last executing test programs: 19.295795042s ago: executing program 0 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f0002006a657464657673696d3000000800030003000000080000000600110009000000d5a98f17a60e1db5781f0b459c0d70ffab2ba361483710ca4c4ab0fc8136ef3a0875cd14ec5a94b4538a106299464ed8c24df1e7fe013e33002cc6247761e33087fd40d08e5db286d95a894239eff8a0bf950de081ad264f9c8d750c589912a533354e3819190171bf5bc32fb03f53ede7ea8fefc6198437eb0b63cba620d3f881cf4d746d66d9d01ab6c9b10a3a"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x92) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c2e51f568c5bb0000001000010400"/26, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b00010067656e65766500000c000280060005004e200000"], 0x3c}}, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@tcp}, 0x20) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r5, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380), &(0x7f00000001c0)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 16.250243116s ago: executing program 2 (id=574): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb2) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xfffffffdffffffff) 16.067945907s ago: executing program 2 (id=577): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca38fff48f3be52163448412ba8d0ea1c139c1ff45847522a11b0af52124c686a2981df066ee8064e40e7c2a87cf1f5dd84d6de6a40e40900480eb4d97249ec645a8f53748e60e4655d9145b9ccd3d0f9c90b9ba0ade230e2eb2133d3143a1261f4e045c49f8261cb488f6333eda701b367a68f6e3cd36224453cde3c8022769f40d7ed60b688d275a683eae0b18d0b906520aa25f73bd135fe5f2c07a870157eb70c74588d58692c396b85c691e5bd09132c29dc537418c4f6221f11ce11b412ace8d12415ab8d1c8e1b4b0fdabc72f7e1bfd1094703d1f1a91380", 0xde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 15.179848469s ago: executing program 2 (id=579): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x141381) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x5ad000, 0xc3) openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x42a240, 0x25) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 14.895486087s ago: executing program 4 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9c5c2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000900000000010500", @ANYRES32, @ANYBLOB="000000000000000008000000000000000000029fb00acee43211193f853c1bc300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="00000000000000000000000000000000000000000d3994a715ae03228d3082eb1acda30dd10a72f9474df959795353e9fc88fbba1c0e77d7b7fa37d61fad8a3c4962fab68bcf02644422289ceba980795109b46d254add28eef0548b6b8903c9f9f30eec21ba6782c8349be29a1a995ad82975e32d62ea23b30100000000000000006b4b4ed5", @ANYBLOB='\x00'/28, @ANYRES32=r2], 0x48) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3, 0x2000000}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="72000000ceeb1795b622ea6b0506799ad47c87e2e7e13349e598d496e2b005ded411c3aaafe6b39f3402fd21c5ee1a", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf2505000000080007007f00000108000700ac1414aa08000700ac1e010108000c000200000008000800ac1414bb0d0001006e6c3830323135340000000008000c000200000008000700e000000114000600fe880000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x20040000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f00000004c0)={@id={0x2, 0x0, @c}, 0x21, 0x0, '\x00', @c}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900", @ANYRES32], 0x4c}}, 0x40000) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000540)={0x28, 0x0, r8, 0x0, &(0x7f000015f000/0x3000)=nil, 0x3000, 0xfff}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010031bd7000fedbdf250900000005000800070000000800010001000000050007000200000085756381fb8ecee85047933d6bf221cf3ccc9ec5d0ab8890371a2ab99d65b6824148ddcc2fb671ede66d59b0d813d15b22d9780e3a6f4def08bc949166831fd5bc35f90502cd97b9d742d4c631cb8a25910b08ed967d353373f6aa76a97ca43c8330d51c32846222657b6925fc782bb8d4ac5458414f60fe89fb2c0ccd91e0a0d30214b3b9ccfd715c55"], 0x2c}, 0x1, 0x0, 0x0, 0x20008941}, 0x64000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0273979a36238e34457fa80c87123b3220000000", @ANYRES16=r8, @ANYBLOB="000829bd7000fbdbdf251f0000000c0006000300000003000000", @ANYBLOB="4a6c509f620f0efcffd02af4164ced666075959ca1440cbab33a5df6ad5932d8d7644cb4d84c7b22dc70d555921ffc238938e35032a5e069d527b8b3dca0189f8561c407e61959bd787cf9505af72d55005bb922a2f3f43080d167d21a249f722d6c9c1f43c85eb56c0af2bec6681111b69078e899e40bfd31a0334a3a12ca451894aaa74aae6f2db00f8fc89faa131396e12251cab9c364735f02e74b450291a2ad56b09b2c209666e222149f8493d3662b46ebccf562a9deb689c968a23f833acfc66a3dd9625867d9c5", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x41) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7], 0x7c}, 0x1, 0x0, 0x0, 0xc080}, 0x4990) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000048de7512a3ac8ae21e125dc45d2ef000000500000a1400000011000100000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14.668589872s ago: executing program 2 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newtaction={0x6c, 0x30, 0x9, 0x4, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x2, 0x200}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r0, @ANYBLOB="2c7782006e6f3d", @ANYRESOCT=r0]) r3 = openat(r1, &(0x7f0000000280)='./cgroup\x00', 0x111000, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x14000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYRES8=r3, @ANYRES32], 0xb4}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000060000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d70002000028008000240000000e30b00038005000100ef00000008000140000000000900010073797a30"], 0xcc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000c00)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) 14.333436642s ago: executing program 0 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000380), 0x1000a) 14.325994222s ago: executing program 2 (id=586): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) r4 = getgid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0xfffffffffffffff5, r2, {{0x4, 0x1, 0x4, 0x3, 0x8, 0x81, {0x3, 0x7f, 0xb35, 0x2, 0x100000000, 0x9, 0x6, 0x5, 0x9, 0x1000, 0x2, r3, r4, 0x3, 0x7}}, {0x0, 0x10}}}, 0xa0) madvise(&(0x7f000015e000/0x2000)=nil, 0x2000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) r5 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x1, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 13.961539398s ago: executing program 4 (id=587): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0xdd3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x6, &(0x7f0000000440)=[{0x5, 0x0, 0xf, 0x5}, {0xb, 0xc0, 0xe9, 0x6}, {0x6, 0x4, 0x40, 0x3ff}, {0xc25, 0x40, 0x8, 0xfffffffd}, {0x0, 0x3e, 0x4, 0x7aede30d}, {0xffff, 0x7, 0x6, 0x36ca}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x200000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 13.333202738s ago: executing program 0 (id=589): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r2, &(0x7f0000000300)=""/212, 0xd4) 12.91362458s ago: executing program 4 (id=590): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r3, &(0x7f0000000300)=""/212, 0xd4) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 11.444738221s ago: executing program 3 (id=594): openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0x400, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x6, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x80000001, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x108dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x8, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0xffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500150013000000080012400ffffffc0500050002000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x40000010) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10.575667648s ago: executing program 3 (id=596): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@newtclass={0x34, 0x28, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {0x4, 0xfff2}, {0xffe0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x9}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x34}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x6, 'syz0\x00', @default, 0x0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 10.512433325s ago: executing program 1 (id=597): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2e, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x818}, 0x4000) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x7}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@allocspi={0x11c, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2}, 0x0, 0x5}, [@lifetime_val={0x24}]}, 0x11c}}, 0x0) 10.511549431s ago: executing program 0 (id=598): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) r4 = getgid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0xfffffffffffffff5, r2, {{0x4, 0x1, 0x4, 0x3, 0x8, 0x81, {0x3, 0x7f, 0xb35, 0x2, 0x100000000, 0x9, 0x6, 0x5, 0x9, 0x1000, 0x2, r3, r4, 0x3, 0x7}}, {0x0, 0x10}}}, 0xa0) madvise(&(0x7f000015e000/0x2000)=nil, 0x2000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) r5 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x1, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x82c65) ioctl$SNDRV_PCM_IOCTL_DELAY(r8, 0x80084121, &(0x7f0000000080)) userfaultfd(0x80001) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) syz_clone3(&(0x7f0000000440)={0x8000, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000240)=0x0, {0x1d}, &(0x7f0000000280)=""/51, 0x33, &(0x7f0000000380)=""/118, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r7}}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r9, 0xc00c620f, &(0x7f00000004c0)={r10}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x88) 9.08109673s ago: executing program 4 (id=599): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2f, [0x7ffc, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x80009, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xea64, 0x0, 0xffffffff, 0x1ff, 0x629, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x2, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x7, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x8, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x2005f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x4, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8b1, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x44904785, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x401, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0x40, 0x1ff, 0x2, 0x53, 0x5, 0x3, 0x901, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0xb, 0x1, 0x9}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29e, 0x0, 0xe}]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000000101040000000000000000020000001800018006000340000100000c000280050001000000000024000280140001800800010000000000080002007f00"], 0x64}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) 8.807736884s ago: executing program 1 (id=600): r0 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r2) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r7) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) read$FUSE(r3, &(0x7f0000006280)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000bc0)=ANY=[]) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') 7.572849908s ago: executing program 2 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) unshare(0x40200) r1 = semget(0x1, 0x4, 0x39c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r1, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={0xffffffffffffffff, &(0x7f0000000880)}, 0x20) mkdirat(0xffffffffffffffff, 0x0, 0x22) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x0, 0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.051991173s ago: executing program 1 (id=602): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca38fff48f3be52163448412ba8d0ea1c139c1ff45847522a11b0af52124c686a2981df066ee8064e40e7c2a87cf1f5dd84d6de6a40e40900480eb4d97249ec645a8f53748e60e4655d9145b9ccd3d0f9c90b9ba0ade230e2eb2133d3143a1261f4e045c49f8261cb488f6333eda701b367a68f6e3cd36224453cde3c8022769f40d7ed60b688d275a683eae0b18d0b906520aa25f73bd135fe5f2c07a870157eb70c74588d58692c396b85c691e5bd09132c29dc537418c4f6221f11ce11b412ace8d12415ab8d1c8e1b4b0fdabc72f7e1bfd1094703d1f1a91380", 0xde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.896507062s ago: executing program 3 (id=603): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2f, [0x7ffc, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x80009, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xea64, 0x0, 0xffffffff, 0x1ff, 0x629, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x2, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x7, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x8, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x2005f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x4, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8b1, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x44904785, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x401, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0x40, 0x1ff, 0x2, 0x53, 0x5, 0x3, 0x901, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0xb, 0x1, 0x9}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29e, 0x0, 0xe}]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000000101040000000000000000020000001800018006000340000100000c000280050001000000000024000280140001800800010000000000080002007f00"], 0x64}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) 5.83012865s ago: executing program 4 (id=604): syz_open_dev$video(0x0, 0x8, 0x100) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) close(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200080, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x6, &(0x7f0000000440)=[{0x5, 0x0, 0xf, 0x5}, {0xb, 0xc0, 0xe9, 0x6}, {0x6, 0x4, 0x40, 0x3ff}, {0xc25, 0x40, 0x8, 0xfffffffd}, {0x0, 0x3e, 0x4, 0x7aede30d}, {0xffff, 0x7, 0x6, 0x36ca}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e21, @broadcast}}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000004c0)=0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400800) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) 5.524785361s ago: executing program 3 (id=605): syz_open_dev$video(0x0, 0x8, 0x100) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0xdd3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x6, &(0x7f0000000440)=[{0x5, 0x0, 0xf, 0x5}, {0xb, 0xc0, 0xe9, 0x6}, {0x6, 0x4, 0x40, 0x3ff}, {0xc25, 0x40, 0x8, 0xfffffffd}, {0x0, 0x3e, 0x4, 0x7aede30d}, {0xffff, 0x7, 0x6, 0x36ca}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x200000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 5.397249147s ago: executing program 1 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0xffffff, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x40040) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x1810) 5.124576027s ago: executing program 0 (id=607): socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) getpid() r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r0, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) 4.319635786s ago: executing program 3 (id=608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) (async) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setfsuid(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@empty}]}}) 4.062623254s ago: executing program 1 (id=609): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r3, &(0x7f0000000300)=""/212, 0xd4) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.031764895s ago: executing program 4 (id=610): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) r4 = getgid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0xfffffffffffffff5, r2, {{0x4, 0x1, 0x4, 0x3, 0x8, 0x81, {0x3, 0x7f, 0xb35, 0x2, 0x100000000, 0x9, 0x6, 0x5, 0x9, 0x1000, 0x2, r3, r4, 0x3, 0x7}}, {0x0, 0x10}}}, 0xa0) madvise(&(0x7f000015e000/0x2000)=nil, 0x2000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) r5 