, 0x4, 0x0, 0x4a, 0x7, 0x5, 0x13, 0x1, 0x4, 0xe, 0x5, 0x60b78e97, 0x8, 0x401, 0xff, 0x401, 0x0, 0x80000001, 0xf71, 0x9, 0x545, 0x10, 0x1ff, 0x3, 0x7, 0x5, 0x0, 0x5, 0x20, 0x9, 0x200, 0x4, 0x6, 0x36, 0x0, 0x1000, 0xabb, 0x3, 0xf, 0x6, 0x0, 0x7, 0xffff, 0x6, 0x2, 0x7f, 0x8, 0x7452, 0x6, 0x1, 0x7fb, 0x1ff, 0x2, 0x3, 0x7f, 0xfffffffc, 0x1ff, 0x69, 0xffffffff, 0x3, 0x3f]}, @TCA_HTB_RTAB={0x404, 0x4, [0x9c1, 0x680, 0x1b65, 0xac, 0x7fff, 0xd, 0x8, 0x4, 0x19, 0x8, 0x3, 0x3, 0x10000, 0x8000, 0xfffffffe, 0xff, 0x8, 0x8, 0x80, 0x39a7, 0xffffffff, 0x2, 0x5, 0xe, 0x1, 0x400, 0x8, 0xffff, 0x4, 0x10, 0x6, 0x3, 0x5f54, 0x3, 0x9, 0x9, 0x4, 0x3, 0x3, 0x2, 0x5, 0x2, 0x3, 0x1, 0x1, 0x1, 0x3, 0xfffff338, 0x4, 0xf, 0x5, 0x7, 0x4, 0x24, 0xfffffff7, 0x1, 0x100, 0x40, 0x0, 0x2e9d, 0x3ff, 0x5, 0x0, 0x5, 0x5, 0xa, 0x7bcb08a2, 0x0, 0x0, 0x52be724c, 0x400, 0x8, 0x7, 0x8, 0xfffffffe, 0x9, 0x10000, 0x5, 0x5, 0x4, 0x0, 0x9e1, 0xf0, 0xa, 0x51, 0x1, 0x10001, 0x2, 0x77d8, 0x1, 0x3, 0x2, 0xb, 0x4, 0x1, 0xc7d, 0xc14, 0x9, 0xffffffff, 0x5, 0x49b5, 0x9, 0x7, 0x9b2, 0x6, 0x0, 0x513, 0x6, 0xfff, 0x1ff, 0x7, 0x0, 0x6a, 0x1000, 0x20db, 0xf1, 0x3acd, 0x7, 0x8, 0xc, 0x0, 0xd2a, 0x400, 0x1, 0xfff, 0x7f, 0x4, 0x200, 0x80, 0x7, 0xe4a9, 0x1, 0x2, 0x0, 0x2, 0x2, 0x9, 0x0, 0x2, 0x8, 0x7, 0x8, 0x7, 0x6, 0xffffffd5, 0x6, 0xffff9e67, 0x1, 0xfffffffa, 0x1, 0x638, 0x2, 0x7, 0xfcbe, 0x3ff, 0x2, 0x7, 0xffff, 0x8, 0x2c, 0x101, 0x4, 0xfffffff7, 0x26fade72, 0xa, 0x9, 0x6, 0x8, 0xf7, 0x8, 0x4, 0x3, 0x10000, 0x3ff, 0x7f, 0x3, 0x1fffe0, 0xff, 0xa51, 0xff, 0x200000, 0xfffffffe, 0x6, 0xaa, 0x2, 0x5, 0x5, 0x200, 0x1, 0x2884, 0x1ff, 0x2, 0x6, 0x0, 0x5, 0x6, 0x1, 0x5, 0x4, 0x47c9, 0xb130, 0x8, 0x5, 0xe04d, 0x7f, 0x5, 0xfffffffa, 0x8, 0x5, 0x4, 0xe6a3, 0x7, 0x4b93, 0x6, 0x7, 0x2, 0x6, 0xfffffff9, 0x2, 0x7ff, 0x2, 0xfffffbff, 0x2, 0x0, 0x0, 0x10000, 0x5, 0x5, 0x4, 0x8, 0x7, 0x40, 0x800, 0x6e5, 0x6, 0x5, 0x8, 0xa6f, 0x1, 0x5, 0x7, 0x6, 0x6, 0x25, 0x1ca8fd8e, 0x8000, 0x5, 0x7ff, 0x0, 0x7, 0x0, 0x1, 0x4, 0x4, 0x1, 0xe60]}, @TCA_HTB_CTAB={0x404, 0x3, [0x7, 0x2, 0x7fffffff, 0x0, 0x9, 0x5, 0x7, 0x7, 0x7, 0x8, 0x2, 0x401, 0x5, 0x7, 0xa, 0x9, 0xa01, 0x6, 0x1, 0x33cb, 0xffffffff, 0x401, 0x1, 0x58, 0x9, 0x1ff, 0x1b91, 0xfff, 0x1, 0xff, 0xc48, 0x4, 0x6, 0x1, 0x200, 0xfffffffd, 0x3, 0x10001, 0x800, 0x74, 0x7, 0xbdf, 0x327, 0x7, 0x6, 0x6, 0x1, 0xfffffff7, 0x7, 0x5, 0xfffffffb, 0x0, 0x3, 0x1000, 0xfffffff8, 0x12, 0x6, 0xa, 0x7, 0xff, 0x0, 0x0, 0x2, 0xfffffff6, 0x9, 0xc69, 0x2, 0x6, 0x1, 0x6, 0x6, 0x81, 0x2, 0x6de, 0x2, 0x3, 0x0, 0x1, 0x2, 0x3, 0x2, 0x4, 0x10000, 0x1, 0x31, 0x4, 0x2, 0xec9, 0x1, 0x6, 0x8, 0x1, 0xbb47, 0x100, 0x200, 0x0, 0x8a, 0xdfb, 0x0, 0x1, 0xa, 0xa9dc, 0x1, 0xb, 0x3, 0x6, 0xa73f, 0xe, 0xffffff80, 0xb3e5, 0x8, 0x3, 0x5, 0x9, 0x3, 0x202a6a87, 0xb, 0x1, 0x3, 0x0, 0x7, 0x0, 0xcea, 0xd, 0x7, 0xbecb, 0xab1, 0x1, 0x4, 0x9, 0x100, 0x2, 0x5, 0x6, 0x5, 0x7, 0x0, 0x6, 0xe, 0x3, 0x171, 0x7, 0x3, 0x5, 0x8, 0x7, 0x2, 0x248, 0xffffffff, 0x1, 0x80000001, 0x3ff, 0x6, 0xf29, 0x6, 0xd, 0x2, 0x1ff, 0xb24, 0x3, 0x7, 0xffffffff, 0x5, 0x1, 0x8001, 0x9, 0x2, 0x6, 0x2, 0x4, 0x5, 0x5, 0x8, 0x8, 0x7ff, 0x10, 0xff, 0x8, 0x3, 0x5847, 0xffff, 0x100, 0x2, 0x2, 0x5, 0x0, 0x3, 0x7f, 0x10, 0x5, 0xd, 0x9, 0x3, 0x560, 0x9, 0x3, 0x3, 0x3, 0xe822, 0x7, 0x8006, 0x9, 0x9, 0x9, 0x3, 0x3, 0x80000000, 0x9, 0x8, 0x1ff, 0x6, 0xfffffffd, 0xffffffca, 0x80000001, 0x401, 0xd, 0x9, 0xd, 0xd37, 0x9, 0x3, 0x1000, 0x1, 0xb, 0x5, 0x4, 0x9, 0xfffffffc, 0xffffff80, 0x1, 0x4, 0x5, 0x4, 0x6, 0x5, 0x3ff, 0x6, 0x7, 0x1, 0x8001, 0xff, 0x2, 0x3ff, 0x1, 0x4, 0x7fffffff, 0x2, 0x3, 0x4, 0xd, 0xfff, 0x18d2, 0x8, 0x8, 0xfffffe00, 0x5]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x8, 0x2, 0x0, 0x40, 0xf000, 0x1ce00272}, {0x3, 0x2, 0x9, 0x8, 0x4, 0x7fffffff}, 0x7322, 0x8, 0x5, 0x10, 0x4}}, @TCA_HTB_CTAB={0x404, 0x3, [0x7, 0x3, 0x8, 0x0, 0x5, 0x100, 0x3, 0x9, 0x80000001, 0x400, 0x81, 0x200, 0x6, 0x2, 0x3d7, 0x7, 0x2, 0xaa4, 0x1a, 0x0, 0xfe2, 0x8, 0x80000000, 0x9, 0x3, 0x1, 0x200, 0x8, 0x2, 0x1, 0x9, 0xfffffbff, 0x5, 0x8, 0x3, 0xfffffeff, 0x9, 0x6, 0x4, 0x7, 0xae, 0xe6de, 0x0, 0x1ff, 0x3, 0x6, 0x307c, 0xd0000000, 0x3, 0x8001, 0x80000000, 0x1, 0x80000001, 0x10001, 0x68832937, 0x0, 0x2ac3, 0x400000, 0xf, 0xef4, 0x6, 0x0, 0x68, 0x0, 0x6, 0x2, 0x204, 0xfffff6cd, 0x8001, 0xfffffffa, 0x0, 0x9, 0x8, 0x1, 0xd8, 0x8, 0x403ebd15, 0x3, 0x10, 0xad93, 0xa61, 0x8, 0xffffff80, 0x886, 0x2, 0x5, 0x5e8, 0x7ff, 0x7ff, 0x8000, 0xfffffffd, 0x4, 0x76, 0x6, 0x97b, 0x80000, 0x7, 0xc669, 0x2, 0x6, 0x0, 0x2, 0xfffffff8, 0x8, 0x3, 0x80000000, 0x7, 0x7, 0x10000, 0x3, 0x64, 0x21, 0x2, 0x1, 0x10e8303d, 0x8dc0, 0xfffffffc, 0x3ba, 0x80, 0x3, 0x5, 0x4, 0xb55, 0x8f8a, 0x9, 0x7, 0x73d, 0x0, 0x2, 0xc349, 0x2, 0x1ff, 0x8, 0x8, 0x3, 0x2, 0x28, 0x80000000, 0x204, 0x100, 0x10001, 0x5, 0x8000, 0xfffeffff, 0x1, 0xfffffffc, 0x4, 0x3, 0x5, 0x6, 0xb, 0x8, 0x81, 0x0, 0x6, 0x7ff, 0x9, 0x7, 0x3, 0x5, 0xfe000000, 0x0, 0x0, 0x0, 0x1, 0xa, 0x8, 0x1, 0x4, 0x1, 0xf, 0x0, 0x4a, 0x5, 0xde0000, 0x1ff, 0x1, 0x0, 0xfffeffff, 0x0, 0x800, 0x8, 0xffca, 0x3, 0x0, 0x8, 0x81, 0x1, 0x8, 0x5149, 0x4, 0x6, 0x0, 0x7, 0x9, 0x2, 0x3, 0x5, 0x8000, 0x263570c6, 0x80, 0xfffffffe, 0x7f, 0x0, 0x200, 0xa5, 0x4, 0x1, 0x8, 0x410001, 0xc, 0x7, 0x9, 0x5, 0x5643, 0x8, 0x1, 0xe, 0x80000000, 0xffff973f, 0x2, 0x3, 0x1a308e6e, 0x2, 0x9, 0x1000, 0x2, 0x4e, 0x10001, 0x1e3, 0x30, 0xade6, 0x1, 0xd29, 0x1fffc000, 0xb33c, 0x9, 0x5, 0x401, 0x2, 0x8, 0x3, 0xd, 0xfffffffd, 0x7, 0x9, 0x2, 0x78a4, 0x2, 0x7ff, 0x3, 0x39, 0xc, 0x57320297, 0x8, 0xfffffffe]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0xa7, 0x1}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x10ac}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd35186c937eec26f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) sendmsg$inet(r1, &(0x7f0000000980)={&(0x7f0000000300)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000500)="18edfd4314093f9d1ac976632bdd8d03ad880083de58e19463bdc672d7c8e180f4be90edcfba80705f32c5d3878ed2ac87", 0x31}, {&(0x7f0000000580)="d8062dc65f6720e64e502869c14a71e0d75c1258305769ee90f6c42fb4f4ee6d01a05585f7f2f7511e7631f6e5ff1c1afee995e8c8c92249f2a3c8631580333f71ee39d392d18301bf97f2335304b4ecff38a43d3227ddf4e0865d772f50428c9deac869ea644372a8837a5b413c6b08cfdfe2437d1f2f8c2448e748c767671605202f6c14168ed9e7498f5e1da7e5c58f1573041278b464b3f8f7e31a14d86877357115a4b224406834c376ebf6d9aec0d1fa664303270f69a78967927c15e21414b80b367f054e69872f4927fa89eb3573e3", 0xd3}, {&(0x7f0000000680)="ef5fb145ea8a3e51ac41357e2a189f368fa6b0ba719a19ac131b38c53ac52e3800c3c42a24baa097", 0x28}, {&(0x7f0000000740)="731edacdb22e3ed00438430f3b7d1977c270947706afdc8586be3efe7eca3401a367491258869352292b24b710cce7dd5c13cfc1b8939863abd53f80eb060fafc7d6b1f8313be7d846bc0fb8d4bdc18a2ce10bf01c9ba4559f8953e44d713816bd6e411488bbea98eab3cc5378e54847ec77db3905270ddfb39354860baefa79a4f5c6aa9aca9099114e84e18a4fb0bc5b60c5ce9d7adaddf210126e6afcc456fb95a175695f632b2b8724c9ffc1119b4fa0af58178cf0197d21313cf436da498318f2d7558035bb7535e17dbabc1319b9", 0xd1}, {&(0x7f0000000840)="ddaff0c58eab5f0e86d8912c96f4075f1a8497dc7273ae515397d6cf94361a5f81d17399726563a48c3c47a1e08f6c43a41bdae7a3405bf993b2774e79675b4a405c56fdae262d1d2077475b80ff79bd9780a6e581b7d62bfbc1df3e4140811389bbb171e02dd9acb894ab3fbff0778c882a6a60442bcafe", 0x78}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="280000000000000000000000a031642d254a83701414134410000300000008eeff00100000000000"], 0x28}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r6, @ANYBLOB="00002cbd7000fedbdf25030000000800030007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0a1}, 0x4000810) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x23, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) r8 = socket(0x3, 0x3, 0x0) sendto$rose(r7, &(0x7f0000000140)="31e28563ed7750496a3bca436ccfc18588b104d985f01c22f5022b4ccf984ccd9c134482f5556288ed29a52cecfab92fa4e499d1e1149cc5a13958bef1372c1a1d6ce7ca620eec28a88a5d269d684ec07e63101e90f5e008ae307bab821778f4510c68702ecc8b", 0x67, 0x4000000, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r10 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$mouse(&(0x7f00000001c0), 0x9, 0x100) 1.289452868s ago: executing program 3 (id=438): semop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x23782, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x2000) read(r2, &(0x7f00000000c0)=""/163, 0xd0140f23) 1.287200825s ago: executing program 2 (id=439): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000000000029"], 0x10}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000000008, 0x8b}, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x88000cc, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) 1.224467169s ago: executing program 0 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0xa, @pix_mp={0x3, 0x708, 0x33565348, 0x4, 0x1, [{0x6, 0x4}, {0x0, 0x75f7ea8a}, {0x4, 0x9ea9}, {0x6, 0x1}, {0xffffffdf, 0xffffffff}, {0x5, 0x72}, {0xe5a9, 0x5}, {0x3e92, 0x401}], 0x1f, 0x3, 0x4, 0x0, 0x3}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = mq_open(&(0x7f0000000300)='/dev/cpu/#/msr\x00', 0x2, 0x9, &(0x7f0000000340)={0x8, 0x8000000000000000, 0x7ff, 0x3}) syz_clone3(&(0x7f0000000640)={0x2000000, &(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400), {0x3a}, &(0x7f00000004c0)=""/168, 0xa8, &(0x7f0000000580)=""/142, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) mq_notify(r2, &(0x7f00000006c0)={0x0, 0x39, 0x2, @tid=r3}) (async) mq_notify(r2, &(0x7f00000006c0)={0x0, 0x39, 0x2, @tid=r3}) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) (async) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) (async) r4 = syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) readv(r5, &(0x7f0000000280)=[{&(0x7f0000002600)=""/46, 0x2e}, {&(0x7f0000000880)=""/204, 0xcc}, {&(0x7f0000000a00)=""/241, 0xf1}], 0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, &(0x7f00000002c0)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = accept$ax25(r4, &(0x7f0000000700)={{0x3, @default}, [@default, @remote, @default, @remote, @rose, @null, @remote, @bcast]}, &(0x7f00000000c0)=0x48) setsockopt$ax25_int(r7, 0x101, 0x7, &(0x7f0000000240)=0x1800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000018080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000018080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 220.868825ms ago: executing program 4 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ppoll(&(0x7f0000000000)=[{r0, 0x4905}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 2 (id=442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1}, 0x4040845) (fail_nth: 2) kernel console output (not intermixed with test programs): 95.226833][ T6163] input: syz1 as /devices/virtual/input/input6 [ 95.316571][ T977] usb 2-1: config 0 descriptor?? [ 95.421263][ T30] audit: type=1400 audit(1763797685.587:209): avc: denied { read } for pid=6148 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.482412][ T6165] FAULT_INJECTION: forcing a failure. [ 95.482412][ T6165] name failslab, interval 1, probability 0, space 0, times 1 [ 95.531577][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.562644][ T30] audit: type=1400 audit(1763797685.627:210): avc: denied { ioctl } for pid=6153 comm="syz.3.61" path="socket:[9290]" dev="sockfs" ino=9290 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.610230][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: syz.4.63 Not tainted syzkaller #0 PREEMPT(full) [ 95.610258][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.610268][ T6165] Call Trace: [ 95.610274][ T6165] [ 95.610281][ T6165] dump_stack_lvl+0x16c/0x1f0 [ 95.610304][ T6165] should_fail_ex+0x512/0x640 [ 95.610327][ T6165] ? fs_reclaim_acquire+0xae/0x150 [ 95.610351][ T6165] should_failslab+0xc2/0x120 [ 95.610374][ T6165] __kmalloc_noprof+0xdd/0x880 [ 95.610401][ T6165] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 95.610429][ T6165] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 95.610451][ T6165] tomoyo_realpath_from_path+0xc2/0x6e0 [ 95.610476][ T6165] ? tomoyo_profile+0x47/0x60 [ 95.610502][ T6165] tomoyo_path_number_perm+0x245/0x580 [ 95.610520][ T6165] ? tomoyo_path_number_perm+0x237/0x580 [ 95.610542][ T6165] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.610562][ T6165] ? find_held_lock+0x2b/0x80 [ 95.610609][ T6165] ? find_held_lock+0x2b/0x80 [ 95.610630][ T6165] ? hook_file_ioctl_common+0x145/0x410 [ 95.610658][ T6165] ? __fget_files+0x20e/0x3c0 [ 95.610681][ T6165] security_file_ioctl+0x9b/0x240 [ 95.610705][ T6165] __x64_sys_ioctl+0xb7/0x210 [ 95.610734][ T6165] do_syscall_64+0xcd/0xfa0 [ 95.610756][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.610776][ T6165] RIP: 0033:0x7fca2a78f749 [ 95.610792][ T6165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.610809][ T6165] RSP: 002b:00007fca2b678038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.610826][ T6165] RAX: ffffffffffffffda RBX: 00007fca2a9e5fa0 RCX: 00007fca2a78f749 [ 95.610839][ T6165] RDX: 0000200000000080 RSI: 00000000c0285629 RDI: 0000000000000003 [ 95.610851][ T6165] RBP: 00007fca2b678090 R08: 0000000000000000 R09: 0000000000000000 [ 95.610861][ T6165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.610872][ T6165] R13: 00007fca2a9e6038 R14: 00007fca2a9e5fa0 R15: 00007ffe0f8d6a28 [ 95.610906][ T6165] [ 95.610913][ T6165] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.878105][ T30] audit: type=1400 audit(1763797685.627:211): avc: denied { write } for pid=6153 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.898905][ T30] audit: type=1400 audit(1763797685.827:212): avc: denied { read } for pid=6156 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.918041][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 96.031346][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 96.037184][ T6151] Zero length message leads to an empty skb [ 96.041121][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 96.062281][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.071453][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.143357][ T6169] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 96.530746][ T9] usb 4-1: Product: syz [ 96.565764][ T9] usb 4-1: Manufacturer: syz [ 96.577327][ T977] logitech-djreceiver 0003:046D:C71F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 96.582899][ T9] usb 4-1: SerialNumber: syz [ 96.703910][ T9] usb 4-1: config 0 descriptor?? [ 97.296860][ T6176] tipc: Started in network mode [ 97.322100][ T6176] tipc: Node identity ac14140f, cluster identity 4711 [ 97.343880][ T977] usb 2-1: USB disconnect, device number 3 [ 97.357799][ T6176] tipc: New replicast peer: 255.255.255.255 [ 97.443072][ T6176] tipc: Enabled bearer , priority 10 [ 97.469001][ T6179] FAULT_INJECTION: forcing a failure. [ 97.469001][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.533794][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.4.67 Not tainted syzkaller #0 PREEMPT(full) [ 97.533822][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.533833][ T6179] Call Trace: [ 97.533839][ T6179] [ 97.533847][ T6179] dump_stack_lvl+0x16c/0x1f0 [ 97.533871][ T6179] should_fail_ex+0x512/0x640 [ 97.533900][ T6179] _copy_from_user+0x2e/0xd0 [ 97.533925][ T6179] move_addr_to_kernel+0x65/0x170 [ 97.533948][ T6179] __sys_sendto+0x1be/0x520 [ 97.533970][ T6179] ? __pfx___sys_sendto+0x10/0x10 [ 97.534011][ T6179] ? ksys_write+0x1ac/0x250 [ 97.534026][ T6179] ? __pfx_ksys_write+0x10/0x10 [ 97.534046][ T6179] __x64_sys_sendto+0xe0/0x1c0 [ 97.534068][ T6179] ? do_syscall_64+0x91/0xfa0 [ 97.534084][ T6179] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.534101][ T6179] do_syscall_64+0xcd/0xfa0 [ 97.534120][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.534138][ T6179] RIP: 0033:0x7fca2a78f749 [ 97.534154][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.534172][ T6179] RSP: 002b:00007fca2b678038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 97.534189][ T6179] RAX: ffffffffffffffda RBX: 00007fca2a9e5fa0 RCX: 00007fca2a78f749 [ 97.534202][ T6179] RDX: 000000000000000e RSI: 00002000000005c0 RDI: 0000000000000005 [ 97.534213][ T6179] RBP: 00007fca2b678090 R08: 00002000000001c0 R09: 0000000000000014 [ 97.534225][ T6179] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 97.534236][ T6179] R13: 00007fca2a9e6038 R14: 00007fca2a9e5fa0 R15: 00007ffe0f8d6a28 [ 97.534262][ T6179] [ 97.579160][ T6180] fido_id[6180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 97.585892][ T6185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.538293][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.575987][ T5860] tipc: Node number set to 2886997007 [ 98.587852][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.661355][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.62'. [ 99.088879][ T6202] netlink: 148 bytes leftover after parsing attributes in process `syz.4.73'. [ 100.018281][ T5887] usb 4-1: USB disconnect, device number 3 [ 100.221628][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 100.221642][ T30] audit: type=1400 audit(1763797691.197:220): avc: denied { create } for pid=6209 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.222645][ T6214] process 'syz.0.75' launched '/dev/fd/4' with NULL argv: empty string added [ 100.227675][ T30] audit: type=1400 audit(1763797691.207:221): avc: denied { connect } for pid=6209 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.353900][ T30] audit: type=1400 audit(1763797691.207:222): avc: denied { execute } for pid=6209 comm="syz.0.75" dev="hugetlbfs" ino=10476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 100.465487][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 100.536169][ T30] audit: type=1400 audit(1763797691.237:223): avc: denied { read write } for pid=6208 comm="syz.3.76" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.560847][ T30] audit: type=1400 audit(1763797691.237:224): avc: denied { open } for pid=6208 comm="syz.3.76" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.741290][ T30] audit: type=1400 audit(1763797691.237:225): avc: denied { write } for pid=6208 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.356200][ T30] audit: type=1400 audit(1763797691.237:226): avc: denied { connect } for pid=6208 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.449148][ T30] audit: type=1400 audit(1763797691.237:227): avc: denied { name_connect } for pid=6208 comm="syz.3.76" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 101.471238][ T5813] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.478840][ T9] usb 1-1: device descriptor read/64, error -71 [ 101.556633][ T30] audit: type=1400 audit(1763797691.247:228): avc: denied { shutdown } for pid=6208 comm="syz.3.76" lport=55934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.651302][ T30] audit: type=1400 audit(1763797691.257:229): avc: denied { append } for pid=6208 comm="syz.3.76" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.655089][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 101.770950][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 101.832603][ T5813] usb 3-1: device descriptor read/all, error -71 [ 101.938120][ T9] usb 1-1: device descriptor read/64, error -71 [ 102.048268][ T6230] tipc: Started in network mode [ 102.051809][ T9] usb usb1-port1: attempt power cycle [ 102.053797][ T6230] tipc: Node identity ac14140f, cluster identity 4711 [ 102.070658][ T6230] tipc: New replicast peer: 255.255.255.255 [ 102.077449][ T6230] tipc: Enabled bearer , priority 10 [ 102.402987][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 102.451765][ T9] usb 1-1: device descriptor read/8, error -71 [ 102.536108][ T6239] bridge0: port 3(gretap0) entered blocking state [ 102.543647][ T6239] bridge0: port 3(gretap0) entered disabled state [ 102.565170][ T6239] gretap0: entered allmulticast mode [ 102.606066][ T6239] gretap0: entered promiscuous mode [ 102.613628][ T6239] bridge0: port 3(gretap0) entered blocking state [ 102.620513][ T6239] bridge0: port 3(gretap0) entered forwarding state [ 102.753943][ T6242] netlink: 148 bytes leftover after parsing attributes in process `syz.3.84'. [ 103.201311][ T5887] tipc: Node number set to 2886997007 [ 103.366577][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 103.551631][ T9] usb 1-1: device descriptor read/8, error -71 [ 103.662652][ T9] usb usb1-port1: unable to enumerate USB device [ 104.366845][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 106.260056][ T6273] veth1_macvtap: left promiscuous mode [ 106.308208][ T6273] macsec0: entered promiscuous mode [ 106.379405][ T6273] macsec0: entered allmulticast mode [ 106.512359][ T6280] netlink: 120 bytes leftover after parsing attributes in process `syz.1.96'. [ 106.523181][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 106.532828][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 106.673999][ T6276] veth1_macvtap: entered promiscuous mode [ 106.716592][ T6276] veth1_macvtap: entered allmulticast mode [ 106.826996][ T6276] macsec0: left promiscuous mode [ 106.857258][ T6276] macsec0: left allmulticast mode [ 106.880293][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 106.880309][ T30] audit: type=1400 audit(1763797697.857:238): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 106.906405][ T6276] veth1_macvtap: left allmulticast mode [ 107.196943][ T6290] mkiss: ax0: crc mode is auto. [ 107.344985][ T6295] capability: warning: `syz.0.97' uses deprecated v2 capabilities in a way that may be insecure [ 107.551964][ T6292] 9pnet_fd: Insufficient options for proto=fd [ 108.563874][ T6308] netlink: 148 bytes leftover after parsing attributes in process `syz.1.102'. [ 109.483597][ T6315] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 109.590916][ T6318] FAULT_INJECTION: forcing a failure. [ 109.590916][ T6318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.638881][ T6319] netlink: 'syz.4.104': attribute type 1 has an invalid length. [ 109.774096][ T6318] CPU: 1 UID: 0 PID: 6318 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(full) [ 109.774124][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.774136][ T6318] Call Trace: [ 109.774142][ T6318] [ 109.774150][ T6318] dump_stack_lvl+0x16c/0x1f0 [ 109.774174][ T6318] should_fail_ex+0x512/0x640 [ 109.774203][ T6318] _copy_from_user+0x2e/0xd0 [ 109.774230][ T6318] copy_msghdr_from_user+0x98/0x160 [ 109.774257][ T6318] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 109.774298][ T6318] ___sys_sendmsg+0xfe/0x1d0 [ 109.774326][ T6318] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.774351][ T6318] ? __lock_acquire+0x622/0x1c90 [ 109.774407][ T6318] __sys_sendmsg+0x16d/0x220 [ 109.774434][ T6318] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.774480][ T6318] do_syscall_64+0xcd/0xfa0 [ 109.774502][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.774522][ T6318] RIP: 0033:0x7f4e5498f749 [ 109.774538][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.774556][ T6318] RSP: 002b:00007f4e558d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.774574][ T6318] RAX: ffffffffffffffda RBX: 00007f4e54be6090 RCX: 00007f4e5498f749 [ 109.774588][ T6318] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 109.774600][ T6318] RBP: 00007f4e558d3090 R08: 0000000000000000 R09: 0000000000000000 [ 109.774612][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.774623][ T6318] R13: 00007f4e54be6128 R14: 00007f4e54be6090 R15: 00007fff219d8fb8 [ 109.774661][ T6318] [ 110.042750][ T6315] bond1: entered promiscuous mode [ 110.047842][ T6315] bond1: entered allmulticast mode [ 110.053360][ T6315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.141990][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 110.214506][ T30] audit: type=1400 audit(1763797701.197:239): avc: denied { connect } for pid=6317 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.217356][ T6319] nbd: illegal input index 65544 [ 110.261297][ T30] audit: type=1400 audit(1763797701.217:240): avc: denied { write } for pid=6317 comm="syz.4.104" path="socket:[9606]" dev="sockfs" ino=9606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.504684][ T30] audit: type=1400 audit(1763797701.217:241): avc: denied { read } for pid=6317 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.158007][ T30] audit: type=1400 audit(1763797702.137:242): avc: denied { ioctl } for pid=6325 comm="syz.0.105" path="socket:[10721]" dev="sockfs" ino=10721 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.733517][ T6350] netlink: 120 bytes leftover after parsing attributes in process `syz.0.109'. [ 111.743175][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 111.752355][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 112.790578][ T30] audit: type=1400 audit(1763797703.747:243): avc: denied { write } for pid=6354 comm="syz.1.112" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.981244][ T30] audit: type=1400 audit(1763797703.747:244): avc: denied { open } for pid=6354 comm="syz.1.112" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.082493][ T6363] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 114.505654][ T6379] netlink: 168 bytes leftover after parsing attributes in process `syz.1.119'. [ 114.858303][ T30] audit: type=1400 audit(1763797705.837:245): avc: denied { open } for pid=6385 comm="syz.4.120" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 114.944960][ T30] audit: type=1400 audit(1763797705.837:246): avc: denied { ioctl } for pid=6385 comm="syz.4.120" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 115.194870][ T6400] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 115.852547][ T6407] FAULT_INJECTION: forcing a failure. [ 115.852547][ T6407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.881735][ T30] audit: type=1400 audit(1763797706.837:247): avc: denied { ioctl } for pid=6406 comm="syz.0.124" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 115.907310][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 115.907334][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.907343][ T6407] Call Trace: [ 115.907349][ T6407] [ 115.907356][ T6407] dump_stack_lvl+0x16c/0x1f0 [ 115.907376][ T6407] should_fail_ex+0x512/0x640 [ 115.907401][ T6407] _copy_from_user+0x2e/0xd0 [ 115.907425][ T6407] move_addr_to_kernel+0x65/0x170 [ 115.907448][ T6407] __sys_connect+0xb1/0x160 [ 115.907467][ T6407] ? __pfx___sys_connect+0x10/0x10 [ 115.907496][ T6407] ? __pfx_ksys_write+0x10/0x10 [ 115.907519][ T6407] __x64_sys_connect+0x72/0xb0 [ 115.907539][ T6407] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.907555][ T6407] do_syscall_64+0xcd/0xfa0 [ 115.907574][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.907593][ T6407] RIP: 0033:0x7f02fd78f749 [ 115.907606][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.907623][ T6407] RSP: 002b:00007f02fb9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 115.907641][ T6407] RAX: ffffffffffffffda RBX: 00007f02fd9e5fa0 RCX: 00007f02fd78f749 [ 115.907653][ T6407] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000004 [ 115.907663][ T6407] RBP: 00007f02fb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.907674][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.907685][ T6407] R13: 00007f02fd9e6038 R14: 00007f02fd9e5fa0 R15: 00007fff0b708d48 [ 115.907711][ T6407] [ 116.067434][ T30] audit: type=1400 audit(1763797706.887:248): avc: denied { shutdown } for pid=6406 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.132574][ T6414] ======================================================= [ 116.132574][ T6414] WARNING: The mand mount option has been deprecated and [ 116.132574][ T6414] and is ignored by this kernel. Remove the mand [ 116.132574][ T6414] option from the mount to silence this warning. [ 116.132574][ T6414] ======================================================= [ 116.319611][ T30] audit: type=1400 audit(1763797707.297:249): avc: denied { mount } for pid=6411 comm="syz.4.126" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 116.918171][ T30] audit: type=1400 audit(1763797707.897:250): avc: denied { mounton } for pid=6411 comm="syz.4.126" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 117.283438][ T30] audit: type=1400 audit(1763797708.257:251): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 117.654290][ T6424] CUSE: unknown device info "" [ 117.659395][ T6424] CUSE: zero length info key specified [ 117.838105][ T6429] FAULT_INJECTION: forcing a failure. [ 117.838105][ T6429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.852119][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.2.132 Not tainted syzkaller #0 PREEMPT(full) [ 117.852135][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.852142][ T6429] Call Trace: [ 117.852146][ T6429] [ 117.852150][ T6429] dump_stack_lvl+0x16c/0x1f0 [ 117.852166][ T6429] should_fail_ex+0x512/0x640 [ 117.852182][ T6429] _copy_from_user+0x2e/0xd0 [ 117.852196][ T6429] copy_msghdr_from_user+0x98/0x160 [ 117.852211][ T6429] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 117.852232][ T6429] ___sys_sendmsg+0xfe/0x1d0 [ 117.852247][ T6429] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.852260][ T6429] ? __lock_acquire+0x622/0x1c90 [ 117.852289][ T6429] __sys_sendmsg+0x16d/0x220 [ 117.852306][ T6429] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.852329][ T6429] do_syscall_64+0xcd/0xfa0 [ 117.852341][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.852352][ T6429] RIP: 0033:0x7f4e5498f749 [ 117.852362][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.852372][ T6429] RSP: 002b:00007f4e558f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.852383][ T6429] RAX: ffffffffffffffda RBX: 00007f4e54be5fa0 RCX: 00007f4e5498f749 [ 117.852390][ T6429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 117.852397][ T6429] RBP: 00007f4e558f4090 R08: 0000000000000000 R09: 0000000000000000 [ 117.852403][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.852409][ T6429] R13: 00007f4e54be6038 R14: 00007f4e54be5fa0 R15: 00007fff219d8fb8 [ 117.852423][ T6429] [ 118.897851][ T30] audit: type=1400 audit(1763797709.207:252): avc: denied { listen } for pid=6433 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.141124][ T30] audit: type=1400 audit(1763797710.117:253): avc: denied { create } for pid=6445 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.169508][ T6451] tipc: Enabled