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x1, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) userfaultfd(0x80001) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) syz_clone3(&(0x7f0000000440)={0x8000, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000240)=0x0, {0x1d}, &(0x7f0000000280)=""/51, 0x33, &(0x7f0000000380)=""/118, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r7}}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f00000004c0)={r9}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x88) 1.647643297s ago: executing program 0 (id=611): setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x3, 0x10001, 0x4}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) close(0x3) r4 = io_uring_setup(0x354a, &(0x7f0000000300)={0x0, 0x145e, 0x800, 0x0, 0x32b}) clock_nanosleep(0x7, 0x0, &(0x7f00000012c0)={0x77359400}, 0xfffffffffffffffe) close_range(r4, 0xffffffffffffffff, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000003c0)=""/4096, 0x1000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r6, 0x8, 0x0, 0xa0000, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 295.221488ms ago: executing program 3 (id=612): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x1) io_setup(0x222, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRESDEC, @ANYRES16, @ANYBLOB="00d04a4c5d79580b69dc9d4ac8", @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000003a000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x100010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 0s ago: executing program 1 (id=613): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$FIONREAD(r1, 0x541b, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fcdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x24}}, 0x800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') read$FUSE(r3, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22ffe6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) kernel console output (not intermixed with test programs): m permissive=1 [ 74.372520][ T30] audit: type=1400 audit(1763699757.598:89): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.BHBRLz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.410714][ T30] audit: type=1400 audit(1763699757.608:90): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.413649][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.433530][ T30] audit: type=1400 audit(1763699757.608:91): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.BHBRLz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.443692][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.468888][ T30] audit: type=1400 audit(1763699757.608:92): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.BHBRLz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.510632][ T30] audit: type=1400 audit(1763699757.608:93): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.522707][ T5811] veth0_vlan: entered promiscuous mode [ 74.536023][ T30] audit: type=1400 audit(1763699757.628:94): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.558983][ T30] audit: type=1400 audit(1763699757.638:95): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="gadgetfs" ino=7163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.593602][ T5811] veth1_vlan: entered promiscuous mode [ 74.624283][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.633056][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.665407][ T5809] veth0_macvtap: entered promiscuous mode [ 74.693320][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.701440][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.721682][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731811][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.742743][ T5809] veth1_macvtap: entered promiscuous mode [ 74.838116][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.868607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.887929][ T5811] veth0_macvtap: entered promiscuous mode [ 74.899645][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.932939][ T5811] veth1_macvtap: entered promiscuous mode [ 74.992367][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.025272][ T5861] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.043218][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.072157][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.079986][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.116592][ T3577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.134619][ T3577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.171961][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.224288][ T5861] usb 2-1: device descriptor read/64, error -71 [ 75.233213][ T3577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.243981][ T3577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.253947][ T5939] FAULT_INJECTION: forcing a failure. [ 75.253947][ T5939] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.267642][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 75.267666][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.267677][ T5939] Call Trace: [ 75.267683][ T5939] [ 75.267689][ T5939] dump_stack_lvl+0x16c/0x1f0 [ 75.267713][ T5939] should_fail_ex+0x512/0x640 [ 75.267736][ T5939] _copy_from_user+0x2e/0xd0 [ 75.267759][ T5939] do_sock_getsockopt+0x3ca/0x440 [ 75.267790][ T5939] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 75.267814][ T5939] ? __fget_files+0x204/0x3c0 [ 75.267848][ T5939] __sys_getsockopt+0x12f/0x260 [ 75.267877][ T5939] __x64_sys_getsockopt+0xbd/0x160 [ 75.267898][ T5939] ? do_syscall_64+0x91/0xfa0 [ 75.267914][ T5939] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.267931][ T5939] do_syscall_64+0xcd/0xfa0 [ 75.267950][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.267968][ T5939] RIP: 0033:0x7fec3378f749 [ 75.267983][ T5939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.267998][ T5939] RSP: 002b:00007fec34652038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 75.268015][ T5939] RAX: ffffffffffffffda RBX: 00007fec339e5fa0 RCX: 00007fec3378f749 [ 75.268027][ T5939] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000003 [ 75.268037][ T5939] RBP: 00007fec34652090 R08: 0000200000000400 R09: 0000000000000000 [ 75.268046][ T5939] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 75.268057][ T5939] R13: 00007fec339e6038 R14: 00007fec339e5fa0 R15: 00007ffc79f206c8 [ 75.268079][ T5939] [ 75.495116][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.503070][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.523184][ T3577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.533838][ T3577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.570228][ T3577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.582493][ T3577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.614124][ T5861] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.716577][ T5137] Bluetooth: hci3: command tx timeout [ 75.722769][ T52] Bluetooth: hci2: command tx timeout [ 75.730365][ T5822] Bluetooth: hci0: command tx timeout [ 75.744164][ T5861] usb 2-1: device descriptor read/64, error -71 [ 75.750645][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.795168][ T5137] Bluetooth: hci4: command tx timeout [ 75.800640][ T5137] Bluetooth: hci1: command tx timeout [ 75.809083][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.912658][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.924341][ T5861] usb usb2-port1: attempt power cycle [ 75.953703][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.043279][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.479184][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.546938][ T5861] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.560742][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.560768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.577201][ T5861] usb 2-1: device descriptor read/8, error -71 [ 76.941786][ T5861] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 76.977466][ T5861] usb 2-1: device descriptor read/8, error -71 [ 77.429438][ T5861] usb usb2-port1: unable to enumerate USB device [ 77.822307][ T5137] Bluetooth: hci3: command tx timeout [ 77.828146][ T5822] Bluetooth: hci0: command tx timeout [ 77.834351][ T5822] Bluetooth: hci2: command tx timeout [ 77.874502][ T5822] Bluetooth: hci1: command tx timeout [ 77.880175][ T5137] Bluetooth: hci4: command tx timeout [ 78.206541][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 78.206555][ T30] audit: type=1400 audit(1763699761.508:121): avc: denied { read write } for pid=5966 comm="syz.3.11" name="vbi3" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.235919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 78.264602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.395091][ T30] audit: type=1400 audit(1763699761.508:122): avc: denied { open } for pid=5966 comm="syz.3.11" path="/dev/vbi3" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.521214][ T30] audit: type=1400 audit(1763699761.558:123): avc: denied { ioctl } for pid=5966 comm="syz.3.11" path="/dev/vbi3" dev="devtmpfs" ino=968 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.557536][ T30] audit: type=1400 audit(1763699761.588:124): avc: denied { prog_run } for pid=5966 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.584203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.594146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.661056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.661688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.763529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.763647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.967637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.984219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.043837][ T30] audit: type=1400 audit(1763699761.728:125): avc: denied { read } for pid=5975 comm="syz.0.12" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.214103][ T30] audit: type=1400 audit(1763699761.728:126): avc: denied { open } for pid=5975 comm="syz.0.12" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.357636][ T30] audit: type=1400 audit(1763699761.808:127): avc: denied { allowed } for pid=5975 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.594172][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 79.659873][ T30] audit: type=1400 audit(1763699762.938:128): avc: denied { create } for pid=5986 comm="syz.0.15" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.733171][ T5992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 79.931940][ T9] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 80.383123][ T30] audit: type=1400 audit(1763699762.938:129): avc: denied { map } for pid=5986 comm="syz.0.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.436017][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.865274][ T30] audit: type=1400 audit(1763699762.938:130): avc: denied { read write } for pid=5986 comm="syz.0.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.934386][ T9] usb 2-1: config 0 descriptor?? [ 81.131919][ T5992] xt_CT: No such helper "pptp" [ 81.218759][ T9] kaweth 2-1:0.0: Firmware present in device. [ 81.440566][ T9] kaweth 2-1:0.0: Statistics collection: 0 [ 81.456636][ T9] kaweth 2-1:0.0: Multicast filter limit: 0 [ 81.462547][ T9] kaweth 2-1:0.0: MTU: 0 [ 81.482578][ T9] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 81.586865][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.598544][ T1206] kernel write not supported for file bpf-map (pid: 1206 comm: kworker/0:2) [ 81.737694][ T43] cfg80211: failed to load regulatory.db [ 82.014098][ T5944] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 82.124315][ T9] kaweth 2-1:0.0: kaweth interface created at eth1 [ 82.351922][ T5928] usb 2-1: USB disconnect, device number 6 [ 83.264449][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.445406][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 83.445426][ T30] audit: type=1400 audit(1763699766.748:147): avc: denied { create } for pid=6032 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.486313][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.568630][ T43] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 83.584137][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.664185][ T30] audit: type=1400 audit(1763699766.748:148): avc: denied { create } for pid=6032 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.704187][ T30] audit: type=1400 audit(1763699766.778:149): avc: denied { bind } for pid=6030 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.754206][ T30] audit: type=1400 audit(1763699766.788:150): avc: denied { name_bind } for pid=6030 comm="syz.0.25" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.817419][ T30] audit: type=1400 audit(1763699766.798:151): avc: denied { node_bind } for pid=6030 comm="syz.0.25" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 83.888353][ T43] usb 3-1: config 0 descriptor?? [ 83.900842][ T30] audit: type=1400 audit(1763699766.798:152): avc: denied { write } for pid=6021 comm="syz.3.23" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.225850][ T30] audit: type=1400 audit(1763699767.528:153): avc: denied { write } for pid=6036 comm="syz.0.27" name="tcp" dev="proc" ino=4026533381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 84.356660][ T30] audit: type=1400 audit(1763699767.638:154): avc: denied { write } for pid=6039 comm="syz.3.28" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.415502][ T43] hid_mf 0003:0079:1846.0001: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 84.455020][ T43] hid_mf 0003:0079:1846.0001: Invalid report, this should never happen! [ 84.463645][ T43] hid_mf 0003:0079:1846.0001: Force feedback init failed. [ 84.894732][ T30] audit: type=1400 audit(1763699768.158:155): avc: denied { ioctl } for pid=6045 comm="syz.1.29" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.896522][ T6049] random: crng reseeded on system resumption [ 84.952443][ T30] audit: type=1400 audit(1763699768.198:156): avc: denied { read write } for pid=6045 comm="syz.1.29" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.801844][ T5928] usb 3-1: USB disconnect, device number 2 [ 87.068720][ T6057] loop7: detected capacity change from 0 to 16384 [ 87.342409][ T6066] loop7: detected capacity change from 16384 to 16383 [ 87.590957][ T6079] random: crng reseeded on system resumption [ 88.534301][ T5944] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.605030][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 88.605048][ T30] audit: type=1326 audit(1763699771.898:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3378f749 code=0x7ffc0000 [ 88.689697][ T30] audit: type=1326 audit(1763699771.898:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3378f749 code=0x7ffc0000 [ 88.805350][ T30] audit: type=1326 audit(1763699771.938:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fec3378f749 code=0x7ffc0000 [ 88.829081][ T30] audit: type=1326 audit(1763699771.938:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3378f749 code=0x7ffc0000 [ 88.855374][ T30] audit: type=1326 audit(1763699771.938:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3378f749 code=0x7ffc0000 [ 88.880627][ T5944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.880980][ T30] audit: type=1326 audit(1763699771.898:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3378f749 code=0x7ffc0000 [ 88.924637][ T6092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.938132][ T6092] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 88.962430][ T5944] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.972192][ T6092] audit: backlog limit exceeded [ 88.993276][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.007074][ T30] audit: type=1326 audit(1763699771.938:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3378f749 code=0x7ffc0000 [ 89.833770][ T6100] random: crng