bearer , priority 0 [ 119.178655][ T6451] syzkaller0: entered promiscuous mode [ 119.185418][ T30] audit: type=1400 audit(1763797710.147:254): avc: denied { read } for pid=6445 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.191818][ T6451] syzkaller0: entered allmulticast mode [ 119.253612][ T30] audit: type=1400 audit(1763797710.227:255): avc: denied { create } for pid=6453 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.279088][ T30] audit: type=1400 audit(1763797710.227:256): avc: denied { setopt } for pid=6453 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.309649][ T30] audit: type=1400 audit(1763797710.227:257): avc: denied { create } for pid=6453 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.330254][ T6454] tipc: Started in network mode [ 119.337514][ T6454] tipc: Node identity 32cb7f177445, cluster identity 4711 [ 119.337582][ T30] audit: type=1400 audit(1763797710.237:258): avc: denied { accept } for pid=6453 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.349811][ T6454] tipc: Enabled bearer , priority 0 [ 119.367627][ T30] audit: type=1400 audit(1763797710.287:259): avc: denied { getopt } for pid=6453 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.394644][ T6458] tipc: Resetting bearer [ 119.414258][ T6457] syzkaller0: entered promiscuous mode [ 119.424090][ T6457] syzkaller0: entered allmulticast mode [ 119.436720][ T6448] tipc: Resetting bearer [ 119.462451][ T6448] tipc: Disabling bearer [ 119.510433][ T30] audit: type=1400 audit(1763797710.487:260): avc: denied { ioctl } for pid=6453 comm="syz.4.138" path="socket:[9797]" dev="sockfs" ino=9797 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.663999][ T6453] tipc: Resetting bearer [ 119.857535][ T6453] tipc: Disabling bearer [ 120.077050][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 120.699434][ T6474] FAULT_INJECTION: forcing a failure. [ 120.699434][ T6474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.712698][ T6474] CPU: 0 UID: 0 PID: 6474 Comm: syz.3.142 Not tainted syzkaller #0 PREEMPT(full) [ 120.712721][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.712730][ T6474] Call Trace: [ 120.712737][ T6474] [ 120.712744][ T6474] dump_stack_lvl+0x16c/0x1f0 [ 120.712765][ T6474] should_fail_ex+0x512/0x640 [ 120.712789][ T6474] _copy_from_user+0x2e/0xd0 [ 120.712811][ T6474] add_rule_path_beneath+0xac/0x4d0 [ 120.712834][ T6474] ? __pfx_add_rule_path_beneath+0x10/0x10 [ 120.712860][ T6474] ? fput+0x9b/0xd0 [ 120.712885][ T6474] __x64_sys_landlock_add_rule+0x1a9/0x240 [ 120.712910][ T6474] do_syscall_64+0xcd/0xfa0 [ 120.712929][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.712948][ T6474] RIP: 0033:0x7f1aedd8f749 [ 120.712964][ T6474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.712987][ T6474] RSP: 002b:00007f1aeec64038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bd [ 120.713006][ T6474] RAX: ffffffffffffffda RBX: 00007f1aedfe6090 RCX: 00007f1aedd8f749 [ 120.713016][ T6474] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000007 [ 120.713026][ T6474] RBP: 00007f1aeec64090 R08: 0000000000000000 R09: 0000000000000000 [ 120.713036][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.713046][ T6474] R13: 00007f1aedfe6128 R14: 00007f1aedfe6090 R15: 00007ffdf3bdfae8 [ 120.713072][ T6474] [ 121.271998][ T6478] tipc: Enabled bearer , priority 0 [ 121.347276][ T6478] syzkaller0: entered promiscuous mode [ 121.392392][ T5930] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.401820][ T6478] syzkaller0: entered allmulticast mode [ 121.590415][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.745037][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 121.893249][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.024126][ T5930] usb 5-1: config 0 descriptor?? [ 122.074432][ T6478] tipc: Resetting bearer [ 122.641599][ T6495] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 123.062689][ T5930] logitech-djreceiver 0003:046D:C71F.0003: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 123.115122][ T6477] tipc: Resetting bearer [ 123.223536][ T5930] usb 5-1: USB disconnect, device number 4 [ 123.250138][ T6497] fido_id[6497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 123.250870][ T6477] tipc: Disabling bearer [ 123.338759][ T30] audit: type=1400 audit(1763797714.317:261): avc: denied { ioctl } for pid=6498 comm="syz.2.150" path="socket:[9871]" dev="sockfs" ino=9871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.387680][ T6500] binder: 6498:6500 ioctl c00c6211 0 returned -14 [ 123.398446][ T6500] FAULT_INJECTION: forcing a failure. [ 123.398446][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.411609][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(full) [ 123.411637][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.411649][ T6500] Call Trace: [ 123.411657][ T6500] [ 123.411665][ T6500] dump_stack_lvl+0x16c/0x1f0 [ 123.411688][ T6500] should_fail_ex+0x512/0x640 [ 123.411713][ T6500] _copy_from_user+0x2e/0xd0 [ 123.411740][ T6500] core_sys_select+0x2c8/0xc20 [ 123.411768][ T6500] ? __pfx_core_sys_select+0x10/0x10 [ 123.411792][ T6500] ? __pfx___schedule+0x10/0x10 [ 123.411843][ T6500] ? set_user_sigmask+0x21b/0x2b0 [ 123.411867][ T6500] ? __pfx_set_user_sigmask+0x10/0x10 [ 123.411891][ T6500] ? do_pselect.constprop.0+0x82/0x1e0 [ 123.411915][ T6500] do_pselect.constprop.0+0x19f/0x1e0 [ 123.411942][ T6500] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 123.411974][ T6500] __x64_sys_pselect6+0x182/0x240 [ 123.411996][ T6500] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 123.412025][ T6500] do_syscall_64+0xcd/0xfa0 [ 123.412048][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.412068][ T6500] RIP: 0033:0x7f4e5498f749 [ 123.412084][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.412102][ T6500] RSP: 002b:00007f4e558d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 123.412120][ T6500] RAX: ffffffffffffffda RBX: 00007f4e54be6090 RCX: 00007f4e5498f749 [ 123.412133][ T6500] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 123.412145][ T6500] RBP: 00007f4e558d3090 R08: 0000000000000000 R09: 0000000000000000 [ 123.412157][ T6500] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 123.412169][ T6500] R13: 00007f4e54be6128 R14: 00007f4e54be6090 R15: 00007fff219d8fb8 [ 123.412198][ T6500] [ 124.050266][ T30] audit: type=1400 audit(1763797714.317:262): avc: denied { create } for pid=6498 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.173128][ T30] audit: type=1400 audit(1763797714.367:263): avc: denied { create } for pid=6498 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.352155][ T30] audit: type=1400 audit(1763797715.327:264): avc: denied { bind } for pid=6501 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.104633][ T30] audit: type=1400 audit(1763797716.087:265): avc: denied { name_bind } for pid=6511 comm="syz.2.154" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 125.362834][ T6513] FAULT_INJECTION: forcing a failure. [ 125.362834][ T6513] name failslab, interval 1, probability 0, space 0, times 0 [ 125.467034][ T6513] CPU: 0 UID: 0 PID: 6513 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(full) [ 125.467063][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.467075][ T6513] Call Trace: [ 125.467082][ T6513] [ 125.467090][ T6513] dump_stack_lvl+0x16c/0x1f0 [ 125.467115][ T6513] should_fail_ex+0x512/0x640 [ 125.467139][ T6513] ? fs_reclaim_acquire+0xae/0x150 [ 125.467166][ T6513] should_failslab+0xc2/0x120 [ 125.467190][ T6513] __kmalloc_noprof+0xdd/0x880 [ 125.467218][ T6513] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 125.467248][ T6513] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 125.467271][ T6513] tomoyo_realpath_from_path+0xc2/0x6e0 [ 125.467298][ T6513] ? tomoyo_profile+0x47/0x60 [ 125.467327][ T6513] tomoyo_path_number_perm+0x245/0x580 [ 125.467346][ T6513] ? tomoyo_path_number_perm+0x237/0x580 [ 125.467369][ T6513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.467391][ T6513] ? find_held_lock+0x2b/0x80 [ 125.467443][ T6513] ? find_held_lock+0x2b/0x80 [ 125.467467][ T6513] ? hook_file_ioctl_common+0x145/0x410 [ 125.467501][ T6513] ? __fget_files+0x20e/0x3c0 [ 125.467533][ T6513] security_file_ioctl+0x9b/0x240 [ 125.467558][ T6513] __x64_sys_ioctl+0xb7/0x210 [ 125.467591][ T6513] do_syscall_64+0xcd/0xfa0 [ 125.467613][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.467634][ T6513] RIP: 0033:0x7f4e5498f749 [ 125.467650][ T6513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.467668][ T6513] RSP: 002b:00007f4e558f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.467687][ T6513] RAX: ffffffffffffffda RBX: 00007f4e54be5fa0 RCX: 00007f4e5498f749 [ 125.467701][ T6513] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 000000000000000f [ 125.467713][ T6513] RBP: 00007f4e558f4090 R08: 0000000000000000 R09: 0000000000000000 [ 125.467725][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.467737][ T6513] R13: 00007f4e54be6038 R14: 00007f4e54be5fa0 R15: 00007fff219d8fb8 [ 125.467767][ T6513] [ 125.665678][ T6502] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.677433][ T6513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.762109][ T6519] netlink: 152 bytes leftover after parsing attributes in process `syz.1.156'. [ 125.885359][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.157'. [ 126.011487][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.157'. [ 126.118359][ T6522] input: syz1 as /devices/virtual/input/input7 [ 126.271358][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.413566][ T30] audit: type=1400 audit(1763797717.387:266): avc: denied { read append } for pid=6527 comm="syz.2.159" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 126.442159][ T6502] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.470247][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 126.480274][ T6532] netlink: 116 bytes leftover after parsing attributes in process `syz.2.159'. [ 126.529150][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 126.578543][ T6502] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.621289][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 126.640543][ T30] audit: type=1400 audit(1763797717.407:267): avc: denied { open } for pid=6527 comm="syz.2.159" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 126.687026][ T5887] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 126.701491][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 126.710016][ T30] audit: type=1400 audit(1763797717.407:268): avc: denied { ioctl } for pid=6527 comm="syz.2.159" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 126.764527][ T5887] usb 2-1: Product: syz [ 126.801313][ T5887] usb 2-1: Manufacturer: syz [ 126.811275][ T5887] usb 2-1: SerialNumber: syz [ 126.827416][ T6502] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.828499][ T5887] usb 2-1: config 0 descriptor?? [ 127.278418][ T6542] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 128.014221][ T6545] binder: 6544:6545 ioctl c0306201 200000000040 returned -22 [ 128.076262][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.103112][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.309321][ T6548] bridge0: port 3(gretap0) entered blocking state [ 128.317190][ T6548] bridge0: port 3(gretap0) entered disabled state [ 128.324996][ T6548] gretap0: entered allmulticast mode [ 128.423720][ T6548] gretap0: entered promiscuous mode [ 128.432312][ T6548] bridge0: port 3(gretap0) entered blocking state [ 128.439002][ T6548] bridge0: port 3(gretap0) entered forwarding state [ 128.507532][ T30] audit: type=1400 audit(1763797719.487:269): avc: denied { accept } for pid=6549 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 128.551887][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.570160][ T6402] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.594909][ T6552] netlink: 148 bytes leftover after parsing attributes in process `syz.4.165'. [ 128.610139][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.833136][ T3575] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.345289][ T5938] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.603128][ T5938] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 129.642321][ T5938] usb 3-1: config 0 has no interface number 0 [ 129.654594][ T5938] usb 3-1: config 0 interface 108 altsetting 253 bulk endpoint 0xE has invalid maxpacket 1024 [ 129.682344][ T977] usb 2-1: USB disconnect, device number 4 [ 129.828310][ T5938] usb 3-1: config 0 interface 108 has no altsetting 0 [ 130.433405][ T5938] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= e.b7 [ 130.641641][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.663040][ T6564] bridge0: port 3(gretap0) entered blocking state [ 130.682195][ T6564] bridge0: port 3(gretap0) entered disabled state [ 130.695260][ T6564] gretap0: entered allmulticast mode [ 130.790168][ T30] audit: type=1400 audit(1763797721.677:270): avc: denied { execute } for pid=6561 comm="syz.4.169" path="/memory.events.local" dev="ramfs" ino=11083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 130.829740][ T30] audit: type=1400 audit(1763797721.757:271): avc: denied { setopt } for pid=6561 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.861914][ T5938] usb 3-1: config 0 descriptor?? [ 130.873574][ T6564] gretap0: entered promiscuous mode [ 130.880668][ T6564] bridge0: port 3(gretap0) entered blocking state [ 130.887291][ T6564] bridge0: port 3(gretap0) entered forwarding state [ 130.902049][ T6550] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 130.945805][ T5938] usbserial_generic 3-1:0.108: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 131.131304][ T5938] usbserial_generic 3-1:0.108: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 131.234939][ T5938] usbserial_generic 3-1:0.108: generic converter detected [ 131.825113][ T977] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 131.878022][ T5938] usb 3-1: generic converter now attached to ttyUSB0 [ 131.911539][ T5938] usb 3-1: USB disconnect, device number 6 [ 132.061205][ T5938] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 132.083867][ T977] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 132.096611][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.116514][ T5938] usbserial_generic 3-1:0.108: device disconnected [ 132.361562][ T977] usb 2-1: Product: syz [ 132.365752][ T977] usb 2-1: Manufacturer: syz [ 132.451494][ T30] audit: type=1400 audit(1763797723.397:272): avc: denied { create } for pid=6579 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.464143][ T977] usb 2-1: SerialNumber: syz [ 132.510668][ T6592] 9pnet_fd: Insufficient options for proto=fd [ 132.531723][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.172'. [ 132.572571][ T977] usb 2-1: config 0 descriptor?? [ 132.605879][ T977] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 132.615845][ T6595] netlink: 148 bytes leftover after parsing attributes in process `syz.0.175'. [ 132.804817][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.811214][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.826067][ T30] audit: type=1400 audit(1763797723.397:273): avc: denied { write } for pid=6579 comm="syz.4.172" path="socket:[10191]" dev="sockfs" ino=10191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 133.840363][ T30] audit: type=1400 audit(1763797723.397:274): avc: denied { read } for pid=6579 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 133.861674][ T30] audit: type=1400 audit(1763797723.407:275): avc: denied { write } for pid=6579 comm="syz.4.172" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.929568][ T30] audit: type=1400 audit(1763797723.487:276): avc: denied { read } for pid=6579 comm="syz.4.172" dev="sockfs" ino=11103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.557008][ T5938] usb 2-1: USB disconnect, device number 5 [ 134.623143][ T30] audit: type=1400 audit(1763797725.607:277): avc: denied { ioctl } for pid=6612 comm="syz.1.179" path="socket:[11127]" dev="sockfs" ino=11127 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.623702][ T6627] 9pnet_fd: Insufficient options for proto=fd [ 135.633762][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 135.792081][ T30] audit: type=1400 audit(1763797726.737:278): avc: denied { search } for pid=5477 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.853659][ T30] audit: type=1400 audit(1763797726.767:279): avc: denied { search } for pid=5477 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.892560][ T30] audit: type=1400 audit(1763797726.767:280): avc: denied { search } for pid=5477 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.914534][ T30] audit: type=1400 audit(1763797726.767:281): avc: denied { read } for pid=5477 comm="dhcpcd" name="n101" dev="tmpfs" ino=2697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.046252][ T30] audit: type=1400 audit(1763797726.767:282): avc: denied { open } for pid=5477 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.585879][ T30] audit: type=1400 audit(1763797726.767:283): avc: denied { getattr } for pid=5477 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.752740][ T30] audit: type=1400 audit(1763797727.107:284): avc: denied { mount } for pid=6628 comm="syz.0.183" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.831417][ T30] audit: type=1400 audit(1763797727.757:285): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.074567][ T30] audit: type=1400 audit(1763797728.057:286): avc: denied { read open } for pid=6644 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.201573][ T30] audit: type=1400 audit(1763797728.057:287): avc: denied { getattr } for pid=6644 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.284433][ T6648] netlink: 148 bytes leftover after parsing attributes in process `syz.4.188'. [ 138.224941][ T6655] netlink: 'syz.0.189': attribute type 4 has an invalid length. [ 138.257269][ T6655] netlink: 'syz.0.189': attribute type 4 has an invalid length. [ 140.293087][ T6675] netlink: 152 bytes leftover after parsing attributes in process `syz.2.193'. [ 140.899231][ T6681] input: syz1 as /devices/virtual/input/input8 [ 141.105765][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 141.105780][ T30] audit: type=1400 audit(1763797732.077:294): avc: denied { ioctl } for pid=6670 comm="syz.2.193" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.341636][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.571373][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 142.181626][ T30] audit: type=1400 audit(1763797732.127:295): avc: denied { getopt } for pid=6686 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.202732][ T30] audit: type=1400 audit(1763797732.237:296): avc: denied { bind } for pid=6685 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.227140][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 142.274830][ T30] audit: type=1400 audit(1763797733.257:297): avc: denied { remove_name } for pid=6692 comm="rm" name="resolv.conf.bnep0.link" dev="tmpfs" ino=2741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.558078][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 142.749309][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.781208][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.789406][ T9] usb 3-1: Product: syz [ 142.801554][ T9] usb 3-1: Manufacturer: syz [ 142.806173][ T9] usb 3-1: SerialNumber: syz [ 142.911915][ T9] usb 3-1: config 0 descriptor?? [ 143.109830][ T30] audit: type=1400 audit(1763797733.327:298): avc: denied { unlink } for pid=6692 comm="rm" name="resolv.conf.bnep0.link" dev="tmpfs" ino=2741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.167790][ T5133] Bluetooth: hci4: link tx timeout [ 143.173741][ T5133] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.896045][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.905373][ T30] audit: type=1400 audit(1763797734.867:299): avc: denied { getopt } for pid=6704 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.929341][ T6714] 9pnet_fd: Insufficient options for proto=fd [ 143.937742][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 144.011329][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.065616][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.108477][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 144.128891][ T5812] Bluetooth: hci4: link tx timeout [ 144.134123][ T5812] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.171281][ T5812] Bluetooth: hci4: link tx timeout [ 144.176591][ T5812] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.228638][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.419844][ T5892] usb 4-1: config 0 has no interfaces? [ 144.440082][ T5892] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.480254][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.480669][ T5812] Bluetooth: hci4: link tx timeout [ 144.494623][ T5812] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.505513][ T5812] Bluetooth: hci4: link tx timeout [ 144.510784][ T5812] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.536688][ T5892] usb 4-1: config 0 descriptor?? [ 144.745764][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.845555][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 144.883448][ T977] usb 3-1: USB disconnect, device number 7 [ 144.941220][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 144.950449][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.965592][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.185068][ T9] usb 1-1: config 0 has no interfaces? [ 145.257028][ T9] usb 1-1: New USB device found, idVendor=5050, idProduct=0900, bcdDevice=b3.ef [ 145.311483][ T5133] Bluetooth: hci4: command 0x0406 tx timeout [ 145.331244][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.400154][ T9] usb 1-1: Product: syz [ 145.411019][ T9] usb 1-1: Manufacturer: syz [ 145.420363][ T9] usb 1-1: SerialNumber: syz [ 145.473621][ T9] usb 1-1: config 0 descriptor?? [ 146.181365][ T9] usb 4-1: USB disconnect, device number 4 [ 146.213373][ T977] usb 1-1: USB disconnect, device number 7 [ 146.263196][ T6755] netlink: 148 bytes leftover after parsing attributes in process `syz.3.210'. [ 147.459426][ T6770] kvm: pic: non byte write [ 148.349261][ T6772] pim6reg: entered allmulticast mode [ 148.701767][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.797364][ T6787] netlink: 148 bytes leftover after parsing attributes in process `syz.1.216'. [ 148.963038][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.079108][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.173047][ T6792] netlink: 88 bytes leftover after parsing attributes in process `syz.2.217'. [ 149.501994][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.775429][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 149.794317][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.981861][ T9] usb 1-1: config 0 descriptor?? [ 150.232701][ T6803] netlink: 148 bytes leftover after parsing attributes in process `syz.4.221'. [ 150.411368][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.420109][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.436416][ T6779] devpts: Bad value for 'max' [ 150.443182][ T30] audit: type=1400 audit(1763797741.427:300): avc: denied { listen } for pid=6778 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.467799][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 150.477173][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.481742][ T977] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 150.497499][ T9] usb 1-1: USB disconnect, device number 8 [ 150.729718][ T977] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 150.770242][ T977] usb 3-1: config 0 has no interface number 0 [ 150.824274][ T977] usb 3-1: New USB device found, idVendor=10d2, idProduct=7186, bcdDevice=23.a0 [ 150.920659][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.009188][ T977] usb 3-1: Product: syz [ 151.018875][ T977] usb 3-1: Manufacturer: syz [ 151.030043][ T977] usb 3-1: SerialNumber: syz [ 151.050562][ T977] usb 3-1: config 0 descriptor?? [ 151.221559][ T30] audit: type=1400 audit(1763797742.187:301): avc: denied { bind } for pid=6807 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.269158][ T30] audit: type=1400 audit(1763797742.247:302): avc: denied { bind } for pid=6809 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.300324][ T30] audit: type=1400 audit(1763797742.247:303): avc: denied { name_bind } for pid=6809 comm="syz.1.222" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 151.332474][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.344535][ T30] audit: type=1400 audit(1763797742.247:304): avc: denied { node_bind } for pid=6809 comm="syz.1.222" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 151.368119][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.384987][ T6817] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 151.399273][ T977] usblcd 3-1:0.53: USBLCD model not supported. [ 151.416293][ T977] usb 3-1: USB disconnect, device number 8 [ 151.586731][ T30] audit: type=1400 audit(1763797742.517:305): avc: denied { create } for pid=6816 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.801176][ T30] audit: type=1400 audit(1763797742.557:306): avc: denied { setopt } for pid=6816 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.017501][ T30] audit: type=1400 audit(1763797742.697:307): avc: denied { write } for pid=6807 comm="syz.0.223" name="ip_tables_matches" dev="proc" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 152.207204][ T6821] ptrace attach of ""[6820] was attempted by "./syz-executor exec"[6821] [ 152.704513][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 152.711242][ T30] audit: type=1400 audit(1763797743.687:308): avc: denied { ioctl } for pid=6816 comm="syz.3.224" path="socket:[12753]" dev="sockfs" ino=12753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.748041][ T30] audit: type=1400 audit(1763797743.687:309): avc: denied { bind } for pid=6816 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.853180][ T6837] netlink: 92 bytes leftover after parsing attributes in process `syz.4.226'. [ 154.513204][ T6845] netlink: 88 bytes leftover after parsing attributes in process `syz.1.230'. [ 155.515472][ T6854] netlink: 148 bytes leftover after parsing attributes in process `syz.1.232'. [ 155.729093][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 156.608908][ T6883] FAULT_INJECTION: forcing a failure. [ 156.608908][ T6883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.661293][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz.4.238 Not tainted syzkaller #0 PREEMPT(full) [ 156.661320][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.661333][ T6883] Call Trace: [ 156.661340][ T6883] [ 156.661348][ T6883] dump_stack_lvl+0x16c/0x1f0 [ 156.661373][ T6883] should_fail_ex+0x512/0x640 [ 156.661402][ T6883] _copy_from_user+0x2e/0xd0 [ 156.661428][ T6883] copy_msghdr_from_user+0x98/0x160 [ 156.661456][ T6883] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 156.661496][ T6883] ___sys_sendmsg+0xfe/0x1d0 [ 156.661523][ T6883] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.661548][ T6883] ? __lock_acquire+0x622/0x1c90 [ 156.661602][ T6883] __sys_sendmsg+0x16d/0x220 [ 156.661629][ T6883] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.661674][ T6883] do_syscall_64+0xcd/0xfa0 [ 156.661696][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.661717][ T6883] RIP: 0033:0x7fca2a78f749 [ 156.661733][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.661752][ T6883] RSP: 002b:00007fca2b678038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.661771][ T6883] RAX: ffffffffffffffda RBX: 00007fca2a9e5fa0 RCX: 00007fca2a78f749 [ 156.661785][ T6883] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 156.661797][ T6883] RBP: 00007fca2b678090 R08: 0000000000000000 R09: 0000000000000000 [ 156.661810][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.661822][ T6883] R13: 00007fca2a9e6038 R14: 00007fca2a9e5fa0 R15: 00007ffe0f8d6a28 [ 156.661851][ T6883] [ 157.496959][ T6891] 9pnet_fd: Insufficient options for proto=fd [ 157.505341][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 158.098756][ T6911] netlink: 64 bytes leftover after parsing attributes in process `syz.4.242'. [ 158.161511][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 158.161527][ T30] audit: type=1400 audit(1763797749.137:315): avc: denied { watch watch_reads } for pid=6902 comm="syz.4.242" path="/52" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 159.708688][ T6929] netlink: 148 bytes leftover after parsing attributes in process `syz.3.248'. [ 159.916844][ T30] audit: type=1400 audit(1763797750.867:316): avc: denied { create } for pid=6919 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 160.538676][ T30] audit: type=1326 audit(1763797751.517:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.2.249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e5498f749 code=0x0 [ 160.774827][ T30] audit: type=1400 audit(1763797751.757:318): avc: denied { ioctl } for pid=6919 comm="syz.0.247" path="socket:[11842]" dev="sockfs" ino=11842 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 160.835131][ T30] audit: type=1400 audit(1763797751.807:319): avc: denied { write } for pid=6919 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 161.036777][ T30] audit: type=1400 audit(1763797751.917:320): avc: denied { bind } for pid=6945 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.036824][ T30] audit: type=1400 audit(1763797751.997:321): avc: denied { write } for pid=6945 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 161.036863][ T30] audit: type=1400 audit(1763797752.007:322): avc: denied { read } for pid=6945 comm="syz.3.251" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.036899][ T30] audit: type=1400 audit(1763797752.007:323): avc: denied { open } for pid=6945 comm="syz.3.251" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.036940][ T30] audit: type=1400 audit(1763797752.007:324): avc: denied { ioctl } for pid=6945 comm="syz.3.251" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.104424][ T6920] lec:lec_atm_close: lec0: Shut