reseeded on system resumption [ 90.057269][ T5944] usb 3-1: config 0 descriptor?? [ 90.073825][ T5944] pwc: Askey VC010 type 2 USB webcam detected. [ 90.260556][ T6104] random: crng reseeded on system resumption [ 90.551456][ T5822] Bluetooth: hci3: Malformed Event: 0x02 [ 90.662963][ T6109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.706509][ T5944] pwc: recv_control_msg error -32 req 02 val 2b00 [ 91.734474][ T5944] pwc: recv_control_msg error -32 req 02 val 2700 [ 91.763839][ T5944] pwc: recv_control_msg error -32 req 02 val 2c00 [ 92.128567][ T5944] pwc: recv_control_msg error -32 req 04 val 1000 [ 92.259218][ T5944] pwc: recv_control_msg error -32 req 04 val 1300 [ 92.276825][ T5944] pwc: recv_control_msg error -32 req 04 val 1400 [ 93.027571][ T5944] pwc: recv_control_msg error -32 req 02 val 2100 [ 93.089471][ T5944] pwc: recv_control_msg error -71 req 04 val 1500 [ 93.098477][ T5944] pwc: recv_control_msg error -71 req 02 val 2500 [ 93.123167][ T5944] pwc: recv_control_msg error -71 req 02 val 2400 [ 93.130268][ T5944] pwc: recv_control_msg error -71 req 02 val 2600 [ 93.137307][ T5944] pwc: recv_control_msg error -71 req 02 val 2900 [ 93.144131][ T5944] pwc: recv_control_msg error -71 req 02 val 2800 [ 93.152655][ T5944] pwc: recv_control_msg error -71 req 04 val 1100 [ 93.160336][ T5944] pwc: recv_control_msg error -71 req 04 val 1200 [ 93.177454][ T5944] pwc: Registered as video103. [ 93.184763][ T5944] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 93.351436][ T5944] usb 3-1: USB disconnect, device number 3 [ 93.360503][ T6135] 9pnet_virtio: no channels available for device syz [ 94.260110][ T6152] random: crng reseeded on system resumption [ 94.462056][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 94.462072][ T30] audit: type=1400 audit(1763699777.758:405): avc: denied { create } for pid=6150 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.694232][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.168323][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 95.279485][ T5814] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 95.362474][ T30] audit: type=1400 audit(1763699777.778:406): avc: denied { write } for pid=6150 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.405240][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.424073][ T30] audit: type=1400 audit(1763699778.718:407): avc: denied { create } for pid=6156 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.474902][ T30] audit: type=1400 audit(1763699778.728:408): avc: denied { write } for pid=6156 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.515885][ T5814] pvrusb2: Hardware description: Terratec Grabster AV400 [ 95.544654][ T5814] pvrusb2: ********** [ 95.565500][ T5814] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 95.606307][ T5814] pvrusb2: Important functionality might not be entirely working. [ 95.626642][ T5814] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 95.672041][ T5814] pvrusb2: ********** [ 95.708681][ T30] audit: type=1400 audit(1763699779.008:409): avc: denied { read write } for pid=6151 comm="syz.0.54" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.227634][ T2340] pvrusb2: Invalid write control endpoint [ 96.781894][ T5814] usb 1-1: USB disconnect, device number 2 [ 96.789630][ T30] audit: type=1400 audit(1763699779.038:410): avc: denied { open } for pid=6151 comm="syz.0.54" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.813719][ T30] audit: type=1400 audit(1763699779.038:411): avc: denied { ioctl } for pid=6151 comm="syz.0.54" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.840422][ T30] audit: type=1400 audit(1763699779.298:412): avc: denied { open } for pid=6151 comm="syz.0.54" path="/dev/ttyq5" dev="devtmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 97.115718][ T2340] pvrusb2: Invalid write control endpoint [ 97.140299][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 97.214059][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 97.221646][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 97.233433][ T2340] pvrusb2: Device being rendered inoperable [ 97.241541][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 97.254106][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 97.266002][ T2340] pvrusb2: Attached sub-driver cx25840 [ 97.271544][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 97.281849][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 97.338680][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.402019][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.268651][ T6180] Zero length message leads to an empty skb [ 98.290170][ T30] audit: type=1400 audit(1763699780.908:413): avc: denied { write } for pid=6181 comm="syz.3.64" name="cgroup.subtree_control" dev="cgroup2" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.383685][ T30] audit: type=1400 audit(1763699780.908:414): avc: denied { open } for pid=6181 comm="syz.3.64" path="" dev="cgroup2" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.957179][ T6189] random: crng reseeded on system resumption [ 99.024267][ T5814] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.102892][ T6193] netlink: 'syz.4.67': attribute type 1 has an invalid length. [ 99.184301][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 99.230894][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.274152][ T5814] usb 1-1: no configurations [ 99.278820][ T5814] usb 1-1: can't read configurations, error -22 [ 99.791522][ T6201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.865623][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 99.865635][ T30] audit: type=1400 audit(1763699783.168:423): avc: denied { ioctl } for pid=6197 comm="syz.1.68" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9064 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.036168][ T6209] FAULT_INJECTION: forcing a failure. [ 100.036168][ T6209] name failslab, interval 1, probability 0, space 0, times 1 [ 100.102529][ T6211] fuse: Unknown parameter 'user00000000000000000000' [ 100.113109][ T6209] CPU: 1 UID: 0 PID: 6209 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT(full) [ 100.113136][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.113146][ T6209] Call Trace: [ 100.113152][ T6209] [ 100.113159][ T6209] dump_stack_lvl+0x16c/0x1f0 [ 100.113184][ T6209] should_fail_ex+0x512/0x640 [ 100.113205][ T6209] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 100.113235][ T6209] should_failslab+0xc2/0x120 [ 100.113255][ T6209] kmem_cache_alloc_noprof+0x75/0x6e0 [ 100.113281][ T6209] ? ovs_flow_alloc+0x1e/0x210 [ 100.113309][ T6209] ? ovs_flow_alloc+0x1e/0x210 [ 100.113330][ T6209] ovs_flow_alloc+0x1e/0x210 [ 100.113352][ T6209] ovs_flow_cmd_new+0x231/0xe30 [ 100.113382][ T6209] ? kasan_save_stack+0x42/0x60 [ 100.113397][ T6209] ? kasan_save_stack+0x33/0x60 [ 100.113414][ T6209] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 100.113437][ T6209] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 100.113458][ T6209] ? genl_rcv_msg+0x55c/0x800 [ 100.113472][ T6209] ? netlink_rcv_skb+0x158/0x420 [ 100.113495][ T6209] ? genl_rcv+0x28/0x40 [ 100.113510][ T6209] ? ___sys_sendmsg+0x134/0x1d0 [ 100.113531][ T6209] ? __sys_sendmsg+0x16d/0x220 [ 100.113551][ T6209] ? do_syscall_64+0xcd/0xfa0 [ 100.113566][ T6209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.113626][ T6209] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 100.113644][ T6209] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 100.113667][ T6209] genl_family_rcv_msg_doit+0x209/0x2f0 [ 100.113687][ T6209] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 100.113721][ T6209] ? bpf_lsm_capable+0x9/0x10 [ 100.113742][ T6209] ? security_capable+0x7e/0x260 [ 100.113770][ T6209] ? ns_capable+0xd7/0x110 [ 100.113795][ T6209] genl_rcv_msg+0x55c/0x800 [ 100.113815][ T6209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.113833][ T6209] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 100.113867][ T6209] netlink_rcv_skb+0x158/0x420 [ 100.113893][ T6209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.113911][ T6209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.113946][ T6209] ? netlink_deliver_tap+0x1ae/0xd30 [ 100.113977][ T6209] genl_rcv+0x28/0x40 [ 100.113989][ T6209] netlink_unicast+0x5aa/0x870 [ 100.114013][ T6209] ? __pfx_netlink_unicast+0x10/0x10 [ 100.114041][ T6209] netlink_sendmsg+0x8c8/0xdd0 [ 100.114066][ T6209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.114097][ T6209] ____sys_sendmsg+0xa98/0xc70 [ 100.114114][ T6209] ? copy_msghdr_from_user+0x10a/0x160 [ 100.114135][ T6209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.114163][ T6209] ___sys_sendmsg+0x134/0x1d0 [ 100.114188][ T6209] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.114209][ T6209] ? __lock_acquire+0x622/0x1c90 [ 100.114256][ T6209] __sys_sendmsg+0x16d/0x220 [ 100.114280][ T6209] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.114319][ T6209] do_syscall_64+0xcd/0xfa0 [ 100.114338][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.114355][ T6209] RIP: 0033:0x7f9bc978f749 [ 100.114371][ T6209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.114388][ T6209] RSP: 002b:00007f9bca541038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.114406][ T6209] RAX: ffffffffffffffda RBX: 00007f9bc99e5fa0 RCX: 00007f9bc978f749 [ 100.114416][ T6209] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 100.114427][ T6209] RBP: 00007f9bca541090 R08: 0000000000000000 R09: 0000000000000000 [ 100.114437][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.114446][ T6209] R13: 00007f9bc99e6038 R14: 00007f9bc99e5fa0 R15: 00007ffdd7ddcd38 [ 100.114471][ T6209] [ 100.751304][ T30] audit: type=1400 audit(1763699783.398:424): avc: denied { mounton } for pid=6207 comm="syz.0.71" path="/11/file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.252388][ T6215] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.817180][ T30] audit: type=1400 audit(1763699783.978:425): avc: denied { nlmsg_read } for pid=6212 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.837658][ T30] audit: type=1400 audit(1763699783.978:426): avc: denied { shutdown } for pid=6206 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.857313][ T30] audit: type=1400 audit(1763699783.978:427): avc: denied { getopt } for pid=6206 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.876924][ T30] audit: type=1400 audit(1763699783.978:428): avc: denied { write } for pid=6206 comm="syz.1.73" lport=53835 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 101.901552][ T30] audit: type=1400 audit(1763699783.978:429): avc: denied { getopt } for pid=6206 comm="syz.1.73" lport=53835 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 101.925492][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.932561][ T30] audit: type=1400 audit(1763699783.978:430): avc: denied { setopt } for pid=6206 comm="syz.1.73" lport=53835 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 101.942653][ T6215] block device autoloading is deprecated and will be removed. [ 101.992573][ T30] audit: type=1400 audit(1763699784.138:431): avc: denied { read append } for pid=6207 comm="syz.0.71" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 102.784361][ T30] audit: type=1400 audit(1763699784.138:432): avc: denied { open } for pid=6207 comm="syz.0.71" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 103.036538][ T6233] random: crng reseeded on system resumption [ 103.414446][ T6238] mmap: syz.4.80 (6238) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.525714][ T6240] random: crng reseeded on system resumption [ 105.309956][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 105.309972][ T30] audit: type=1400 audit(1763699788.608:445): avc: denied { create } for pid=6260 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 105.820566][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 105.831554][ T30] audit: type=1400 audit(1763699789.108:446): avc: denied { write } for pid=6260 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 106.458646][ T6271] random: crng reseeded on system resumption [ 107.312020][ T6274] FAULT_INJECTION: forcing a failure. [ 107.312020][ T6274] name failslab, interval 1, probability 0, space 0, times 0 [ 107.333364][ T6274] CPU: 1 UID: 0 PID: 6274 Comm: syz.2.90 Not tainted syzkaller #0 PREEMPT(full) [ 107.333391][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.333401][ T6274] Call Trace: [ 107.333407][ T6274] [ 107.333414][ T6274] dump_stack_lvl+0x16c/0x1f0 [ 107.333437][ T6274] should_fail_ex+0x512/0x640 [ 107.333458][ T6274] ? fs_reclaim_acquire+0xae/0x150 [ 107.333480][ T6274] should_failslab+0xc2/0x120 [ 107.333502][ T6274] __kmalloc_noprof+0xdd/0x880 [ 107.333526][ T6274] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 107.333553][ T6274] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 107.333572][ T6274] tomoyo_realpath_from_path+0xc2/0x6e0 [ 107.333595][ T6274] ? tomoyo_profile+0x47/0x60 [ 107.333621][ T6274] tomoyo_path_number_perm+0x245/0x580 [ 107.333637][ T6274] ? tomoyo_path_number_perm+0x237/0x580 [ 107.333655][ T6274] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.333672][ T6274] ? find_held_lock+0x2b/0x80 [ 107.333713][ T6274] ? find_held_lock+0x2b/0x80 [ 107.333733][ T6274] ? hook_file_ioctl_common+0x145/0x410 [ 107.333761][ T6274] ? __fget_files+0x20e/0x3c0 [ 107.333783][ T6274] security_file_ioctl+0x9b/0x240 [ 107.333805][ T6274] __x64_sys_ioctl+0xb7/0x210 [ 107.333829][ T6274] do_syscall_64+0xcd/0xfa0 [ 107.333847][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.333865][ T6274] RIP: 0033:0x7f7990d8f749 [ 107.333880][ T6274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.333902][ T6274] RSP: 002b:00007f7991c19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.333920][ T6274] RAX: ffffffffffffffda RBX: 00007f7990fe5fa0 RCX: 00007f7990d8f749 [ 107.333930][ T6274] RDX: 0000200000000180 RSI: 000000004020ae46 RDI: 0000000000000004 [ 107.333941][ T6274] RBP: 00007f7991c19090 R08: 0000000000000000 R09: 0000000000000000 [ 107.333950][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.333960][ T6274] R13: 00007f7990fe6038 R14: 00007f7990fe5fa0 R15: 00007ffe71a27318 [ 107.333987][ T6274] [ 107.644550][ T6274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.962533][ T6282] fuse: Unknown parameter 'user00000000000000000000' [ 109.823271][ T30] audit: type=1400 audit(1763699793.118:447): avc: denied { mount } for pid=6280 comm="syz.0.92" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.845015][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.059058][ T30] audit: type=1400 audit(1763699794.218:448): avc: denied { create } for pid=6291 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.078334][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.097326][ T30] audit: type=1400 audit(1763699794.228:449): avc: denied { ioctl } for pid=6291 comm="syz.0.94" path="socket:[10298]" dev="sockfs" ino=10298 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.170962][ T6300] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 111.177868][ T6300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.187202][ T6300] vhci_hcd vhci_hcd.0: Device attached [ 112.343054][ T1206] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 112.352607][ T10] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 112.605805][ T10] usb 5-1: config 0 has no interfaces? [ 112.611352][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.351426][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.362977][ T10] usb 5-1: config 0 descriptor?? [ 113.420437][ T30] audit: type=1400 audit(1763699796.718:450): avc: denied { execute } for pid=6313 comm="syz.0.99" path="/16/memory.events" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.564414][ T30] audit: type=1400 audit(1763699796.858:451): avc: denied { create } for pid=6317 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.594977][ T6301] usbip_core: unknown command [ 113.599755][ T6301] vhci_hcd: unknown pdu 0 [ 113.629272][ T6301] usbip_core: unknown command [ 113.634795][ T30] audit: type=1400 audit(1763699796.888:452): avc: denied { setopt } for pid=6317 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.657013][ T3514] vhci_hcd: stop threads [ 113.661285][ T3514] vhci_hcd: release socket [ 113.725403][ T3514] vhci_hcd: disconnect device [ 113.754061][ T1206] usb 41-1: device descriptor read/64, error -71 [ 113.814773][ T10] usb 5-1: USB disconnect, device number 3 [ 114.082771][ T6330] netlink: 36 bytes leftover after parsing attributes in process `syz.3.104'. [ 114.118708][ T30] audit: type=1400 audit(1763699797.328:453): avc: denied { create } for pid=6317 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.245632][ T30] audit: type=1400 audit(1763699797.358:454): avc: denied { bind } for pid=6317 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.286745][ T6338] program syz.4.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.395182][ T30] audit: type=1400 audit(1763699797.358:455): avc: denied { connect } for pid=6317 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.483859][ T1206] vhci_hcd: vhci_device speed not set [ 114.491217][ T30] audit: type=1400 audit(1763699797.368:456): avc: denied { create } for pid=6317 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.513060][ T30] audit: type=1400 audit(1763699797.368:457): avc: denied { write } for pid=6317 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.135692][ T5868] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.404056][ T5868] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 115.589530][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.038583][ T5868] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 116.048610][ T5868] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 116.057155][ T5868] usb 2-1: Manufacturer: syz [ 116.077017][ T5868] usb 2-1: config 0 descriptor?? [ 116.165710][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 116.165727][ T30] audit: type=1400 audit(1763699799.468:464): avc: denied { ioctl } for pid=6360 comm="syz.2.111" path="socket:[10433]" dev="sockfs" ino=10433 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.220432][ T5868] rc_core: IR keymap rc-hauppauge not found [ 116.252518][ T5868] Registered IR keymap rc-empty [ 116.262248][ T5868] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 116.356723][ T5868] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 116.360517][ T6345] warning: `syz.1.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.403457][ T6366] fuse: Unknown parameter 'user_i00000000000000000000' [ 116.593755][ T30] audit: type=1400 audit(1763699799.888:465): avc: denied { read append } for pid=6372 comm="syz.2.114" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.863408][ T30] audit: type=1400 audit(1763699799.918:466): avc: denied { open } for pid=6372 comm="syz.2.114" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.036715][ T6373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (288 ns). Using initial count to start timer. [ 117.324243][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.618044][ T3093] usb 2-1: USB disconnect, device number 7 [ 118.724259][ T43] usb 3-1: device descriptor read/64, error -71 [ 119.224385][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.554113][ T43] usb 3-1: device descriptor read/64, error -71 [ 119.697457][ T43] usb usb3-port1: attempt power cycle [ 120.364320][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 120.418487][ T30] audit: type=1400 audit(1763699803.718:467): avc: denied { unlink } for pid=6408 comm="syz.2.123" name="#1" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.500516][ T30] audit: type=1400 audit(1763699803.748:468): avc: denied { mount } for pid=6408 comm="syz.2.123" name="/" dev="overlay" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 120.504138][ T1206] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.547461][ T6409] netlink: 48 bytes leftover after parsing attributes in process `syz.2.123'. [ 120.557949][ T30] audit: type=1400 audit(1763699803.788:469): avc: denied { create } for pid=6408 comm="syz.2.123" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.686430][ T30] audit: type=1400 audit(1763699803.878:470): avc: denied { read write } for pid=6408 comm="syz.2.123" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 120.797750][ T30] audit: type=1400 audit(1763699803.878:471): avc: denied { open } for pid=6408 comm="syz.2.123" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 120.834467][ T30] audit: type=1400 audit(1763699804.128:472): avc: denied { ioctl } for pid=6416 comm="syz.1.126" path="socket:[10574]" dev="sockfs" ino=10574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.894339][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 120.958164][ T6419] random: crng reseeded on system resumption [ 121.093056][ T1206] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.141481][ T1206] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.175075][ T1206] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.203555][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.225965][ T1206] usb 5-1: Product: syz [ 121.249584][ T1206] usb 5-1: Manufacturer: syz [ 121.265220][ T1206] usb 5-1: SerialNumber: syz [ 121.410350][ T30] audit: type=1400 audit(1763699804.708:473): avc: denied { create } for pid=6423 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.462097][ T30] audit: type=1400 audit(1763699804.748:474): avc: denied { ioctl } for pid=6425 comm="syz.2.128" path="socket:[10590]" dev="sockfs" ino=10590 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.498336][ T6397] wg2: entered promiscuous mode [ 121.654964][ T6397] wg2: entered allmulticast mode [ 121.877251][ T6435] process 'syz.0.130' launched './file0' with NULL argv: empty string added [ 122.455185][ T30] audit: type=1400 audit(1763699805.188:475): avc: denied { execute_no_trans } for pid=6427 comm="syz.0.130" path="/21/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.479068][ T1206] usb 5-1: 0:2 : does not exist [ 122.497948][ T30] audit: type=1400 audit(1763699805.728:476): avc: denied { read write } for pid=6425 comm="syz.2.128" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 122.512467][ T1206] usb 5-1: unit 9 not found! [ 122.578224][ T30] audit: type=1400 audit(1763699805.738:477): avc: denied { open } for pid=6425 comm="syz.2.128" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 122.621720][ T1206] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 122.638317][ T1206] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4) [ 122.660514][ T1206] usb 5-1: 4:0: cannot get min/max values for control 4 (id 4) [ 122.810794][ T6452] vxcan1: tx address claim with dlc 0 [ 122.818673][ T30] audit: type=1400 audit(1763699806.108:478): avc: denied { ioctl } for pid=6451 comm="syz.1.138" path="socket:[10635]" dev="sockfs" ino=10635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.846778][ T6447] evm: overlay not supported [ 122.857469][ T30] audit: type=1400 audit(1763699806.108:479): avc: denied { bind } for pid=6451 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.909065][ T30] audit: type=1400 audit(1763699806.108:480): avc: denied { write } for pid=6451 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.909164][ T1206] usb 5-1: USB disconnect, device number 4 [ 122.934564][ T30] audit: type=1400 audit(1763699806.148:481): avc: denied { accept } for pid=6451 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.678854][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.844304][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 123.871199][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.887483][ T9] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 123.964108][ T9] usb 1-1: config 7 has no interface number 0 [ 123.984183][ T9] usb 1-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 124.026117][ T9] usb 1-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.203905][ T9] usb 1-1: config 7 interface 58 has no altsetting 0 [ 124.211739][ T30] audit: type=1400 audit(1763699807.508:482): avc: denied { setopt } for pid=6463 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.214337][ T9] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 124.242589][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.251032][ T9] usb 1-1: Product: syz [ 124.273578][ T9] usb 1-1: Manufacturer: syz [ 124.286605][ T9] usb 1-1: SerialNumber: syz [ 124.366401][ T6476] FAULT_INJECTION: forcing a failure. [ 124.366401][ T6476] name failslab, interval 1, probability 0, space 0, times 0 [ 124.380199][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.395509][ T6476] CPU: 0 UID: 0 PID: 6476 Comm: syz.4.144 Not tainted syzkaller #0 PREEMPT(full) [ 124.395532][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.395540][ T6476] Call Trace: [ 124.395545][ T6476] [ 124.395552][ T6476] dump_stack_lvl+0x16c/0x1f0 [ 124.395576][ T6476] should_fail_ex+0x512/0x640 [ 124.395599][ T6476] ? __kmalloc_noprof+0xca/0x880 [ 124.395623][ T6476] should_failslab+0xc2/0x120 [ 124.395644][ T6476] __kmalloc_noprof+0xdd/0x880 [ 124.395667][ T6476] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 124.395693][ T6476] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 124.395712][ T6476] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 124.395733][ T6476] vb2_core_reqbufs+0x398/0xfe0 [ 124.395757][ T6476] ? __mutex_trylock_common+0xe9/0x250 [ 124.395774][ T6476] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 124.395812][ T6476] ? __pfx___mutex_trylock_common+0x10/0x10 [ 124.395830][ T6476] ? __pfx___might_resched+0x10/0x10 [ 124.395856][ T6476] ? trace_contention_end+0xdd/0x130 [ 124.395873][ T6476] ? __mutex_lock+0x1c5/0x1060 [ 124.395890][ T6476] ? avc_has_extended_perms+0x47c/0x1090 [ 124.395919][ T6476] vb2_ioctl_reqbufs+0x291/0x450 [ 124.395939][ T6476] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 124.395956][ T6476] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 124.395980][ T6476] ? kasan_quarantine_put+0x10a/0x240 [ 124.396000][ T6476] vidioc_reqbufs+0x86/0x100 [ 124.396029][ T6476] v4l_reqbufs+0x142/0x1d0 [ 124.396056][ T6476] __video_do_ioctl+0xb77/0xf00 [ 124.396086][ T6476] ? __might_fault+0xe3/0x190 [ 124.396111][ T6476] ? __pfx___video_do_ioctl+0x10/0x10 [ 124.396146][ T6476] video_usercopy+0x4d0/0x1720 [ 124.396163][ T6476] ? __pfx___video_do_ioctl+0x10/0x10 [ 124.396188][ T6476] ? selinux_kernel_read_file+0xa0/0x130 [ 124.396207][ T6476] ? __pfx_video_usercopy+0x10/0x10 [ 124.396239][ T6476] v4l2_ioctl+0x1bd/0x250 [ 124.396262][ T6476] ? __pfx_v4l2_ioctl+0x10/0x10 [ 124.396287][ T6476] __x64_sys_ioctl+0x18e/0x210 [ 124.396313][ T6476] do_syscall_64+0xcd/0xfa0 [ 124.396331][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.396346][ T6476] RIP: 0033:0x7f9bc978f749 [ 124.396359][ T6476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.396374][ T6476] RSP: 002b:00007f9bca541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.396390][ T6476] RAX: ffffffffffffffda RBX: 00007f9bc99e5fa0 RCX: 00007f9bc978f749 [ 124.396401][ T6476] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000005 [ 124.396410][ T6476] RBP: 00007f9bca541090 R08: 0000000000000000 R09: 0000000000000000 [ 124.396420][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.396429][ T6476] R13: 00007f9bc99e6038 R14: 00007f9bc99e5fa0 R15: 00007ffdd7ddcd38 [ 124.396453][ T6476] [ 124.691893][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.145'. [ 124.777580][ T6478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6478 comm=syz.3.145 [ 124.853391][ T10] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 124.862527][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.872091][ T10] usb 2-1: config 0 descriptor?? [ 125.172374][ T10] kaweth 2-1:0.0: Firmware present in device. [ 125.554847][ T10] kaweth 2-1:0.0: Statistics collection: 0 [ 125.574544][ T10] kaweth 2-1:0.0: Multicast filter limit: 0 [ 125.590316][ T10] kaweth 2-1:0.0: MTU: 0 [ 125.600632][ T10] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 126.343155][ T9] usb 1-1: USB disconnect, device number 5 [ 126.355311][ T10] kaweth 2-1:0.0: kaweth interface created at eth1 [ 126.362299][ T6505] capability: warning: `syz.2.155' uses deprecated v2 capabilities in a way that may be insecure [ 126.553503][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 126.553519][ T30] audit: type=1400 audit(1763699809.848:490): avc: denied { read } for pid=5481 comm="dhcpcd" name="n101" dev="tmpfs" ino=2516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.596445][ T5814] usb 2-1: USB disconnect, device number 8 [ 126.609239][ T30] audit: type=1400 audit(1763699809.888:491): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.847792][ T6509] netlink: 36 bytes leftover after parsing attributes in process `syz.3.156'. [ 126.860777][ T30] audit: type=1400 audit(1763699809.888:492): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.031965][ T30] audit: type=1400 audit(1763699810.328:493): avc: denied { read append } for pid=6519 comm="syz.2.159" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.062715][ T30] audit: type=1400 audit(1763699810.328:494): avc: denied { read open } for pid=6522 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.117868][ T30] audit: type=1400 audit(1763699810.328:495): avc: denied { getattr } for pid=6522 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.162821][ T30] audit: type=1400 audit(1763699810.358:496): avc: denied { open } for pid=6519 comm="syz.2.159" path="/dev/nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.220159][ T30] audit: type=1400 audit(1763699810.408:497): avc: denied { mount } for pid=6519 comm="syz.2.159" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.393133][ T6531] fuse: Unknown parameter 'user_i00000000000000000000' [ 127.728500][ T6536] random: crng reseeded on system resumption [ 127.936391][ T30] audit: type=1400 audit(1763699811.238:498): avc: denied { create } for pid=6538 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.993222][ T30] audit: type=1400 audit(1763699811.258:499): avc: denied { connect } for pid=6538 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.070715][ T6544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.163'. [ 129.059929][ T6570] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 129.116532][ T6570] bridge_slave_0: default FDB implementation only supports local addresses [ 129.152166][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 129.181512][ T6570] bridge_slave_0: default FDB implementation only supports local addresses [ 129.702284][ T6580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.171'. [ 129.804460][ T3093] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 130.036092][ T3093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.058188][ T3093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 130.091593][ T3093] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 130.848170][ T3093] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 130.860298][ T3093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.916943][ T3093] usb 5-1: config 0 descriptor?? [ 130.924569][ T6583] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.301602][ T6612] fuse: Unknown parameter 'user_id00000000000000000000' [ 133.483947][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.573242][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.588694][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.614464][ T3093] aureal 0003:0755:2626.0002: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 133.629382][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.835601][ T3093] aureal 0003:0755:2626.0002: unknown main item tag 0x6 [ 133.853831][ T3093] aureal 0003:0755:2626.0002: report_id 29495 is