down! [ 162.168985][ T6971] : renamed from vlan0 (while UP) [ 163.280248][ T6983] FAULT_INJECTION: forcing a failure. [ 163.280248][ T6983] name failslab, interval 1, probability 0, space 0, times 0 [ 163.293107][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.1.256 Not tainted syzkaller #0 PREEMPT(full) [ 163.293135][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.293147][ T6983] Call Trace: [ 163.293154][ T6983] [ 163.293162][ T6983] dump_stack_lvl+0x16c/0x1f0 [ 163.293187][ T6983] should_fail_ex+0x512/0x640 [ 163.293211][ T6983] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 163.293244][ T6983] should_failslab+0xc2/0x120 [ 163.293269][ T6983] kmem_cache_alloc_noprof+0x75/0x6e0 [ 163.293298][ T6983] ? getname_flags.part.0+0x4c/0x550 [ 163.293331][ T6983] ? getname_flags.part.0+0x4c/0x550 [ 163.293357][ T6983] getname_flags.part.0+0x4c/0x550 [ 163.293387][ T6983] getname_flags+0x93/0xf0 [ 163.293407][ T6983] do_sys_openat2+0xb8/0x1d0 [ 163.293433][ T6983] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.293460][ T6983] ? __pfx___schedule+0x10/0x10 [ 163.293488][ T6983] ? __fget_files+0x20e/0x3c0 [ 163.293515][ T6983] __x64_sys_openat+0x174/0x210 [ 163.293542][ T6983] ? __pfx___x64_sys_openat+0x10/0x10 [ 163.293567][ T6983] ? ksys_write+0x1ac/0x250 [ 163.293597][ T6983] do_syscall_64+0xcd/0xfa0 [ 163.293619][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.293639][ T6983] RIP: 0033:0x7fc35bb8f749 [ 163.293655][ T6983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.293674][ T6983] RSP: 002b:00007fc35ca7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 163.293694][ T6983] RAX: ffffffffffffffda RBX: 00007fc35bde6180 RCX: 00007fc35bb8f749 [ 163.293707][ T6983] RDX: 0000000000000100 RSI: 000020000000b2c0 RDI: ffffffffffffff9c [ 163.293720][ T6983] RBP: 00007fc35ca7c090 R08: 0000000000000000 R09: 0000000000000000 [ 163.293732][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.293743][ T6983] R13: 00007fc35bde6218 R14: 00007fc35bde6180 R15: 00007fff14811c88 [ 163.293777][ T6983] [ 165.230928][ T7005] tipc: Enabling of bearer rejected, already enabled [ 166.308724][ T7011] netlink: 148 bytes leftover after parsing attributes in process `syz.0.262'. [ 167.344421][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 169.266535][ T7054] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 170.066354][ T7075] kvm: pic: non byte write [ 170.861740][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 170.861755][ T30] audit: type=1400 audit(1763797761.847:328): avc: denied { accept } for pid=7078 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 170.973529][ T30] audit: type=1400 audit(1763797761.957:329): avc: denied { relabelfrom } for pid=7082 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 171.017508][ T30] audit: type=1400 audit(1763797761.957:330): avc: denied { relabelto } for pid=7082 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 171.041859][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.213448][ T5892] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 171.226544][ T7090] netlink: 148 bytes leftover after parsing attributes in process `syz.2.278'. [ 171.236010][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.264173][ T5892] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 171.277002][ T5892] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 171.316247][ T5892] usb 5-1: Manufacturer: syz [ 171.377648][ T5892] usb 5-1: config 0 descriptor?? [ 171.991262][ T5892] rc_core: IR keymap rc-hauppauge not found [ 172.020317][ T5892] Registered IR keymap rc-empty [ 172.028313][ T5892] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 172.269267][ T5892] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 172.361967][ C0] igorplugusb 5-1:0.0: receive overflow, at least 33 lost [ 172.423366][ T7111] 9pnet_fd: Insufficient options for proto=fd [ 172.431518][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 172.633762][ T30] audit: type=1400 audit(1763797763.617:331): avc: denied { mounton } for pid=7106 comm="syz.2.281" path="/57/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.059382][ T30] audit: type=1400 audit(1763797764.037:332): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 173.178490][ T5930] usb 5-1: USB disconnect, device number 5 [ 173.590420][ T7128] netlink: 148 bytes leftover after parsing attributes in process `syz.4.285'. [ 174.877599][ T30] audit: type=1400 audit(1763797764.837:333): avc: denied { getopt } for pid=7127 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.791365][ T30] audit: type=1400 audit(1763797765.167:334): avc: denied { read } for pid=7127 comm="syz.2.283" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 175.815283][ T30] audit: type=1400 audit(1763797765.177:335): avc: denied { open } for pid=7127 comm="syz.2.283" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 176.039182][ T30] audit: type=1400 audit(1763797767.017:336): avc: denied { read write } for pid=7147 comm="syz.4.287" name="sg0" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 176.083715][ T7149] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 176.435409][ T30] audit: type=1400 audit(1763797767.017:337): avc: denied { open } for pid=7147 comm="syz.4.287" path="/dev/sg0" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 176.680107][ T30] audit: type=1400 audit(1763797767.067:338): avc: denied { ioctl } for pid=7147 comm="syz.4.287" path="/dev/sg0" dev="devtmpfs" ino=782 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 177.380917][ T7175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.684724][ T30] audit: type=1400 audit(1763797768.657:339): avc: denied { read } for pid=7182 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.813359][ T30] audit: type=1400 audit(1763797768.797:340): avc: denied { mount } for pid=7190 comm="syz.3.298" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 177.874443][ T7191] netlink: 'syz.3.298': attribute type 10 has an invalid length. [ 177.922194][ T5860] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 177.940469][ T7191] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 177.949339][ T30] audit: type=1400 audit(1763797768.917:341): avc: denied { read } for pid=7190 comm="syz.3.298" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 178.003308][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 178.169463][ T5860] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 178.220624][ T5860] usb 5-1: config 0 has no interface number 0 [ 178.241305][ T5860] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 178.295621][ T5860] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 178.721279][ T5860] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 178.758775][ T5860] usb 5-1: config 0 interface 128 has no altsetting 0 [ 178.774557][ T7207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.301'. [ 178.784014][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 178.814612][ T5860] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 178.841209][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.871261][ T5860] usb 5-1: Product: syz [ 178.875784][ T5860] usb 5-1: Manufacturer: syz [ 178.880861][ T5860] usb 5-1: SerialNumber: syz [ 179.002496][ T5860] usb 5-1: config 0 descriptor?? [ 179.015928][ T5860] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 179.055362][ T5860] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 179.062382][ T5477] lec:lec_start_xmit: lec0:No lecd attached [ 179.120183][ T5860] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 179.648343][ T5860] usb 5-1: USB disconnect, device number 6 [ 179.781276][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 179.976237][ T9] usb 3-1: config 0 has no interfaces? [ 180.009221][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 180.559812][ T7228] ptrace attach of ""[7227] was attempted by "./syz-executor exec"[7228] [ 180.873241][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 180.901332][ T9] usb 3-1: Product: syz [ 180.905529][ T9] usb 3-1: SerialNumber: syz [ 180.926974][ T7220] 9pnet_fd: Insufficient options for proto=fd [ 180.953134][ T9] usb 3-1: config 0 descriptor?? [ 181.415617][ T7213] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 181.470758][ T7250] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 181.533366][ T7213] kvm: pic: non byte read [ 181.538161][ T7213] kvm: pic: level sensitive irq not supported [ 181.538245][ T7213] kvm: pic: non byte read [ 181.557936][ T7252] netlink: 152 bytes leftover after parsing attributes in process `syz.4.308'. [ 181.701133][ T7252] input: syz1 as /devices/virtual/input/input11 [ 181.724789][ T5860] usb 3-1: USB disconnect, device number 9 [ 181.991261][ T977] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.201300][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 182.214492][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 182.246294][ T977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 182.291455][ T977] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 182.313832][ T977] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 182.365619][ T30] audit: type=1400 audit(1763797773.337:342): avc: denied { load_policy } for pid=7266 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 182.391302][ T977] usb 5-1: Product: syz [ 182.392189][ T7270] SELinux: failed to load policy [ 182.395472][ T977] usb 5-1: Manufacturer: syz [ 182.428676][ T977] usb 5-1: SerialNumber: syz [ 182.446190][ T977] usb 5-1: config 0 descriptor?? [ 182.469945][ T30] audit: type=1400 audit(1763797773.437:343): avc: denied { ioctl } for pid=7266 comm="syz.2.311" path="socket:[14440]" dev="sockfs" ino=14440 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.202152][ T7282] ptrace attach of ""[7277] was attempted by "./syz-executor exec"[7282] [ 184.255647][ T7296] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 184.272121][ T7296] netlink: 224 bytes leftover after parsing attributes in process `syz.2.317'. [ 184.291307][ T5892] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 184.356495][ T7299] netlink: 'syz.2.317': attribute type 12 has an invalid length. [ 184.406615][ T7299] netlink: 'syz.2.317': attribute type 29 has an invalid length. [ 184.423969][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.432508][ T7299] netlink: 148 bytes leftover after parsing attributes in process `syz.2.317'. [ 184.442324][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.473846][ T5892] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 184.492230][ T5892] usb 4-1: config 0 has no interface number 0 [ 184.562333][ T7299] netlink: 51 bytes leftover after parsing attributes in process `syz.2.317'. [ 184.591181][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 184.599509][ C1] lec:lec_tx_timeout: lec0 [ 184.599848][ T5892] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 184.611248][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 184.667137][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.756822][ T5892] usb 4-1: Product: syz [ 184.809378][ T5892] usb 4-1: Manufacturer: syz [ 184.857682][ T5892] usb 4-1: SerialNumber: syz [ 184.885844][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.308'. [ 184.893804][ T5892] usb 4-1: config 0 descriptor?? [ 184.918831][ T977] usb 5-1: USB disconnect, device number 7 [ 184.936622][ T5892] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 185.769976][ T5892] pctv452e: pctv452e_power_ctrl: 1 [ 185.769976][ T5892] [ 185.777887][ T5892] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 185.777887][ T5892] [ 185.788860][ T5892] dvb-usb: bulk message failed: -22 (5/0) [ 185.799883][ T5892] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 185.816478][ T5892] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 185.828577][ T5892] usb 4-1: USB disconnect, device number 5 [ 186.012140][ T7312] netlink: 'syz.1.320': attribute type 3 has an invalid length. [ 186.055168][ T7312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.402511][ T7316] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 186.446995][ T7322] FAULT_INJECTION: forcing a failure. [ 186.446995][ T7322] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 186.460641][ T7322] CPU: 1 UID: 0 PID: 7322 Comm: syz.4.324 Not tainted syzkaller #0 PREEMPT(full) [ 186.460670][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.460682][ T7322] Call Trace: [ 186.460690][ T7322] [ 186.460699][ T7322] dump_stack_lvl+0x16c/0x1f0 [ 186.460724][ T7322] should_fail_ex+0x512/0x640 [ 186.460753][ T7322] should_fail_alloc_page+0xe7/0x130 [ 186.460781][ T7322] prepare_alloc_pages+0x3c2/0x610 [ 186.460809][ T7322] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 186.460857][ T7322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.460886][ T7322] ? find_held_lock+0x2b/0x80 [ 186.460915][ T7322] ? mark_held_locks+0x49/0x80 [ 186.460937][ T7322] ? finish_task_switch.isra.0+0x221/0xc10 [ 186.460965][ T7322] ? rcu_is_watching+0x12/0xc0 [ 186.460991][ T7322] ? trace_sched_exit_tp+0xd1/0x120 [ 186.461013][ T7322] ? __schedule+0x11a3/0x5de0 [ 186.461041][ T7322] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.461068][ T7322] ? policy_nodemask+0xea/0x4e0 [ 186.461095][ T7322] alloc_pages_mpol+0x1fb/0x550 [ 186.461120][ T7322] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 186.461147][ T7322] ? __pfx___schedule+0x10/0x10 [ 186.461176][ T7322] folio_alloc_mpol_noprof+0x36/0x2f0 [ 186.461202][ T7322] vma_alloc_folio_noprof+0xed/0x1e0 [ 186.461229][ T7322] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 186.461254][ T7322] ? mark_held_locks+0x49/0x80 [ 186.461271][ T7322] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 186.461301][ T7322] do_pte_missing+0x2202/0x3ba0 [ 186.461336][ T7322] __handle_mm_fault+0x1556/0x2aa0 [ 186.461366][ T7322] ? mt_find+0x3e2/0xa20 [ 186.461392][ T7322] ? __pfx___handle_mm_fault+0x10/0x10 [ 186.461413][ T7322] ? __pfx_mt_find+0x10/0x10 [ 186.461450][ T7322] ? find_vma+0xbf/0x140 [ 186.461466][ T7322] ? __pfx_find_vma+0x10/0x10 [ 186.461484][ T7322] handle_mm_fault+0x589/0xd10 [ 186.461507][ T7322] ? __pkru_allows_pkey+0x21/0xb0 [ 186.461525][ T7322] do_user_addr_fault+0x7a6/0x1370 [ 186.461544][ T7322] ? rcu_is_watching+0x12/0xc0 [ 186.461568][ T7322] exc_page_fault+0x64/0xc0 [ 186.461587][ T7322] asm_exc_page_fault+0x26/0x30 [ 186.461605][ T7322] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 186.461629][ T7322] Code: 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 186.461648][ T7322] RSP: 0018:ffffc9000482fbd8 EFLAGS: 00050206 [ 186.461664][ T7322] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000248 [ 186.461675][ T7322] RDX: 0000000000000000 RSI: ffff8880558fcdb8 RDI: 0000200000003000 [ 186.461687][ T7322] RBP: 0000200000002248 R08: 0000000000000000 R09: ffffed100ab1f9ff [ 186.461698][ T7322] R10: ffff8880558fcfff R11: 0000000000000000 R12: ffff8880558fc000 [ 186.461710][ T7322] R13: 0000200000003248 R14: 00007ffffffff000 R15: 0000000000000000 [ 186.461736][ T7322] _copy_to_user+0xbb/0xd0 [ 186.461764][ T7322] pagemap_read+0x52c/0x890 [ 