invalid [ 133.876504][ T3093] aureal 0003:0755:2626.0002: item 0 2 1 8 parsing failed [ 133.886477][ T3093] aureal 0003:0755:2626.0002: probe with driver aureal failed with error -22 [ 133.917599][ T3093] usb 5-1: USB disconnect, device number 5 [ 135.333374][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 135.333391][ T30] audit: type=1400 audit(1763699818.628:514): avc: denied { create } for pid=6622 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.388385][ T30] audit: type=1400 audit(1763699818.628:515): avc: denied { write } for pid=6622 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.409700][ T30] audit: type=1400 audit(1763699818.628:516): avc: denied { read } for pid=6622 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.430293][ T30] audit: type=1400 audit(1763699818.628:517): avc: denied { ioctl } for pid=6622 comm="syz.3.180" path="socket:[11534]" dev="sockfs" ino=11534 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.456117][ T30] audit: type=1400 audit(1763699818.638:518): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.489153][ T30] audit: type=1400 audit(1763699818.638:519): avc: denied { open } for pid=5819 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.572913][ T30] audit: type=1400 audit(1763699818.638:520): avc: denied { ioctl } for pid=5819 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.653004][ T30] audit: type=1400 audit(1763699818.678:521): avc: denied { bind } for pid=6622 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.768753][ T30] audit: type=1400 audit(1763699818.688:522): avc: denied { prog_load } for pid=6622 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 135.918467][ T30] audit: type=1400 audit(1763699818.688:523): avc: denied { bpf } for pid=6622 comm="syz.3.180" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.034343][ T6664] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 137.043307][ T6664] syzkaller1: Linktype set failed because interface is up [ 137.095607][ T3093] syzkaller1: tun_net_xmit 90 [ 137.257116][ T6670] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 137.304425][ T43] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 137.307222][ T6672] random: crng reseeded on system resumption [ 137.464496][ T43] usb 1-1: device descriptor read/64, error -71 [ 137.751165][ T43] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 137.915053][ T13] syzkaller1: tun_net_xmit 86 [ 138.067268][ T43] usb 1-1: device descriptor read/64, error -71 [ 138.224903][ T6686] random: crng reseeded on system resumption [ 138.354793][ T3093] syzkaller1: tun_net_xmit 90 [ 138.504886][ T43] usb usb1-port1: attempt power cycle [ 138.894169][ T43] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 139.103727][ T3514] syzkaller1: tun_net_xmit 90 [ 139.110773][ T3514] syzkaller1: tun_net_xmit 70 [ 139.144477][ T43] usb 1-1: device descriptor read/8, error -71 [ 139.401674][ T43] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 139.438411][ T43] usb 1-1: device descriptor read/8, error -71 [ 139.615664][ T43] usb usb1-port1: unable to enumerate USB device [ 139.834548][ T6714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.064613][ T9] syzkaller1: tun_net_xmit 90 [ 140.454791][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 140.454810][ T30] audit: type=1400 audit(1763699823.758:587): avc: denied { create } for pid=6733 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.495909][ T30] audit: type=1400 audit(1763699823.798:588): avc: denied { append } for pid=6733 comm="syz.1.209" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.626228][ T30] audit: type=1400 audit(1763699823.878:589): avc: denied { mount } for pid=6733 comm="syz.1.209" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 141.018207][ T30] audit: type=1400 audit(1763699823.918:590): avc: denied { read write } for pid=6733 comm="syz.1.209" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 141.128388][ T30] audit: type=1400 audit(1763699823.928:591): avc: denied { open } for pid=6733 comm="syz.1.209" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 141.182594][ T30] audit: type=1400 audit(1763699824.048:592): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.352718][ T30] audit: type=1400 audit(1763699824.748:593): avc: denied { map } for pid=6745 comm="syz.3.212" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.686220][ T30] audit: type=1400 audit(1763699824.748:594): avc: denied { read write } for pid=6745 comm="syz.3.212" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.966322][ T30] audit: type=1400 audit(1763699826.268:595): avc: denied { write } for pid=6755 comm="syz.2.214" name="anycast6" dev="proc" ino=4026533204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 143.074111][ T5868] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.323818][ T6767] random: crng reseeded on system resumption [ 143.395522][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 143.527629][ T6771] random: crng reseeded on system resumption [ 143.777368][ T5868] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.803802][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.873200][ T5868] usb 2-1: Product: syz [ 143.893470][ T5868] usb 2-1: Manufacturer: syz [ 143.899632][ T5868] usb 2-1: SerialNumber: syz [ 143.917465][ T5868] usb 2-1: config 0 descriptor?? [ 144.265839][ T6781] random: crng reseeded on system resumption [ 144.364445][ T5868] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.374154][ T3093] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 145.187775][ T30] audit: type=1400 audit(1763700084.485:596): avc: denied { create } for pid=6796 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.613477][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 145.613496][ T30] audit: type=1400 audit(1763700084.905:599): avc: denied { create } for pid=6803 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.646307][ T30] audit: type=1400 audit(1763700084.945:600): avc: denied { bind } for pid=6803 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.811726][ T5928] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 145.820160][ T30] audit: type=1400 audit(1763700084.975:601): avc: denied { write } for pid=6803 comm="syz.0.226" path="socket:[11248]" dev="sockfs" ino=11248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.846859][ T30] audit: type=1400 audit(1763700085.025:602): avc: denied { create } for pid=6803 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.887215][ T30] audit: type=1400 audit(1763700085.185:603): avc: denied { shutdown } for pid=6808 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.932070][ T30] audit: type=1400 audit(1763700085.205:604): avc: denied { setopt } for pid=6808 comm="syz.2.228" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.966852][ T6754] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 145.974750][ T5928] usb 5-1: device descriptor read/64, error -71 [ 146.001445][ T30] audit: type=1400 audit(1763700085.215:605): avc: denied { execute } for pid=6808 comm="syz.2.228" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 146.067322][ T30] audit: type=1400 audit(1763700085.365:606): avc: denied { write } for pid=6811 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.073832][ T6816] syz_tun: entered allmulticast mode [ 146.274388][ T5928] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.289804][ T5868] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 146.290976][ T6815] syz_tun: left allmulticast mode [ 146.301620][ T5868] usb 2-1: USB disconnect, device number 9 [ 146.389248][ T6817] random: crng reseeded on system resumption [ 146.424173][ T5928] usb 5-1: device descriptor read/64, error -71 [ 146.459301][ T30] audit: type=1400 audit(1763700085.755:607): avc: denied { ioctl } for pid=6818 comm="syz.3.232" path="socket:[12348]" dev="sockfs" ino=12348 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.564377][ T5928] usb usb5-port1: attempt power cycle [ 146.574642][ T30] audit: type=1400 audit(1763700085.845:608): avc: denied { getopt } for pid=6818 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.641032][ T6825] 9p: Unknown uid 00000000004294967295 [ 147.153008][ T5928] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.934051][ T5928] usb 5-1: device descriptor read/8, error -71 [ 148.254065][ T5928] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.296662][ T5928] usb 5-1: device descriptor read/8, error -71 [ 148.414748][ T5928] usb usb5-port1: unable to enumerate USB device [ 148.576571][ T6846] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 148.853217][ T6855] syz_tun: entered allmulticast mode [ 149.085247][ T6860] Cannot find add_set index 0 as target [ 149.641394][ T6872] xt_hashlimit: max too large, truncated to 1048576 [ 149.651831][ T6872] xt_limit: Overflow, try lower: 0/0 [ 149.773425][ T6868] random: crng reseeded on system resumption [ 151.099896][ T6900] syz_tun: entered allmulticast mode [ 151.223579][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 151.223593][ T30] audit: type=1400 audit(1763700090.515:629): avc: denied { ioctl } for pid=6901 comm="syz.3.257" path="socket:[12621]" dev="sockfs" ino=12621 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.254598][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.352022][ T30] audit: type=1400 audit(1763700090.555:630): avc: denied { create } for pid=6901 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.372705][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 151.485646][ T30] audit: type=1400 audit(1763700090.565:631): avc: denied { write } for pid=6901 comm="syz.3.257" path="socket:[12622]" dev="sockfs" ino=12622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.534030][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 151.551456][ T43] usb 1-1: config 0 has no interfaces? [ 151.576949][ T43] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 152.032784][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.162175][ T43] usb 1-1: config 0 descriptor?? [ 152.339060][ T6915] random: crng reseeded on system resumption [ 152.548344][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 152.576266][ T6923] netlink: 'syz.2.263': attribute type 30 has an invalid length. [ 153.690282][ T30] audit: type=1400 audit(1763700092.985:632): avc: denied { create } for pid=6925 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.710534][ T30] audit: type=1400 audit(1763700093.015:633): avc: denied { write } for pid=6925 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.768397][ T1149] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.777445][ T1149] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.786601][ T1149] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.867018][ T1149] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.096844][ T30] audit: type=1400 audit(1763700093.395:634): avc: denied { ioctl } for pid=6922 comm="syz.2.263" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12650 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.122671][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.147651][ T6923] netlink: 'syz.2.263': attribute type 1 has an invalid length. [ 154.154507][ T5928] usb 1-1: USB disconnect, device number 10 [ 154.156639][ T6923] netlink: 224 bytes leftover after parsing attributes in process `syz.2.263'. [ 154.265457][ T30] audit: type=1400 audit(1763700093.525:635): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 154.408294][ T6947] random: crng reseeded on system resumption [ 154.585320][ T30] audit: type=1400 audit(1763700093.565:636): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.624077][ T30] audit: type=1400 audit(1763700093.565:637): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.647184][ T30] audit: type=1400 audit(1763700093.565:638): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.538150][ T6952] block nbd4: shutting down sockets [ 157.205924][ T6974] random: crng reseeded on system resumption [ 157.394322][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 157.880228][ T6995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6995 comm=syz.0.283 [ 158.064919][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 158.064936][ T30] audit: type=1400 audit(1763700097.345:645): avc: denied { write } for pid=6973 comm="syz.4.278" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 158.099772][ T30] audit: type=1400 audit(1763700097.345:646): avc: denied { open } for pid=6973 comm="syz.4.278" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 158.166023][ T30] audit: type=1400 audit(1763700097.355:647): avc: denied { ioctl } for pid=6973 comm="syz.4.278" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 158.314075][ T30] audit: type=1326 audit(1763700097.465:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7990d8f749 code=0x7ffc0000 [ 158.362192][ T30] audit: type=1326 audit(1763700097.465:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7990d8f749 code=0x7ffc0000 [ 158.458639][ T30] audit: type=1326 audit(1763700097.465:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7990d8f749 code=0x7ffc0000 [ 158.617757][ T30] audit: type=1326 audit(1763700097.465:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7990d8f749 code=0x7ffc0000 [ 158.648522][ T30] audit: type=1326 audit(1763700097.465:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7990d8f749 code=0x7ffc0000 [ 158.707031][ T30] audit: type=1326 audit(1763700097.465:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7990d8f749 code=0x7ffc0000 [ 158.731312][ T30] audit: type=1326 audit(1763700097.465:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7990d8f749 code=0x7ffc0000 [ 159.264377][ T7016] bridge_slave_0: left allmulticast mode [ 159.274656][ T7016] bridge_slave_0: left promiscuous mode [ 159.284432][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.642066][ T7016] bridge_slave_1: left allmulticast mode [ 159.663075][ T7016] bridge_slave_1: left promiscuous mode [ 159.857070][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.408802][ T7031] FAULT_INJECTION: forcing a failure. [ 160.408802][ T7031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.574664][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.1.291 Not tainted syzkaller #0 PREEMPT(full) [ 160.574691][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.574701][ T7031] Call Trace: [ 160.574707][ T7031] [ 160.574714][ T7031] dump_stack_lvl+0x16c/0x1f0 [ 160.574738][ T7031] should_fail_ex+0x512/0x640 [ 160.574764][ T7031] _copy_from_iter+0x29f/0x1720 [ 160.574787][ T7031] ? irqentry_exit+0x3b/0x90 [ 160.574805][ T7031] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.574823][ T7031] ? __pfx__copy_from_iter+0x10/0x10 [ 160.574846][ T7031] ? __alloc_skb+0x1f2/0x380 [ 160.574866][ T7031] ? __alloc_skb+0x200/0x380 [ 160.574886][ T7031] ? netlink_alloc_large_skb+0x6c/0x140 [ 160.574915][ T7031] netlink_sendmsg+0x820/0xdd0 [ 160.574944][ T7031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.574977][ T7031] sock_write_iter+0x566/0x610 [ 160.574995][ T7031] ? __pfx_sock_write_iter+0x10/0x10 [ 160.575021][ T7031] ? __pfx_file_has_perm+0x10/0x10 [ 160.575051][ T7031] do_iter_readv_writev+0x662/0x9e0 [ 160.575081][ T7031] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 160.575105][ T7031] ? selinux_file_permission+0x126/0x660 [ 160.575126][ T7031] ? bpf_lsm_file_permission+0x9/0x10 [ 160.575143][ T7031] ? security_file_permission+0x71/0x210 [ 160.575164][ T7031] ? rw_verify_area+0xcf/0x6c0 [ 160.575190][ T7031] vfs_writev+0x35f/0xde0 [ 160.575222][ T7031] ? __pfx_vfs_writev+0x10/0x10 [ 160.575264][ T7031] ? __fget_files+0x20e/0x3c0 [ 160.575294][ T7031] ? do_writev+0x28c/0x340 [ 160.575315][ T7031] do_writev+0x28c/0x340 [ 160.575344][ T7031] ? __pfx_do_writev+0x10/0x10 [ 160.575369][ T7031] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 160.575396][ T7031] do_syscall_64+0xcd/0xfa0 [ 160.575415][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.575432][ T7031] RIP: 0033:0x7f559eb8f749 [ 160.575447][ T7031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.575462][ T7031] RSP: 002b:00007f559f9a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 160.575478][ T7031] RAX: ffffffffffffffda RBX: 00007f559ede5fa0 RCX: 00007f559eb8f749 [ 160.575489][ T7031] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 160.575498][ T7031] RBP: 00007f559f9a9090 R08: 0000000000000000 R09: 0000000000000000 [ 160.575508][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.575516][ T7031] R13: 00007f559ede6038 R14: 00007f559ede5fa0 R15: 00007ffe0016d718 [ 160.575538][ T7031] [ 160.976883][ T7016] bond0: (slave bond_slave_0): Releasing backup interface [ 161.008913][ T7016] bond0: (slave bond_slave_1): Releasing backup interface [ 161.018139][ T7038] fuse: Unknown parameter '0x0000000000000005' [ 161.207047][ T7039] random: crng reseeded on system resumption [ 161.722952][ T7016] team0: Port device team_slave_0 removed [ 161.835071][ T7016] team0: Port device team_slave_1 removed [ 161.923842][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.035418][ T7016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.366561][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.801286][ T7016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.031460][ T7016] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.550058][ T7046] random: crng reseeded on system resumption [ 164.843767][ T7065] random: crng reseeded on system resumption [ 165.061073][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 165.061087][ T30] audit: type=1400 audit(1763700104.355:711): avc: denied { connect } for pid=7059 comm="syz.2.300" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.250424][ T30] audit: type=1400 audit(1763700104.545:712): avc: denied { mount } for pid=7069 comm="syz.2.302" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 165.325718][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 165.408219][ T30] audit: type=1400 audit(1763700104.705:713): avc: denied { create } for pid=7069 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.474135][ T30] audit: type=1400 audit(1763700104.715:714): avc: denied { ioctl } for pid=7069 comm="syz.2.302" path="socket:[12802]" dev="sockfs" ino=12802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.498863][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.512600][ T7070] veth1_to_bridge: mtu less than device minimum [ 165.684912][ T30] audit: type=1400 audit(1763700104.805:715): avc: denied { create } for pid=7071 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 165.705007][ T5861] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 166.742628][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 166.791319][ T5861] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.807285][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.815777][ T5861] usb 1-1: Product: syz [ 166.822985][ T5861] usb 1-1: Manufacturer: syz [ 166.830224][ T5861] usb 1-1: SerialNumber: syz [ 166.877883][ T5861] usb 1-1: config 0 descriptor?? [ 167.391252][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 167.401920][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 167.411493][ T7092] netlink: 'syz.3.307': attribute type 7 has an invalid length. [ 167.419754][ T7095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.306'. [ 167.486936][ T30] audit: type=1400 audit(1763700106.705:716): avc: denied { create } for pid=7088 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 167.538512][ T5861] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 167.553410][ T30] audit: type=1400 audit(1763700106.715:717): avc: denied { write } for pid=7088 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 167.602620][ T30] audit: type=1400 audit(1763700106.895:718): avc: denied { bind } for pid=7098 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.651782][ T30] audit: type=1400 audit(1763700106.925:719): avc: denied { name_bind } for pid=7098 comm="syz.1.308" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 167.815368][ T30] audit: type=1400 audit(1763700107.035:720): avc: denied { mount } for pid=7073 comm="syz.0.301" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 168.725764][ T7116] random: crng reseeded on system resumption [ 169.043073][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 169.115235][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'. [ 170.148589][ T7139] syz.3.316 (7139) used greatest stack depth: 17928 bytes left [ 170.159771][ T5861] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 170.171912][ T5861] usb 1-1: USB disconnect, device number 11 [ 170.246420][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.253897][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.273721][ T7136] bridge0: entered allmulticast mode [ 170.383179][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 170.383201][ T30] audit: type=1400 audit(1763700109.675:722): avc: denied { create } for pid=7142 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.428964][ T7136] bridge_slave_1: left allmulticast mode [ 170.561331][ T30] audit: type=1400 audit(1763700109.855:723): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 170.594050][ T7136] bridge_slave_1: left promiscuous mode [ 171.645552][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.895531][ T7136] bridge_slave_0: left allmulticast mode [ 171.902425][ T30] audit: type=1400 audit(1763700110.035:724): avc: denied { read } for pid=7144 comm="syz.4.318" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.925514][ T30] audit: type=1400 audit(1763700110.035:725): avc: denied { open } for pid=7144 comm="syz.4.318" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.413242][ T7136] bridge_slave_0: left promiscuous mode [ 172.420850][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.451074][ T30] audit: type=1400 audit(1763700110.055:726): avc: denied { ioctl } for pid=7144 comm="syz.4.318" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.955711][ T30] audit: type=1400 audit(1763700112.115:727): avc: denied { create } for pid=7163 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.959811][ T30] audit: type=1400 audit(1763700112.115:728): avc: denied { write } for pid=7163 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 174.061008][ T30] audit: type=1400 audit(1763700113.355:729): avc: denied { connect } for pid=7171 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.297651][ T30] audit: type=1400 audit(1763700114.745:730): avc: denied { setattr } for pid=7193 comm="syz.4.331" name="midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 176.373319][ T30] audit: type=1400 audit(1763700115.595:731): avc: denied { watch_reads } for pid=7192 comm="syz.1.330" path="/64" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.036935][ T7221] random: crng reseeded on system resumption [ 180.270437][ T30] audit: type=1400 audit(1763700119.525:732): avc: denied { setopt } for pid=7248 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.556415][ T7263] netlink: 68 bytes leftover after parsing attributes in process `syz.0.346'. [ 181.394599][ T7263] netlink: 'syz.0.346': attribute type 11 has an invalid length. [ 181.431351][ T30] audit: type=1400 audit(1763700120.725:733): avc: denied { getopt } for pid=7261 comm="syz.0.346" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.463797][ T7263] use of bytesused == 0 is deprecated and will be removed in the future, [ 181.482648][ T7263] use the actual size instead. [ 181.482747][ T30] audit: type=1400 audit(1763700120.755:734): avc: denied { setopt } for pid=7260 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.875275][ T30] audit: type=1400 audit(1763700121.165:735): avc: denied { connect } for pid=7272 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.901315][ T7266] ======================================================= [ 181.901315][ T7266] WARNING: The mand mount option has been deprecated and [ 181.901315][ T7266] and is ignored by this kernel. Remove the mand [ 181.901315][ T7266] option from the mount to silence this warning. [ 181.901315][ T7266] ======================================================= [ 182.034229][ T30] audit: type=1400 audit(1763700121.195:736): avc: denied { watch watch_reads } for pid=7261 comm="syz.0.346" path="/proc/197/net" dev="proc" ino=13131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 182.037394][ T7266] tmpfs: Unknown parameter 'mpo^' [ 182.099577][ T30] audit: type=1400 audit(1763700121.195:737): avc: denied { mounton } for pid=7261 comm="syz.0.346" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 182.124677][ T30] audit: type=1400 audit(1763700121.255:738): avc: denied { setopt } for pid=7272 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.145566][ T30] audit: type=1400 audit(1763700121.305:739): avc: denied { mount } for pid=7272 comm="syz.4.351" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 182.223118][ T30] audit: type=1400 audit(1763700121.385:740): avc: denied { execute_no_trans } for pid=7272 comm="syz.4.351" path="/68/file1" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.254039][ T3093] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.254291][ T30] audit: type=1400 audit(1763700121.465:741): avc: denied { read } for pid=7272 comm="syz.4.351" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 182.393156][ T30] audit: type=1400 audit(1763700121.465:742): avc: denied { open } for pid=7272 comm="syz.4.351" path="/68/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 182.427577][ T7281] netlink: 'syz.4.355': attribute type 12 has an invalid length. [ 182.438236][ T7281] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.355'. [ 182.453021][ T7280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.464085][ T3093] usb 1-1: Using ep0 maxpacket: 8 [ 182.484427][ T3093] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 182.501201][ T3093] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 182.524208][ T3093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.532550][ T3093] usb 1-1: Product: syz [ 182.540048][ T3093] usb 1-1: Manufacturer: syz [ 182.546920][ T3093] usb 1-1: SerialNumber: syz [ 182.594728][ T3093] usb 1-1: config 0 descriptor?? [ 182.616912][ T3093] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 182.645271][ T3093] usb 1-1: setting power ON [ 182.650353][ T3093] dvb-usb: bulk message failed: -22 (2/0) [ 182.682160][ T3093] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.746349][ T7292] fuse: Unknown parameter '0x0000000000000005' [ 182.764609][ T3093] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 182.832072][ T3093] usb 1-1: media controller created [ 183.648065][ T3093] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.687348][ T3093] usb 1-1: selecting invalid altsetting 6 [ 184.693513][ T3093] usb 1-1: digital interface selection failed (-22) [ 184.802992][ T3093] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 184.814968][ T3093] usb 1-1: setting power OFF [ 184.819905][ T3093] dvb-usb: bulk message failed: -22 (2/0) [ 184.826932][ T3093] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 184.836679][ T3093] (NULL device *): no alternate interface [ 185.080738][ T3093] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 185.192214][ T3093] usb 1-1: USB disconnect, device number 12 [ 186.179710][ T7328] random: crng reseeded on system resumption [ 187.212037][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 187.212051][ T30] audit: type=1400 audit(1763700126.505:749): avc: denied { block_suspend } for pid=7335 comm="syz.2.370" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.266362][ T7340] netlink: 36 bytes leftover after parsing attributes in process `syz.3.367'. [ 187.362639][ T7350] fuse: Unknown parameter '0x0000000000000005' [ 189.424908][ T7358] netlink: 152 bytes leftover after parsing attributes in process `syz.2.375'. [ 189.434123][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.375'. [ 192.362814][ T7378] random: crng reseeded on system resumption [ 192.516217][ T30] audit: type=1400 audit(1763700131.805:750): avc: denied { name_connect } for pid=7361 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 193.579715][ T30] audit: type=1400 audit(1763700132.875:751): avc: denied { read } for pid=7361 comm="syz.4.377" lport=48455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.097329][ T7396] trusted_key: encrypted_key: master key parameter 'user+jyz' is invalid [ 194.195595][ T5928] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.234072][ T30] audit: type=1400 audit(1763700133.525:752): avc: denied { create } for pid=7400 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.304406][ T30] audit: type=1400 audit(1763700133.525:753): avc: denied { getopt } for pid=7400 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.394326][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400872][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.408038][ T5928] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 194.427915][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.443330][ T5928] usb 2-1: config 0 descriptor?? [ 194.554058][ T5814] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 195.585340][ T5928] kaweth 2-1:0.0: Firmware present in device. [ 195.606095][ T5814] usb 3-1: config 0 has no interfaces? [ 195.616258][ T5814] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 195.643054][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.877834][ T5928] kaweth 2-1:0.0: Statistics collection: 0 [ 195.883775][ T5928] kaweth 2-1:0.0: Multicast filter limit: 0 [ 195.889792][ T5928] kaweth 2-1:0.0: MTU: 0 [ 195.895637][ T5928] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 195.910497][ T5814] usb 3-1: Product: syz [ 195.944430][ T5814] usb 3-1: Manufacturer: syz [ 195.963120][ T5814] usb 3-1: SerialNumber: syz [ 195.964364][ T30] audit: type=1400 audit(1763700135.255:754): avc: denied { read } for pid=7415 comm="syz.0.392" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.008306][ T5814] usb 3-1: config 0 descriptor?? [ 196.116847][ T7421] random: crng reseeded on system resumption [ 196.516551][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 196.519197][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 196.525099][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 196.529843][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 196.541437][ T30] audit: type=1400 audit(1763700135.255:755): avc: denied { open } for pid=7415 comm="syz.0.392" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.588552][ T5928] kaweth 2-1:0.0: kaweth interface created at eth1 [ 196.711025][ T30] audit: type=1400 audit(1763700135.995:756): avc: denied { read write } for pid=7427 comm="syz.4.393" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 196.739836][ T7429] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 196.754748][ T30] audit: type=1400 audit(1763700135.995:757): avc: denied { open } for pid=7427 comm="syz.4.393" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 196.793390][ T43] usb 2-1: USB disconnect, device number 10 [ 196.802500][ T30] audit: type=1400 audit(1763700135.995:758): avc: denied { ioctl } for pid=7427 comm="syz.4.393" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 197.012317][ T30] audit: type=1400 audit(1763700136.305:759): avc: denied { write } for pid=7397 comm="syz.2.386" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 197.045049][ T7398] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.139221][ T7432] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.184554][ T7398] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.267601][ T7439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.394'. [ 197.414888][ T10] usb 3-1: USB disconnect, device number 8 [ 198.298064][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 