186.461795][ T7322] ? __pfx_pagemap_read+0x10/0x10 [ 186.461826][ T7322] ? rw_verify_area+0xcf/0x6c0 [ 186.461854][ T7322] ? __pfx_pagemap_read+0x10/0x10 [ 186.461877][ T7322] vfs_read+0x1e4/0xcf0 [ 186.461901][ T7322] ? __pfx_vfs_read+0x10/0x10 [ 186.461915][ T7322] ? find_held_lock+0x2b/0x80 [ 186.461941][ T7322] ? __fget_files+0x204/0x3c0 [ 186.461967][ T7322] ? __fget_files+0x20e/0x3c0 [ 186.461985][ T7322] ? __fget_files+0x140/0x3c0 [ 186.462014][ T7322] __x64_sys_pread64+0x1eb/0x250 [ 186.462036][ T7322] ? __pfx___x64_sys_pread64+0x10/0x10 [ 186.462066][ T7322] do_syscall_64+0xcd/0xfa0 [ 186.462088][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.462108][ T7322] RIP: 0033:0x7fca2a78f749 [ 186.462125][ T7322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.462144][ T7322] RSP: 002b:00007fca2b657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 186.462162][ T7322] RAX: ffffffffffffffda RBX: 00007fca2a9e6090 RCX: 00007fca2a78f749 [ 186.462176][ T7322] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000005 [ 186.462189][ T7322] RBP: 00007fca2b657090 R08: 0000000000000000 R09: 0000000000000000 [ 186.462201][ T7322] R10: 0000000fffffdff8 R11: 0000000000000246 R12: 0000000000000001 [ 186.462213][ T7322] R13: 00007fca2a9e6128 R14: 00007fca2a9e6090 R15: 00007ffe0f8d6a28 [ 186.462243][ T7322] [ 188.889930][ T7350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.631654][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 189.639683][ C1] lec:lec_tx_timeout: lec0 [ 189.645441][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 190.302348][ T7354] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 190.355284][ T30] audit: type=1400 audit(1763797781.337:344): avc: denied { shutdown } for pid=7360 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.368565][ T7354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.382998][ T7364] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 190.390710][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.331'. [ 190.400858][ T7354] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 190.431460][ T7364] batadv0: entered promiscuous mode [ 190.436770][ T7364] batadv0: entered allmulticast mode [ 190.442161][ T30] audit: type=1400 audit(1763797781.337:345): avc: denied { write } for pid=7360 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.538955][ T7365] loop7: detected capacity change from 0 to 8 [ 190.565838][ T7364] bond0: (slave batadv0): Releasing backup interface [ 190.665990][ T6129] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.679308][ T6129] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.688117][ T7365] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.698690][ T7364] bridge0: port 4(batadv0) entered blocking state [ 190.708187][ T7364] bridge0: port 4(batadv0) entered disabled state [ 190.741411][ T5887] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 190.891283][ T7365] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.922545][ T7365] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.931847][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 190.951844][ T7361] SELinux: failed to load policy [ 190.953372][ T7365] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.969707][ T5887] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.40 [ 191.099792][ T5892] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 191.142463][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.159737][ T5887] usb 2-1: Product: І [ 191.164079][ T5887] usb 2-1: Manufacturer: ᰖ [ 191.169146][ T5887] usb 2-1: SerialNumber: 瘼肟整鵾悔칸䌵五夽髽껍ا犉㶥ヺ㛈肧꾚跜뢼퐗ୠ膀䤕壢ᮥ뱾⸣巜 [ 191.194212][ T7365] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.271351][ T7365] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.286618][ T7365] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.323953][ T7365] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.394241][ T6836] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 191.403811][ T6836] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 191.499462][ T7365] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.499611][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 191.510565][ T7365] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.530084][ T7365] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.540487][ T7365] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.553797][ T7365] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.622559][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 191.622578][ T7365] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.622711][ T7365] ldm_validate_partition_table(): Disk read failed. [ 191.669307][ T7365] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.682275][ T7365] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.694773][ T7365] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.730659][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.749869][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.780953][ T7365] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.803735][ T7365] Dev loop7: unable to read RDB block 0 [ 191.810043][ T5887] usbhid 2-1:1.0: can't add hid device: -71 [ 191.901695][ T5892] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 191.910770][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.918987][ T5892] usb 1-1: Product: syz [ 191.923220][ T5892] usb 1-1: Manufacturer: syz [ 191.927812][ T5892] usb 1-1: SerialNumber: syz [ 191.934514][ T7365] loop7: unable to read partition table [ 191.941334][ T7365] loop7: partition table beyond EOD, truncated [ 191.992729][ T5887] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 192.683910][ T5887] usb 2-1: USB disconnect, device number 6 [ 192.696063][ T7365] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 192.738026][ T5892] usb 1-1: config 0 descriptor?? [ 192.743899][ T7374] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 192.766832][ T5892] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 192.779088][ T5892] uvcvideo 1-1:0.0: No valid video chain found. [ 192.893954][ T7400] netlink: 148 bytes leftover after parsing attributes in process `syz.3.344'. [ 193.405349][ T7365] netlink: 60 bytes leftover after parsing attributes in process `syz.0.337'. [ 193.414957][ T7365] unsupported nlmsg_type 40 [ 194.068159][ T5892] usb 1-1: USB disconnect, device number 9 [ 194.120345][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.127633][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.671161][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 194.679216][ C1] lec:lec_tx_timeout: lec0 [ 194.684836][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 195.091075][ T30] audit: type=1400 audit(1763797785.347:346): avc: denied { execute } for pid=7401 comm="syz.2.345" path="/72/file0" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.952839][ T30] audit: type=1804 audit(1763797785.347:347): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.345" name="/newroot/72/file0" dev="tmpfs" ino=390 res=1 errno=0 [ 196.191459][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 196.197530][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 196.201284][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 196.203929][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 197.899051][ T7433] bridge0: port 3(gretap0) entered disabled state [ 197.905888][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.913873][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.945806][ T7436] fuse: Bad value for 'group_id' [ 197.983798][ T7436] fuse: Bad value for 'group_id' [ 198.724624][ T5887] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 199.559496][ T30] audit: type=1400 audit(1763797789.987:348): avc: denied { connect } for pid=7450 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.660008][ T5887] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 199.691220][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 199.699274][ C1] lec:lec_tx_timeout: lec0 [ 199.703946][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 199.754620][ T5887] usb 3-1: config 0 has no interface number 0 [ 199.814231][ T5887] usb 3-1: config 0 interface 11 has no altsetting 0 [ 199.844326][ T5887] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 199.873678][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.912438][ T5887] usb 3-1: config 0 descriptor?? [ 199.981365][ T30] audit: type=1400 audit(1763797790.947:349): avc: denied { append } for pid=7454 comm="syz.0.357" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.122236][ T5887] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 200.129953][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7 [ 200.257580][ T30] audit: type=1400 audit(1763797791.147:350): avc: denied { create } for pid=7454 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 200.462186][ T30] audit: type=1400 audit(1763797791.147:351): avc: denied { connect } for pid=7454 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 200.487345][ T7468] netlink: 148 bytes leftover after parsing attributes in process `syz.4.358'. [ 200.638952][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 200.647991][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 200.665120][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 200.673046][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 200.874341][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 200.883162][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 200.894705][ T5887] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 200.913280][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 200.942674][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 200.986216][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 201.031878][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 201.061493][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 201.084461][ T5887] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 201.106454][ T5887] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 201.366730][ T5887] usb 3-1: USB disconnect, device number 10 [ 201.732228][ T5887] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 201.839495][ T5887] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 201.853162][ T5887] keyspan 3-1:0.11: device disconnected [ 202.111966][ T5860] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 202.476400][ T5860] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 202.484841][ T5860] usb 5-1: config 0 has no interface number 0 [ 202.496789][ T5860] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 202.498836][ T7496] fuse: Bad value for 'group_id' [ 202.506038][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.519404][ T5860] usb 5-1: Product: syz [ 202.523599][ T5860] usb 5-1: Manufacturer: syz [ 202.528187][ T5860] usb 5-1: SerialNumber: syz [ 202.541756][ T5860] usb 5-1: config 0 descriptor?? [ 202.550014][ T5860] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 202.615553][ T5860] pctv452e: pctv452e_power_ctrl: 1 [ 202.615553][ T5860] [ 202.638766][ T7496] fuse: Bad value for 'group_id' [ 202.649847][ T5860] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 202.649847][ T5860] [ 202.682533][ T5860] dvb-usb: bulk message failed: -22 (5/0) [ 202.877949][ T5860] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 202.893804][ T5860] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 202.910468][ T5860] usb 5-1: USB disconnect, device number 8 [ 202.961242][ T5930] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.111236][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.132985][ T5930] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.159778][ T5930] usb 3-1: config 0 has no interface number 0 [ 203.193906][ T5930] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 203.240323][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.263949][ T7512] netlink: 'syz.3.368': attribute type 12 has an invalid length. [ 203.271941][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 203.282353][ T5930] usb 3-1: Product: syz [ 203.286756][ T5930] usb 3-1: Manufacturer: syz [ 203.294829][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.308030][ T5892] usb 2-1: config 4 interface 0 has no altsetting 0 [ 203.323657][ T5930] usb 3-1: SerialNumber: syz [ 203.338003][ T5892] usb 2-1: string descriptor 0 read error: -22 [ 203.347122][ T5930] usb 3-1: config 0 descriptor?? [ 203.358682][ T5892] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 203.368365][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.403971][ T5892] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 203.444508][ T5892] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.484534][ T5892] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 203.593445][ T7521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.622233][ T5892] usb 2-1: media controller created [ 203.634364][ T7506] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 203.646277][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.693911][ T5930] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 203.720303][ T5930] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.734025][ T30] audit: type=1400 audit(1763797794.717:352): avc: denied { create } for pid=7520 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.814863][ T30] audit: type=1400 audit(1763797794.757:353): avc: denied { ioctl } for pid=7520 comm="syz.3.370" path="socket:[15484]" dev="sockfs" ino=15484 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.859618][ T5930] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 203.860773][ T30] audit: type=1400 audit(1763797794.767:354): avc: denied { append } for pid=7505 comm="syz.1.367" name="sg0" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 203.976680][ T7527] FAULT_INJECTION: forcing a failure. [ 203.976680][ T7527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.202364][ T7521] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 204.219947][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.0.371 Not tainted syzkaller #0 PREEMPT(full) [ 204.219975][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.219988][ T7527] Call Trace: [ 204.219995][ T7527] [ 204.220003][ T7527] dump_stack_lvl+0x16c/0x1f0 [ 204.220028][ T7527] should_fail_ex+0x512/0x640 [ 204.220057][ T7527] _copy_from_user+0x2e/0xd0 [ 204.220083][ T7527] move_addr_to_kernel+0x65/0x170 [ 204.220110][ T7527] __copy_msghdr+0x386/0x470 [ 204.220137][ T7527] copy_msghdr_from_user+0xc1/0x160 [ 204.220164][ T7527] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 204.220196][ T7527] ? __lock_acquire+0xb8a/0x1c90 [ 204.220224][ T7527] ___sys_sendmsg+0xfe/0x1d0 [ 204.220252][ T7527] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.220317][ T7527] __sys_sendmsg+0x16d/0x220 [ 204.220345][ T7527] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.220391][ T7527] do_syscall_64+0xcd/0xfa0 [ 204.220413][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.220434][ T7527] RIP: 0033:0x7f02fd78f749 [ 204.220450][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.220470][ T7527] RSP: 002b:00007f02fb9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.220489][ T7527] RAX: ffffffffffffffda RBX: 00007f02fd9e5fa0 RCX: 00007f02fd78f749 [ 204.220502][ T7527] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000004 [ 204.220515][ T7527] RBP: 00007f02fb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.220528][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.220540][ T7527] R13: 00007f02fd9e6038 R14: 00007f02fd9e5fa0 R15: 00007fff0b708d48 [ 204.220570][ T7527] [ 204.364686][ T5930] usb 3-1: media controller created [ 204.711205][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 204.719264][ C1] lec:lec_tx_timeout: lec0 [ 204.731261][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 204.813672][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.021210][ T30] audit: type=1400 audit(1763797795.997:355): avc: denied { write } for pid=7537 comm="syz.0.373" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 205.050566][ T5892] zl10353_read_register: readreg error (reg=127, ret==0) [ 205.084353][ T7503] usb 2-1: dvb_usb_au6610: wlen=115, aborting [ 205.129219][ T30] audit: type=1400 audit(1763797796.107:356): avc: denied { read } for pid=7537 comm="syz.0.373" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.350587][ T5930] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 205.891242][ T30] audit: type=1400 audit(1763797796.107:357): avc: denied { open } for pid=7537 comm="syz.0.373" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.916257][ T5930] usb 3-1: USB disconnect, device number 11 [ 206.005074][ T30] audit: type=1400 audit(1763797796.107:358): avc: denied { ioctl } for pid=7537 comm="syz.0.373" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 206.064409][ T7546] FAULT_INJECTION: forcing a failure. [ 206.064409][ T7546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.200839][ T7546] CPU: 0 UID: 0 PID: 7546 Comm: syz.4.375 Not tainted syzkaller #0 PREEMPT(full) [ 206.200869][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.200881][ T7546] Call Trace: [ 206.200888][ T7546] [ 206.200896][ T7546] dump_stack_lvl+0x16c/0x1f0 [ 206.200920][ T7546] should_fail_ex+0x512/0x640 [ 206.200960][ T7546] _copy_from_iter+0x29f/0x1720 [ 206.200994][ T7546] ? __pfx__copy_from_iter+0x10/0x10 [ 206.201019][ T7546] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 206.201056][ T7546] copy_page_from_iter+0xde/0x180 [ 206.201085][ T7546] tun_build_skb.constprop.0+0x2e8/0x1510 [ 206.201124][ T7546] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 206.201155][ T7546] ? unwind_get_return_address+0x59/0xa0 [ 206.201175][ T7546] ? arch_stack_walk+0xa6/0x100 [ 206.201213][ T7546] ? _kstrtoull+0x145/0x200 [ 206.201247][ T7546] tun_get_user+0x149c/0x3cc0 [ 206.201288][ T7546] ? __pfx_tun_get_user+0x10/0x10 [ 206.201318][ T7546] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 206.201354][ T7546] ? find_held_lock+0x2b/0x80 [ 206.201381][ T7546] ? tun_get+0x191/0x370 [ 206.201414][ T7546] tun_chr_write_iter+0xdc/0x210 [ 206.201444][ T7546] vfs_write+0x7d3/0x11d0 [ 206.201466][ T7546] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 206.201497][ T7546] ? __pfx_vfs_write+0x10/0x10 [ 206.201515][ T7546] ? find_held_lock+0x2b/0x80 [ 206.201558][ T7546] ksys_write+0x12a/0x250 [ 206.201579][ T7546] ? __pfx_ksys_write+0x10/0x10 [ 206.201606][ T7546] do_syscall_64+0xcd/0xfa0 [ 206.201629][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.201650][ T7546] RIP: 0033:0x7fca2a78e1ff [ 206.201666][ T7546] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 206.201685][ T7546] RSP: 002b:00007fca2b678000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 206.201753][ T7546] RAX: ffffffffffffffda RBX: 00007fca2a9e5fa0 RCX: 00007fca2a78e1ff [ 206.201773][ T7546] RDX: 000000000000009a RSI: 0000200000000200 RDI: 00000000000000c8 [ 206.201787][ T7546] RBP: 00007fca2b678090 R08: 0000000000000000 R09: 0000000000000000 [ 206.201798][ T7546] R10: 000000000000009a R11: 0000000000000293 R12: 0000000000000001 [ 206.201808][ T7546] R13: 00007fca2a9e6038 R14: 00007fca2a9e5fa0 R15: 00007ffe0f8d6a28 [ 206.201836][ T7546] [ 206.426384][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.441352][ T30] audit: type=1400 audit(1763797796.107:359): avc: denied { write } for pid=7537 comm="syz.0.373" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 207.316507][ T7555] fuse: Bad value for 'group_id' [ 207.343929][ T7555] fuse: Bad value for 'group_id' [ 207.396390][ T30] audit: type=1400 audit(1763797798.377:360): avc: denied { mount } for pid=7551 comm="syz.3.376" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 207.437012][ T5860] usb 2-1: USB disconnect, device number 7 [ 207.440839][ T7562] FAULT_INJECTION: forcing a failure. [ 207.440839][ T7562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.477130][ T7562] CPU: 1 UID: 0 PID: 7562 Comm: syz.4.379 Not tainted syzkaller #0 PREEMPT(full) [ 207.477160][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.477172][ T7562] Call Trace: [ 207.477179][ T7562] [ 207.477186][ T7562] dump_stack_lvl+0x16c/0x1f0 [ 207.477211][ T7562] should_fail_ex+0x512/0x640 [ 207.477240][ T7562] _copy_from_user+0x2e/0xd0 [ 207.477267][ T7562] kstrtouint_from_user+0xd6/0x1d0 [ 207.477298][ T7562] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 207.477328][ T7562] ? __lock_acquire+0xb8a/0x1c90 [ 207.477361][ T7562] proc_fail_nth_write+0x83/0x220 [ 207.477385][ T7562] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 207.477417][ T7562] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 207.477439][ T7562] vfs_write+0x2a0/0x11d0 [ 207.477480][ T7562] ? __pfx___mutex_lock+0x10/0x10 [ 207.477501][ T7562] ? __pfx_vfs_write+0x10/0x10 [ 207.477529][ T7562] ? __fget_files+0x20e/0x3c0 [ 207.477559][ T7562] ksys_write+0x12a/0x250 [ 207.477579][ T7562] ? __pfx_ksys_write+0x10/0x10 [ 207.477608][ T7562] do_syscall_64+0xcd/0xfa0 [ 207.477631][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.477651][ T7562] RIP: 0033:0x7fca2a78e1ff [ 207.477668][ T7562] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 207.477688][ T7562] RSP: 002b:00007fca2b657030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 207.477708][ T7562] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fca2a78e1ff [ 207.477721][ T7562] RDX: 0000000000000001 RSI: 00007fca2b6570a0 RDI: 0000000000000003 [ 207.477733][ T7562] RBP: 00007fca2b657090 R08: 0000000000000000 R09: 000000000000001c [ 207.477746][ T7562] R10: 0000000000004054 R11: 0000000000000293 R12: 0000000000000001 [ 207.477758][ T7562] R13: 00007fca2a9e6128 R14: 00007fca2a9e6090 R15: 00007ffe0f8d6a28 [ 207.477789][ T7562] [ 207.808923][ T30] audit: type=1400 audit(1763797798.707:361): avc: denied { read write } for pid=7551 comm="syz.3.376" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 208.060345][ T7580] 9pnet_fd: Insufficient options for proto=fd [ 208.068570][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 208.141600][ T5887] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.361427][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 208.363064][ T7589] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 208.368151][ T5887] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.383175][ T5887] usb 5-1: config 179 has no interface number 0 [ 209.150209][ T7589] batadv_slave_0: entered promiscuous mode [ 209.163790][ T7589] batman_adv: batadv0: Adding interface: macvtap1 [ 209.208670][ T7589] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.352598][ T5887] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 209.371634][ T7589] batman_adv: batadv0: Interface activated: macvtap1 [ 209.375194][ T5887] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 209.741177][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.749195][ C1] lec:lec_tx_timeout: lec0 [ 209.761246][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.865500][ T5887] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 210.033089][ T5887] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 210.111718][ T5887] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 210.125695][ T5887] usb 5-1: config 179 interface 65 has no altsetting 0 [ 210.133460][ T5887] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 210.142670][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.215043][ T5887] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input13 [ 210.302831][ T5167] input input13: unable to receive magic message: -110 [ 210.442548][ T5167] input input13: unable to receive magic message: -32 [ 210.539132][ T5167] input input13: unable to receive magic message: -32 [ 210.676714][ T5167] input input13: unable to receive magic message: -32 [ 210.723251][ T5167] input input13: unable to receive magic message: -32 [ 210.738445][ T5167] input input13: unable to receive magic message: -32 [ 210.785948][ T5167] input input13: unable to receive magic message: -32 [ 210.844772][ T5930] usb 5-1: USB disconnect, device number 9 [ 210.844911][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 212.416599][ T5892] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.781337][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 212.808847][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.831233][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.862745][ T5892] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 212.896638][ T5892] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 212.933703][ T5892] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 213.002328][ T5892] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.021383][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.037818][ T5892] usb 1-1: SerialNumber: syz [ 213.055550][ T7630] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.065151][ T5892] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 213.086221][ T5892] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 214.416433][ T52] Bluetooth: hci4: link tx timeout [ 214.423395][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 214.771230][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.779282][ C1] lec:lec_tx_timeout: lec0 [ 214.783862][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 215.598333][ T5916] usb 1-1: USB disconnect, device number 10 [ 216.511710][ T5133] Bluetooth: hci4: command 0x0406 tx timeout [ 218.001361][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 218.001378][ T30] audit: type=1400 audit(1763797808.937:363): avc: denied { shutdown } for pid=7702 comm="syz.4.408" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.044039][ T7711] netlink: 120 bytes leftover after parsing attributes in process `syz.1.407'. [ 218.084409][ T30] audit: type=1400 audit(1763797808.937:364): avc: denied { read } for pid=7702 comm="syz.4.408" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.791283][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 219.799403][ C1] lec:lec_tx_timeout: lec0 [ 219.804059][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 222.362996][ T7740] loop8: detected capacity change from 0 to 8 [ 222.394399][ T7740] Dev loop8: unable to read RDB block 8 [ 222.430350][ T7740] loop8: unable to read partition table [ 223.026102][ T7749] ptrace attach of ""[7748] was attempted by "./syz-executor exec"[7749] [ 223.322728][ T7740] loop8: partition table beyond EOD, truncated [ 223.494603][ T7740] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 223.777091][ T7757] ptrace attach of ""[7756] was attempted by "./syz-executor exec"[7757] [ 224.682625][ T7772] binder_alloc: 7769: pid 7769 spamming oneway? 1 buffers allocated for a total size of 4096 [ 224.691959][ T30] audit: type=1400 audit(1763797815.657:365): avc: denied { write } for pid=7769 comm="syz.0.420" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 224.811190][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.819227][ C1] lec:lec_tx_timeout: lec0 [ 224.831643][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 225.583462][ T5892] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 225.741548][ T5860] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 225.763259][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.967745][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 226.079364][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 226.534784][ T5892] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 226.545133][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.571453][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 226.635201][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 226.647585][ T5892] usb 2-1: config 0 descriptor?? [ 226.649161][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.668277][ T5860] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 226.677779][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.686109][ T5860] usb 1-1: Product: syz [ 226.690387][ T5860] usb 1-1: Manufacturer: syz [ 226.695826][ T5860] usb 1-1: SerialNumber: syz [ 226.706177][ T30] audit: type=1400 audit(1763797817.687:366): avc: denied { nlmsg_write } for pid=7791 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 226.711537][ T5860] usb 1-1: config 0 descriptor?? [ 226.728819][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 226.747397][ T7780] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 226.828086][ T5860] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 226.855820][ T30] audit: type=1400 audit(1763797817.757:367): avc: denied { write } for pid=7794 comm="syz.3.426" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.951188][ T7805] fuse: Unknown parameter 'ootmode' [ 226.992935][ T30] audit: type=1400 audit(1763797817.977:368): avc: denied { write } for pid=7779 comm="syz.0.422" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 227.039955][ T7780] FAULT_INJECTION: forcing a failure. [ 227.039955][ T7780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.112154][ T7810] tipc: Started in network mode [ 227.142032][ T7780] CPU: 1 UID: 0 PID: 7780 Comm: syz.0.422 Not tainted syzkaller #0 PREEMPT(full) [ 227.142059][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.142070][ T7780] Call Trace: [ 227.142077][ T7780] [ 227.142084][ T7780] dump_stack_lvl+0x16c/0x1f0 [ 227.142110][ T7780] should_fail_ex+0x512/0x640 [ 227.142138][ T7780] _copy_from_user+0x2e/0xd0 [ 227.142165][ T7780] input_event_from_user+0x133/0x3b0 [ 227.142198][ T7780] ? __pfx_input_event_from_user+0x10/0x10 [ 227.142234][ T7780] ? __pfx___might_resched+0x10/0x10 [ 227.142260][ T7780] ? input_inject_event+0x1c0/0x3b0 [ 227.142293][ T7780] evdev_write+0x37b/0x750 [ 227.142329][ T7780] ? __pfx_evdev_write+0x10/0x10 [ 227.142361][ T7780] ? bpf_lsm_file_permission+0x9/0x10 [ 227.142383][ T7780] ? security_file_permission+0x71/0x210 [ 227.142408][ T7780] ? rw_verify_area+0xcf/0x6c0 [ 227.142439][ T7780] ? __pfx_evdev_write+0x10/0x10 [ 227.142466][ T7780] vfs_write+0x2a0/0x11d0 [ 227.142491][ T7780] ? __pfx_vfs_write+0x10/0x10 [ 227.142509][ T7780] ? find_held_lock+0x2b/0x80 [ 227.142535][ T7780] ? __fget_files+0x204/0x3c0 [ 227.142561][ T7780] ? __fget_files+0x20e/0x3c0 [ 