198.298080][ T30] audit: type=1400 audit(1763700137.595:763): avc: denied { listen } for pid=7452 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 198.700562][ T7464] xt_hashlimit: max too large, truncated to 1048576 [ 198.709831][ T7464] xt_limit: Overflow, try lower: 0/0 [ 198.773074][ T7466] netlink: 'syz.4.403': attribute type 13 has an invalid length. [ 198.852555][ T30] audit: type=1400 audit(1763700138.085:764): avc: denied { write } for pid=7460 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.194062][ T30] audit: type=1400 audit(1763700138.425:765): avc: denied { map } for pid=7465 comm="syz.3.402" path="socket:[14464]" dev="sockfs" ino=14464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 199.216989][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.518188][ T30] audit: type=1400 audit(1763700138.425:766): avc: denied { read } for pid=7465 comm="syz.3.402" path="socket:[14464]" dev="sockfs" ino=14464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 199.772203][ T30] audit: type=1400 audit(1763700139.015:767): avc: denied { unlink } for pid=7456 comm="syz.2.400" name="#6" dev="tmpfs" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.819634][ T30] audit: type=1400 audit(1763700139.115:768): avc: denied { mount } for pid=7456 comm="syz.2.400" name="/" dev="overlay" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 202.185395][ T30] audit: type=1400 audit(1763700141.435:769): avc: denied { create } for pid=7498 comm="syz.3.411" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.322560][ T30] audit: type=1400 audit(1763700141.455:770): avc: denied { read open } for pid=7501 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.350159][ T30] audit: type=1400 audit(1763700141.455:771): avc: denied { getattr } for pid=7501 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.403791][ T30] audit: type=1400 audit(1763700141.515:772): avc: denied { write } for pid=7498 comm="syz.3.411" name="file0" dev="tmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.412931][ T7506] capability: warning: `syz.0.412' uses 32-bit capabilities (legacy support in use) [ 203.375172][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 203.375192][ T30] audit: type=1400 audit(1763700142.675:774): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 203.400837][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.480570][ T30] audit: type=1400 audit(1763700142.755:775): avc: denied { map } for pid=7509 comm="syz.1.414" path="/proc/309/net/vlan/config" dev="proc" ino=4026533077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 203.515686][ T7527] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.797911][ T30] audit: type=1400 audit(1763700143.095:776): avc: denied { create } for pid=7540 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 204.497612][ T30] audit: type=1400 audit(1763700143.335:777): avc: denied { setattr } for pid=7540 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 204.516683][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.565117][ T30] audit: type=1400 audit(1763700143.335:778): avc: denied { read write } for pid=7540 comm="syz.4.422" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 204.598887][ T30] audit: type=1400 audit(1763700143.335:779): avc: denied { open } for pid=7540 comm="syz.4.422" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 204.723785][ T30] audit: type=1400 audit(1763700143.725:780): avc: denied { add_name } for pid=7495 comm="dhcpcd-run-hook" name="resolv.conf.netdevsim0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.819120][ T30] audit: type=1400 audit(1763700143.725:781): avc: denied { create } for pid=7495 comm="dhcpcd-run-hook" name="resolv.conf.netdevsim0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.434524][ T30] audit: type=1400 audit(1763700143.725:782): avc: denied { write } for pid=7495 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.netdevsim0.link" dev="tmpfs" ino=3257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.501132][ T30] audit: type=1400 audit(1763700143.725:783): avc: denied { append } for pid=7495 comm="dhcpcd-run-hook" name="resolv.conf.netdevsim0.link" dev="tmpfs" ino=3257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.932419][ T7571] FAULT_INJECTION: forcing a failure. [ 205.932419][ T7571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.963718][ T7571] CPU: 0 UID: 0 PID: 7571 Comm: syz.4.428 Not tainted syzkaller #0 PREEMPT(full) [ 205.963745][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.963756][ T7571] Call Trace: [ 205.963762][ T7571] [ 205.963769][ T7571] dump_stack_lvl+0x16c/0x1f0 [ 205.963793][ T7571] should_fail_ex+0x512/0x640 [ 205.963820][ T7571] _copy_from_user+0x2e/0xd0 [ 205.963843][ T7571] kstrtouint_from_user+0xd6/0x1d0 [ 205.963870][ T7571] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 205.963896][ T7571] ? __lock_acquire+0xb8a/0x1c90 [ 205.963924][ T7571] proc_fail_nth_write+0x83/0x220 [ 205.963948][ T7571] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 205.963970][ T7571] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 205.963986][ T7571] vfs_write+0x2a0/0x11d0 [ 205.964004][ T7571] ? __pfx___mutex_lock+0x10/0x10 [ 205.964020][ T7571] ? __pfx_vfs_write+0x10/0x10 [ 205.964042][ T7571] ? __fget_files+0x20e/0x3c0 [ 205.964064][ T7571] ksys_write+0x12a/0x250 [ 205.964081][ T7571] ? __pfx_ksys_write+0x10/0x10 [ 205.964103][ T7571] ? fput+0x9b/0xd0 [ 205.964128][ T7571] do_syscall_64+0xcd/0xfa0 [ 205.964147][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.964164][ T7571] RIP: 0033:0x7f9bc978e1ff [ 205.964179][ T7571] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 205.964195][ T7571] RSP: 002b:00007f9bca541030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 205.964211][ T7571] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9bc978e1ff [ 205.964221][ T7571] RDX: 0000000000000001 RSI: 00007f9bca5410a0 RDI: 0000000000000004 [ 205.964229][ T7571] RBP: 00007f9bca541090 R08: 0000000000000000 R09: 0000000000000000 [ 205.964237][ T7571] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 205.964245][ T7571] R13: 00007f9bc99e6038 R14: 00007f9bc99e5fa0 R15: 00007ffdd7ddcd38 [ 205.964263][ T7571] [ 206.152968][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.004085][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.110905][ T7584] random: crng reseeded on system resumption [ 207.174282][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 207.180881][ T10] usb 3-1: config 2 interface 0 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 207.350208][ T10] usb 3-1: config 2 interface 0 has no altsetting 0 [ 207.360146][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=141a, bcdDevice=ca.10 [ 207.379030][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.397388][ T10] usb 3-1: Product: syz [ 207.407483][ T10] usb 3-1: Manufacturer: syz [ 207.417603][ T10] usb 3-1: SerialNumber: syz [ 208.840894][ T10] usb 3-1: USB disconnect, device number 9 [ 210.171763][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 210.171779][ T30] audit: type=1400 audit(1763700149.465:786): avc: denied { bind } for pid=7613 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.264785][ T30] audit: type=1400 audit(1763700149.505:787): avc: denied { node_bind } for pid=7613 comm="syz.2.442" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 210.292803][ T7620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.537958][ T30] audit: type=1400 audit(1763700149.825:788): avc: denied { connect } for pid=7626 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 211.363069][ T7637] random: crng reseeded on system resumption [ 211.900685][ T30] audit: type=1400 audit(1763700151.195:789): avc: denied { setopt } for pid=7640 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.982847][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 212.011312][ T30] audit: type=1400 audit(1763700151.305:790): avc: denied { read write } for pid=7651 comm="syz.1.454" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.070726][ T30] audit: type=1400 audit(1763700151.305:791): avc: denied { open } for pid=7651 comm="syz.1.454" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.084067][ T5861] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 212.094035][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.097980][ T30] audit: type=1400 audit(1763700151.345:792): avc: denied { ioctl } for pid=7651 comm="syz.1.454" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.132498][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.164678][ T30] audit: type=1326 audit(1763700151.455:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.1.454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f559eb865e7 code=0x0 [ 213.152892][ T7665] random: crng reseeded on system resumption [ 214.116552][ T30] audit: type=1400 audit(1763700153.415:794): avc: denied { read append } for pid=7673 comm="syz.0.460" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 216.071593][ T30] audit: type=1400 audit(1763700153.435:795): avc: denied { open } for pid=7673 comm="syz.0.460" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 216.206654][ T7674] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (288 ns). Using initial count to start timer. [ 216.364800][ T7696] batadv_slave_0: entered promiscuous mode [ 216.372739][ T7696] batman_adv: batadv0: Adding interface: macvtap1 [ 216.384482][ T7696] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.416773][ T7696] batman_adv: batadv0: Interface activated: macvtap1 [ 216.422842][ T30] audit: type=1400 audit(1763700155.715:796): avc: denied { setopt } for pid=7692 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.442694][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.224080][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 217.844911][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 217.879982][ T43] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 217.902003][ T43] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 217.917109][ T43] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 217.926823][ T43] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 217.935365][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 217.944920][ T43] usb 5-1: config 0 has no interface number 0 [ 217.951128][ T43] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 217.965022][ T43] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 217.974985][ T43] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 218.041182][ T43] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.054547][ T43] usb 5-1: config 0 interface 125 has no altsetting 2 [ 218.074140][ T43] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 218.096012][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.108573][ T43] usb 5-1: Product: syz [ 218.114982][ T43] usb 5-1: Manufacturer: syz [ 218.122913][ T43] usb 5-1: SerialNumber: syz [ 218.138226][ T43] usb 5-1: config 0 descriptor?? [ 218.212339][ T43] usb 5-1: selecting invalid altsetting 2 [ 218.216767][ T30] audit: type=1400 audit(1763700157.515:797): avc: denied { open } for pid=7722 comm="syz.2.477" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 219.059231][ T7744] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (288 ns). Using initial count to start timer. [ 219.082740][ T7742] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.098724][ T7742] bond1: (slave lo): Enslaving as a backup interface with an up link [ 219.149164][ T7742] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 220.354291][ T5861] usb 5-1: USB disconnect, device number 10 [ 222.147359][ T7770] random: crng reseeded on system resumption [ 222.363173][ T30] audit: type=1400 audit(1763700161.645:798): avc: denied { write } for pid=7766 comm="syz.4.487" lport=33997 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 222.498597][ T30] audit: type=1400 audit(1763700161.645:799): avc: denied { setopt } for pid=7766 comm="syz.4.487" lport=33997 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 222.806362][ T7784] fuse: Unknown parameter '000000000000000000040x0000000000000007' [ 223.664704][ T5137] Bluetooth: Wrong link type (-71) [ 223.991620][ T30] audit: type=1400 audit(1763700162.925:800): avc: denied { shutdown } for pid=7788 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.016218][ T30] audit: type=1400 audit(1763700162.925:801): avc: denied { write } for pid=7788 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 224.041027][ T7798] random: crng reseeded on system resumption [ 224.806937][ T30] audit: type=1400 audit(1763700163.865:802): avc: denied { connect } for pid=7802 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 225.184366][ T5814] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 225.379348][ T5814] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 225.629124][ T5814] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 225.639583][ T7819] cgroup: Unknown subsys name 'cpuset' [ 225.657440][ T5814] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 225.678944][ T5814] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 225.690022][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 225.700231][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 225.711994][ T5814] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 226.237875][ T7834] netlink: 'syz.0.503': attribute type 4 has an invalid length. [ 226.590035][ T1149] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.602044][ T1149] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.617491][ T1149] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.631660][ T1149] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.194967][ T5814] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 228.214103][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.234974][ T5814] usb 5-1: config 0 descriptor?? [ 228.241525][ T5814] usb 5-1: can't set config #0, error -71 [ 228.263431][ T5814] usb 5-1: USB disconnect, device number 11 [ 228.637188][ T7865] random: crng reseeded on system resumption [ 230.935946][ T7899] FAULT_INJECTION: forcing a failure. [ 230.935946][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.151781][ T7899] CPU: 0 UID: 0 PID: 7899 Comm: syz.2.516 Not tainted syzkaller #0 PREEMPT(full) [ 231.151808][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.151818][ T7899] Call Trace: [ 231.151824][ T7899] [ 231.151831][ T7899] dump_stack_lvl+0x16c/0x1f0 [ 231.151866][ T7899] should_fail_ex+0x512/0x640 [ 231.151891][ T7899] _copy_to_user+0x32/0xd0 [ 231.151915][ T7899] simple_read_from_buffer+0xcb/0x170 [ 231.151952][ T7899] proc_fail_nth_read+0x197/0x240 [ 231.151974][ T7899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.151996][ T7899] ? rw_verify_area+0xcf/0x6c0 [ 231.152021][ T7899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.152041][ T7899] vfs_read+0x1e4/0xcf0 [ 231.152065][ T7899] ? __pfx___mutex_lock+0x10/0x10 [ 231.152083][ T7899] ? __pfx_vfs_read+0x10/0x10 [ 231.152105][ T7899] ? __fget_files+0x20e/0x3c0 [ 231.152131][ T7899] ksys_read+0x12a/0x250 [ 231.152147][ T7899] ? __pfx_ksys_read+0x10/0x10 [ 231.152170][ T7899] do_syscall_64+0xcd/0xfa0 [ 231.152187][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.152204][ T7899] RIP: 0033:0x7f7990d8e15c [ 231.152218][ T7899] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 231.152234][ T7899] RSP: 002b:00007f7991c19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.152251][ T7899] RAX: ffffffffffffffda RBX: 00007f7990fe5fa0 RCX: 00007f7990d8e15c [ 231.152262][ T7899] RDX: 000000000000000f RSI: 00007f7991c190a0 RDI: 0000000000000004 [ 231.152273][ T7899] RBP: 00007f7991c19090 R08: 0000000000000000 R09: 0000000000000000 [ 231.152283][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.152293][ T7899] R13: 00007f7990fe6038 R14: 00007f7990fe5fa0 R15: 00007ffe71a27318 [ 231.152318][ T7899] [ 