227.142590][ T7780] ksys_write+0x1f8/0x250 [ 227.142609][ T7780] ? __pfx_ksys_write+0x10/0x10 [ 227.142638][ T7780] do_syscall_64+0xcd/0xfa0 [ 227.142660][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.142680][ T7780] RIP: 0033:0x7f02fd78f749 [ 227.142697][ T7780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.142716][ T7780] RSP: 002b:00007f02fb9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.142735][ T7780] RAX: ffffffffffffffda RBX: 00007f02fd9e5fa0 RCX: 00007f02fd78f749 [ 227.142749][ T7780] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005 [ 227.142762][ T7780] RBP: 00007f02fb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.142774][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.142786][ T7780] R13: 00007f02fd9e6038 R14: 00007f02fd9e5fa0 R15: 00007fff0b708d48 [ 227.142817][ T7780] [ 227.151320][ T7810] tipc: Node identity ac14140f, cluster identity 4711 [ 227.381549][ T7810] tipc: New replicast peer: 255.255.255.255 [ 227.393285][ T5860] usb 1-1: USB disconnect, device number 11 [ 227.393418][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 227.443031][ T30] audit: type=1400 audit(1763797817.977:369): avc: denied { open } for pid=7779 comm="syz.0.422" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 227.452531][ T7810] tipc: Enabled bearer , priority 10 [ 227.601069][ T30] audit: type=1400 audit(1763797818.277:370): avc: denied { connect } for pid=7804 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.601115][ T30] audit: type=1400 audit(1763797818.277:371): avc: denied { write } for pid=7804 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.736522][ T7819] FAULT_INJECTION: forcing a failure. [ 227.736522][ T7819] name failslab, interval 1, probability 0, space 0, times 0 [ 227.736557][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.4.429 Not tainted syzkaller #0 PREEMPT(full) [ 227.736582][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.736595][ T7819] Call Trace: [ 227.736601][ T7819] [ 227.736609][ T7819] dump_stack_lvl+0x16c/0x1f0 [ 227.736633][ T7819] should_fail_ex+0x512/0x640 [ 227.736657][ T7819] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 227.736689][ T7819] should_failslab+0xc2/0x120 [ 227.736714][ T7819] kmem_cache_alloc_node_noprof+0x78/0x770 [ 227.736742][ T7819] ? __alloc_skb+0x2b2/0x380 [ 227.736777][ T7819] ? __alloc_skb+0x2b2/0x380 [ 227.736799][ T7819] ? __pfx_netlink_insert+0x10/0x10 [ 227.736825][ T7819] __alloc_skb+0x2b2/0x380 [ 227.736850][ T7819] ? __pfx___alloc_skb+0x10/0x10 [ 227.736874][ T7819] ? netlink_autobind.isra.0+0x158/0x370 [ 227.736913][ T7819] netlink_alloc_large_skb+0x69/0x140 [ 227.736944][ T7819] netlink_sendmsg+0x698/0xdd0 [ 227.736979][ T7819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.737020][ T7819] ____sys_sendmsg+0xa98/0xc70 [ 227.737042][ T7819] ? copy_msghdr_from_user+0x10a/0x160 [ 227.737069][ T7819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.737102][ T7819] ___sys_sendmsg+0x134/0x1d0 [ 227.737129][ T7819] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.737150][ T7819] ? __lock_acquire+0x622/0x1c90 [ 227.737205][ T7819] __sys_sendmsg+0x16d/0x220 [ 227.737232][ T7819] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.737278][ T7819] do_syscall_64+0xcd/0xfa0 [ 227.737302][ T7819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.737322][ T7819] RIP: 0033:0x7fca2a78f749 [ 227.737337][ T7819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.737352][ T7819] RSP: 002b:00007fca2b678038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.737371][ T7819] RAX: ffffffffffffffda RBX: 00007fca2a9e5fa0 RCX: 00007fca2a78f749 [ 227.737383][ T7819] RDX: 0000000000044010 RSI: 0000200000000140 RDI: 0000000000000005 [ 227.737395][ T7819] RBP: 00007fca2b678090 R08: 0000000000000000 R09: 0000000000000000 [ 227.737407][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.737417][ T7819] R13: 00007fca2a9e6038 R14: 00007fca2a9e5fa0 R15: 00007ffe0f8d6a28 [ 227.737444][ T7819] [ 228.094704][ T7830] FAULT_INJECTION: forcing a failure. [ 228.094704][ T7830] name failslab, interval 1, probability 0, space 0, times 0 [ 228.094757][ T7830] CPU: 0 UID: 0 PID: 7830 Comm: syz.0.432 Not tainted syzkaller #0 PREEMPT(full) [ 228.094780][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.094790][ T7830] Call Trace: [ 228.094797][ T7830] [ 228.094804][ T7830] dump_stack_lvl+0x16c/0x1f0 [ 228.094828][ T7830] should_fail_ex+0x512/0x640 [ 228.094852][ T7830] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 228.094888][ T7830] should_failslab+0xc2/0x120 [ 228.094912][ T7830] kmem_cache_alloc_node_noprof+0x78/0x770 [ 228.094941][ T7830] ? __alloc_skb+0x2b2/0x380 [ 228.094972][ T7830] ? __alloc_skb+0x2b2/0x380 [ 228.094993][ T7830] ? __pfx_avc_has_perm+0x10/0x10 [ 228.095020][ T7830] __alloc_skb+0x2b2/0x380 [ 228.095044][ T7830] ? __pfx___alloc_skb+0x10/0x10 [ 228.095064][ T7830] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 228.095083][ T7830] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 228.095120][ T7830] netlink_alloc_large_skb+0x69/0x140 [ 228.095151][ T7830] netlink_sendmsg+0x698/0xdd0 [ 228.095184][ T7830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.095224][ T7830] ____sys_sendmsg+0xa98/0xc70 [ 228.095245][ T7830] ? copy_msghdr_from_user+0x10a/0x160 [ 228.095272][ T7830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.095303][ T7830] ___sys_sendmsg+0x134/0x1d0 [ 228.095330][ T7830] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.095353][ T7830] ? __lock_acquire+0x622/0x1c90 [ 228.095406][ T7830] __sys_sendmsg+0x16d/0x220 [ 228.095434][ T7830] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.095477][ T7830] do_syscall_64+0xcd/0xfa0 [ 228.095499][ T7830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.095520][ T7830] RIP: 0033:0x7f02fd78f749 [ 228.095536][ T7830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.095554][ T7830] RSP: 002b:00007f02fb9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.095574][ T7830] RAX: ffffffffffffffda RBX: 00007f02fd9e5fa0 RCX: 00007f02fd78f749 [ 228.095587][ T7830] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 228.095600][ T7830] RBP: 00007f02fb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 228.095612][ T7830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.095623][ T7830] R13: 00007f02fd9e6038 R14: 00007f02fd9e5fa0 R15: 00007fff0b708d48 [ 228.095652][ T7830] [ 228.607148][ T5860] tipc: Node number set to 2886997007 [ 229.389494][ T7845] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 230.170343][ T7856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=7856 comm=syz.4.437 [ 230.237150][ T7856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7856 comm=syz.4.437 [ 230.289355][ T30] audit: type=1400 audit(1763797821.247:372): avc: denied { append } for pid=7857 comm="syz.3.438" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 230.289412][ T30] audit: type=1400 audit(1763797821.247:373): avc: denied { map } for pid=7857 comm="syz.3.438" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 230.289441][ T30] audit: type=1400 audit(1763797821.247:374): avc: denied { execute } for pid=7857 comm="syz.3.438" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 231.151227][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6320 ms [ 231.151289][ C1] lec:lec_tx_timeout: lec0 [ 231.151729][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 231.380050][ T7881] pim6reg1: entered promiscuous mode [ 231.380073][ T7881] pim6reg1: entered allmulticast mode [ 231.455169][ T7884] FAULT_INJECTION: forcing a failure. [ 231.455169][ T7884] name failslab, interval 1, probability 0, space 0, times 0 [ 231.455270][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: syz.2.442 Not tainted syzkaller #0 PREEMPT(full) [ 231.455295][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.455307][ T7884] Call Trace: [ 231.455314][ T7884] [ 231.455321][ T7884] dump_stack_lvl+0x16c/0x1f0 [ 231.455345][ T7884] should_fail_ex+0x512/0x640 [ 231.455370][ T7884] ? __kmalloc_cache_noprof+0x5f/0x780 [ 231.455401][ T7884] should_failslab+0xc2/0x120 [ 231.455426][ T7884] __kmalloc_cache_noprof+0x72/0x780 [ 231.455454][ T7884] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 231.455483][ T7884] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 231.455507][ T7884] tcp_sendmsg_fastopen+0x24d/0x750 [ 231.455538][ T7884] mptcp_sendmsg+0x14d0/0x1ec0 [ 231.455571][ T7884] ? sock_has_perm+0x259/0x2f0 [ 231.455603][ T7884] ? __pfx_sock_has_perm+0x10/0x10 [ 231.455637][ T7884] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 231.455664][ T7884] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 231.455695][ T7884] ? __import_iovec+0x1dd/0x650 [ 231.455745][ T7884] ? __might_fault+0xe3/0x190 [ 231.455774][ T7884] ? __might_fault+0x13b/0x190 [ 231.455803][ T7884] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 231.455835][ T7884] inet6_sendmsg+0x11c/0x140 [ 231.455868][ T7884] ____sys_sendmsg+0x705/0xc70 [ 231.455889][ T7884] ? copy_msghdr_from_user+0x10a/0x160 [ 231.455917][ T7884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.455952][ T7884] ___sys_sendmsg+0x134/0x1d0 [ 231.455981][ T7884] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.456006][ T7884] ? __lock_acquire+0x622/0x1c90 [ 231.456070][ T7884] __sys_sendmsg+0x16d/0x220 [ 231.456097][ T7884] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.456148][ T7884] do_syscall_64+0xcd/0xfa0 [ 231.456171][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.456191][ T7884] RIP: 0033:0x7f4e5498f749 [ 231.456208][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.456228][ T7884] RSP: 002b:00007f4e558f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.456248][ T7884] RAX: ffffffffffffffda RBX: 00007f4e54be5fa0 RCX: 00007f4e5498f749 [ 231.456262][ T7884] RDX: 0000000004040845 RSI: 0000200000000680 RDI: 0000000000000003 [ 231.456274][ T7884] RBP: 00007f4e558f4090 R08: 0000000000000000 R09: 0000000000000000 [ 231.456287][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.456299][ T7884] R13: 00007f4e54be6038 R14: 00007f4e54be5fa0 R15: 00007fff219d8fb8 [ 231.456327][ T7884] [ 231.457537][ T7884] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 231.457563][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: syz.2.442 Not tainted syzkaller #0 PREEMPT(full) [ 231.457586][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.457598][ T7884] RIP: 0010:__tcp_select_window+0x5a8/0x12e0 [ 231.457629][ T7884] Code: 45 01 e7 44 89 ff e8 77 16 f0 f7 45 39 f7 0f 8d 11 ff ff ff e8 e9 1b f0 f7 45 89 f4 e9 04 ff ff ff e8 dc 1b f0 f7 44 89 f0 99 7c 24 14 41 29 d6 45 89 f4 e9 ec fe ff ff e8 c4 1b f0 f7 48 89 [ 231.457648][ T7884] RSP: 0018:ffffc90005e875a0 EFLAGS: 00010293 [ 231.457664][ T7884] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89cccb8d [ 231.457676][ T7884] RDX: 0000000000000000 RSI: ffffffff89cccbf4 RDI: 0000000000000004 [ 231.457687][ T7884] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 231.457699][ T7884] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 231.457710][ T7884] R13: ffff88802b876d40 R14: 0000000000000000 R15: 0000000000000000 [ 231.457723][ T7884] FS: 00007f4e558f46c0(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 231.457739][ T7884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.457751][ T7884] CR2: 0000200000000180 CR3: 000000005218b000 CR4: 00000000003526f0 [ 231.457764][ T7884] Call Trace: [ 231.457770][ T7884] [ 231.457779][ T7884] ? __pfx___tcp_select_window+0x10/0x10 [ 231.457807][ T7884] __tcp_transmit_skb+0xcf6/0x44d0 [ 231.457837][ T7884] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 231.457869][ T7884] ? ktime_get+0x200/0x310 [ 231.457895][ T7884] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.457914][ T7884] ? read_tsc+0x9/0x20 [ 231.457938][ T7884] ? ktime_get+0x1a7/0x310 [ 231.457967][ T7884] tcp_send_active_reset+0x530/0xa20 [ 231.458006][ T7884] mptcp_do_fastclose+0x26f/0x3b0 [ 231.458035][ T7884] mptcp_disconnect+0x223/0x880 [ 231.458063][ T7884] ? __pfx_mptcp_disconnect+0x10/0x10 [ 231.458090][ T7884] ? __local_bh_enable_ip+0xa4/0x120 [ 231.458118][ T7884] mptcp_sendmsg+0x157e/0x1ec0 [ 231.458154][ T7884] ? sock_has_perm+0x259/0x2f0 [ 231.458189][ T7884] ? __pfx_sock_has_perm+0x10/0x10 [ 231.458223][ T7884] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 231.458249][ T7884] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 231.458285][ T7884] ? __import_iovec+0x1dd/0x650 [ 231.458309][ T7884] ? __might_fault+0xe3/0x190 [ 231.458336][ T7884] ? __might_fault+0x13b/0x190 [ 231.458363][ T7884] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 231.458392][ T7884] inet6_sendmsg+0x11c/0x140 [ 231.458412][ T7884] ____sys_sendmsg+0x705/0xc70 [ 231.458430][ T7884] ? copy_msghdr_from_user+0x10a/0x160 [ 231.458456][ T7884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.458481][ T7884] ___sys_sendmsg+0x134/0x1d0 [ 231.458503][ T7884] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.458524][ T7884] ? __lock_acquire+0x622/0x1c90 [ 231.458559][ T7884] __sys_sendmsg+0x16d/0x220 [ 231.458589][ T7884] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.458623][ T7884] do_syscall_64+0xcd/0xfa0 [ 231.458644][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.458665][ T7884] RIP: 0033:0x7f4e5498f749 [ 231.458681][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.458699][ T7884] RSP: 002b:00007f4e558f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.458717][ T7884] RAX: ffffffffffffffda RBX: 00007f4e54be5fa0 RCX: 00007f4e5498f749 [ 231.458730][ T7884] RDX: 0000000004040845 RSI: 0000200000000680 RDI: 0000000000000003 [ 231.458743][ T7884] RBP: 00007f4e558f4090 R08: 0000000000000000 R09: 0000000000000000 [ 231.458755][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.458766][ T7884] R13: 00007f4e54be6038 R14: 00007f4e54be5fa0 R15: 00007fff219d8fb8 [ 231.458785][ T7884] [ 231.458792][ T7884] Modules linked in: [ 231.458841][ T7884] ---[ end trace 0000000000000000 ]--- [ 231.460043][ T7884] RIP: 0010:__tcp_select_window+0x5a8/0x12e0 [ 231.460074][ T7884] Code: 45 01 e7 44 89 ff e8 77 16 f0 f7 45 39 f7 0f 8d 11 ff ff ff e8 e9 1b f0 f7 45 89 f4 e9 04 ff ff ff e8 dc 1b f0 f7 44 89 f0 99 7c 24 14 41 29 d6 45 89 f4 e9 ec fe ff ff e8 c4 1b f0 f7 48 89 [ 231.460094][ T7884] RSP: 0018:ffffc90005e875a0 EFLAGS: 00010293 [ 231.460108][ T7884] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89cccb8d [ 231.460120][ T7884] RDX: 0000000000000000 RSI: ffffffff89cccbf4 RDI: 0000000000000004 [ 231.460139][ T7884] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 231.460151][ T7884] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 231.460178][ T7884] R13: ffff88802b876d40 R14: 0000000000000000 R15: 0000000000000000 [ 231.460190][ T7884] FS: 00007f4e558f46c0(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 231.460208][ T7884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.460220][ T7884] CR2: 0000200000000180 CR3: 000000005218b000 CR4: 00000000003526f0 [ 231.460234][ T7884] Kernel panic - not syncing: Fatal exception [ 231.460524][ T7884] Kernel Offset: disabled