231.332356][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.918351][ T30] audit: type=1400 audit(1763700174.105:803): avc: denied { map } for pid=7937 comm="syz.1.524" path="socket:[15323]" dev="sockfs" ino=15323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.019188][ T30] audit: type=1400 audit(1763700174.105:804): avc: denied { read } for pid=7937 comm="syz.1.524" path="socket:[15323]" dev="sockfs" ino=15323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.079826][ T30] audit: type=1400 audit(1763700174.365:805): avc: denied { name_bind } for pid=7955 comm="syz.3.526" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 235.100836][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.324055][ T7975] random: crng reseeded on system resumption [ 236.527716][ T7976] random: crng reseeded on system resumption [ 236.724431][ T30] audit: type=1400 audit(1763700176.025:806): avc: denied { write } for pid=7978 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.671648][ T30] audit: type=1400 audit(1763700179.965:807): avc: denied { ioctl } for pid=8012 comm="syz.4.542" path="socket:[16508]" dev="sockfs" ino=16508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 240.745468][ T8018] netlink: 96 bytes leftover after parsing attributes in process `syz.3.543'. [ 242.220434][ T8028] random: crng reseeded on system resumption [ 242.424920][ T30] audit: type=1400 audit(1763700181.725:808): avc: denied { write } for pid=8044 comm="syz.0.552" path="socket:[16563]" dev="sockfs" ino=16563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 244.924111][ T30] audit: type=1400 audit(1763700184.215:809): avc: denied { bind } for pid=8059 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 244.967004][ T30] audit: type=1400 audit(1763700184.215:810): avc: denied { write } for pid=8059 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.648124][ T30] audit: type=1400 audit(1763700184.915:811): avc: denied { ioctl } for pid=8069 comm="syz.0.559" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 249.839600][ T30] audit: type=1400 audit(1763700189.135:812): avc: denied { create } for pid=8104 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.862521][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 249.996514][ T8111] random: crng reseeded on system resumption [ 250.161441][ T30] audit: type=1400 audit(1763700189.135:813): avc: denied { bind } for pid=8104 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.180682][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.399745][ T30] audit: type=1400 audit(1763700189.135:814): avc: denied { listen } for pid=8104 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.429780][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.600864][ T30] audit: type=1400 audit(1763700189.135:815): avc: denied { connect } for pid=8104 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.629438][ T8120] tmpfs: Unknown parameter 'usrquo_hardlimit' [ 250.636122][ T30] audit: type=1400 audit(1763700189.135:816): avc: denied { write } for pid=8104 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.655850][ T30] audit: type=1400 audit(1763700189.335:817): avc: denied { accept } for pid=8104 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.676857][ T30] audit: type=1400 audit(1763700189.335:818): avc: denied { read } for pid=8104 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.696080][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.808979][ T30] audit: type=1400 audit(1763700190.085:819): avc: denied { accept } for pid=8121 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 250.955112][ T30] audit: type=1400 audit(1763700190.105:820): avc: denied { create } for pid=8119 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 251.744537][ T8118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.850110][ T30] audit: type=1400 audit(1763700191.135:821): avc: denied { ioctl } for pid=8102 comm="syz.3.566" path="socket:[16811]" dev="sockfs" ino=16811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.188952][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.575'. [ 252.512342][ T8144] random: crng reseeded on system resumption [ 252.576957][ T8118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.201586][ T8118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.207521][ T8157] netlink: 'syz.2.579': attribute type 10 has an invalid length. [ 253.223205][ T8157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.579'. [ 253.237475][ T8157] dummy0: entered promiscuous mode [ 253.244923][ T8157] bridge0: port 3(dummy0) entered blocking state [ 253.251730][ T8157] bridge0: port 3(dummy0) entered disabled state [ 253.264936][ T8157] dummy0: entered allmulticast mode [ 253.275881][ T8157] bridge0: port 3(dummy0) entered blocking state [ 253.282506][ T8157] bridge0: port 3(dummy0) entered forwarding state [ 253.293008][ T8159] overlayfs: failed to clone upperpath [ 253.582657][ T8118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.783001][ T8170] XFS (nullb0): Invalid superblock magic number [ 253.846775][ T1084] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.871799][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.913361][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.933129][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.167341][ T8190] random: crng reseeded on system resumption [ 255.814797][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.821164][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.666765][ T30] audit: type=1400 audit(1763700195.965:822): avc: denied { getopt } for pid=8208 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.228642][ T30] audit: type=1326 audit(1763700198.525:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559eb8f749 code=0x7fc00000 [ 263.047605][ T8251] random: crng reseeded on system resumption [ 264.490383][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 376.253895][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 376.260890][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9/1:b..l [ 376.268794][ C0] rcu: (detected by 0, t=10503 jiffies, g=18957, q=359614 ncpus=2) [ 376.276768][ C0] task:kworker/0:0 state:R running task stack:24008 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 376.291156][ C0] Workqueue: events_power_efficient gc_worker [ 376.297239][ C0] Call Trace: [ 376.300510][ C0] [ 376.303428][ C0] __schedule+0x1190/0x5de0 [ 376.307927][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 376.313292][ C0] ? find_held_lock+0x2b/0x80 [ 376.317961][ C0] ? __pfx___schedule+0x10/0x10 [ 376.322819][ C0] ? ip_output+0x2c2/0xa90 [ 376.327235][ C0] ? mark_held_locks+0x49/0x80 [ 376.331994][ C0] preempt_schedule_irq+0x51/0x90 [ 376.337031][ C0] irqentry_exit+0x36/0x90 [ 376.341441][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.347416][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 376.352608][ C0] Code: e6 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 4b e9 0e 0f 82 74 02 00 00 8b 35 9a 7b e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 e6 08 12 0f 85 c7 02 00 00 48 83 c4 [ 376.372217][ C0] RSP: 0018:ffffc900000e7ad0 EFLAGS: 00000206 [ 376.378285][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4760 RCX: 00000000ad76606f [ 376.386255][ C0] RDX: 0000000000000000 RSI: ffffffff8da06705 RDI: ffffffff8bf073c0 [ 376.394218][ C0] RBP: 0000000000000002 R08: c5dd6a869c1bbf45 R09: 0000000000000000 [ 376.402175][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 376.410129][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.418108][ C0] ? __pfx___might_resched+0x10/0x10 [ 376.423390][ C0] ? gc_worker+0x999/0x16e0 [ 376.427888][ C0] gc_worker+0x241/0x16e0 [ 376.432212][ C0] ? gc_worker+0x230/0x16e0 [ 376.436720][ C0] ? __pfx_gc_worker+0x10/0x10 [ 376.441659][ C0] ? rcu_is_watching+0x12/0xc0 [ 376.446424][ C0] process_one_work+0x9cf/0x1b70 [ 376.451370][ C0] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 376.457011][ C0] ? __pfx_process_one_work+0x10/0x10 [ 376.462474][ C0] ? assign_work+0x1a0/0x250 [ 376.467058][ C0] worker_thread+0x6c8/0xf10 [ 376.471655][ C0] ? __pfx_worker_thread+0x10/0x10 [ 376.476761][ C0] kthread+0x3c5/0x780 [ 376.480825][ C0] ? __pfx_kthread+0x10/0x10 [ 376.485411][ C0] ? rcu_is_watching+0x12/0xc0 [ 376.490172][ C0] ? __pfx_kthread+0x10/0x10 [ 376.494756][ C0] ret_from_fork+0x675/0x7d0 [ 376.499338][ C0] ? __pfx_kthread+0x10/0x10 [ 376.503918][ C0] ret_from_fork_asm+0x1a/0x30 [ 376.508696][ C0] [ 376.511711][ C0] rcu: rcu_preempt kthread starved for 8620 jiffies! g18957 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 376.522812][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 376.532770][ C0] rcu: RCU grace-period kthread stack dump: [ 376.538672][ C0] task:rcu_preempt state:R running task stack:28288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 376.552173][ C0] Call Trace: [ 376.555453][ C0] [ 376.558390][ C0] __schedule+0x1190/0x5de0 [ 376.562904][ C0] ? __pfx___schedule+0x10/0x10 [ 376.567749][ C0] ? find_held_lock+0x2b/0x80 [ 376.572429][ C0] ? schedule+0x2d7/0x3a0 [ 376.576769][ C0] schedule+0xe7/0x3a0 [ 376.580847][ C0] schedule_timeout+0x123/0x290 [ 376.585708][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 376.591114][ C0] ? __pfx_process_timeout+0x10/0x10 [ 376.596414][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 376.602238][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 376.607709][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 376.612476][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 376.617755][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.622930][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 376.627842][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 376.632692][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 376.638508][ C0] rcu_gp_kthread+0x26d/0x380 [ 376.643209][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 376.648395][ C0] ? rcu_is_watching+0x12/0xc0 [ 376.653190][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.658397][ C0] ? __kthread_parkme+0x19e/0x250 [ 376.663438][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 376.668620][ C0] kthread+0x3c5/0x780 [ 376.672691][ C0] ? __pfx_kthread+0x10/0x10 [ 376.677279][ C0] ? rcu_is_watching+0x12/0xc0 [ 376.682065][ C0] ? __pfx_kthread+0x10/0x10 [ 376.686652][ C0] ret_from_fork+0x675/0x7d0 [ 376.691238][ C0] ? __pfx_kthread+0x10/0x10 [ 376.695832][ C0] ret_from_fork_asm+0x1a/0x30 [ 376.700617][ C0] [ 376.703654][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 376.709951][ C0] Sending NMI from CPU 0 to CPUs 1: [ 376.715172][ C1] NMI backtrace for cpu 1 [ 376.715187][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 376.715204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.715212][ C1] RIP: 0010:debug_check_no_obj_freed+0x226/0x600 [ 376.715230][ C1] Code: 80 3c 22 00 0f 85 dd 00 00 00 48 8d 78 18 83 c3 01 4c 8b 30 48 89 fa 48 c1 ea 03 42 80 3c 22 00 0f 85 0c 03 00 00 48 8b 50 18 <4c> 39 ea 0f 82 cb 00 00 00 4c 39 fa 0f 83 c2 00 00 00 48 8d 78 10 [ 376.715243][ C1] RSP: 0018:ffffc90000a08380 EFLAGS: 00000046 [ 376.715255][ C1] RAX: ffff8880ac7beaf0 RBX: 0000000000000023 RCX: ffffffff8199137c [ 376.715264][ C1] RDX: ffff8880ac7c6d50 RSI: 0000000000000000 RDI: ffff8880ac7beb08 [ 376.715273][ C1] RBP: ffffc90000a084b0 R08: 0000000000000001 R09: fffff5200014105e [ 376.715287][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: dffffc0000000000 [ 376.715295][ C1] R13: ffff88819994e080 R14: ffff8880ac7be428 R15: ffff88819994e340 [ 376.715304][ C1] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 376.715319][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.715329][ C1] CR2: 00007f98899588f5 CR3: 000000007879d000 CR4: 00000000003526f0 [ 376.715338][ C1] Call Trace: [ 376.715343][ C1] [ 376.715347][ C1] ? net_rx_action+0x97f/0xef0 [ 376.715365][ C1] ? __irq_exit_rcu+0x109/0x170 [ 376.715385][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 376.715404][ C1] kmem_cache_free+0x2ad/0x6c0 [ 376.715417][ C1] ? skb_free_head+0x1b7/0x210 [ 376.715435][ C1] ? skb_free_head+0x1b7/0x210 [ 376.715450][ C1] skb_free_head+0x1b7/0x210 [ 376.715465][ C1] ? percpu_counter_add_batch+0xca/0x200 [ 376.715481][ C1] skb_release_data+0x795/0x9e0 [ 376.715498][ C1] ? dst_release+0x266/0x340 [ 376.715516][ C1] consume_skb+0xbf/0x100 [ 376.715535][ C1] nft_synproxy_do_eval+0xa6b/0xd80 [ 376.715552][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 376.715567][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 376.715585][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 376.715604][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 376.715619][ C1] nft_do_chain+0x2e9/0x1920 [ 376.715636][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 376.715649][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 376.715665][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.715681][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.715694][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 376.715715][ C1] nft_do_chain_inet+0x18a/0x340 [ 376.715736][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 376.715756][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 376.715774][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 376.715790][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 376.715808][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 376.715828][ C1] nf_hook_slow+0xbe/0x200 [ 376.715847][ C1] nf_hook.constprop.0+0x424/0x750 [ 376.715865][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 376.715884][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 376.715900][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 376.715919][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 376.715941][ C1] ip_local_deliver+0x169/0x1f0 [ 376.715959][ C1] ip_rcv+0x2e0/0x600 [ 376.715975][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 376.715992][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 376.716008][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 376.716025][ C1] ? lock_acquire+0x179/0x350 [ 376.716039][ C1] ? process_backlog+0x3e7/0x15e0 [ 376.716054][ C1] __netif_receive_skb+0x1d/0x160 [ 376.716070][ C1] process_backlog+0x439/0x15e0 [ 376.716089][ C1] __napi_poll.constprop.0+0xba/0x550 [ 376.716105][ C1] ? skb_defer_free_flush+0x149/0x280 [ 376.716126][ C1] net_rx_action+0x97f/0xef0 [ 376.716145][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 376.716161][ C1] ? rcu_is_watching+0x12/0xc0 [ 376.716180][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.716193][ C1] ? tmigr_handle_remote+0x132/0x380 [ 376.716214][ C1] ? run_timer_base+0x121/0x190 [ 376.716230][ C1] handle_softirqs+0x219/0x8e0 [ 376.716248][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 376.716267][ C1] __irq_exit_rcu+0x109/0x170 [ 376.716288][ C1] irq_exit_rcu+0x9/0x30 [ 376.716303][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 376.716324][ C1] [ 376.716329][ C1] [ 376.716334][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.716349][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 376.716369][ C1] Code: b7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 65 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 376.716381][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 376.716392][ C1] RAX: 00000000022b5d55 RBX: 0000000000000001 RCX: ffffffff8b60c2a9 [ 376.716401][ C1] RDX: 0000000000000000 RSI: ffffffff8da2c11f RDI: ffffffff8bf073c0 [ 376.716410][ C1] RBP: ffffed1003adc490 R08: 0000000000000001 R09: ffffed10170a6655 [ 376.716423][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 376.716432][ C1] R13: ffff88801d6e2480 R14: ffffffff908214d0 R15: 0000000000000000 [ 376.716444][ C1] ? ct_kernel_exit+0x139/0x190 [ 376.716460][ C1] default_idle+0x13/0x20 [ 376.716475][ C1] default_idle_call+0x6c/0xb0 [ 376.716489][ C1] do_idle+0x38d/0x500 [ 376.716506][ C1] ? __pfx_do_idle+0x10/0x10 [ 376.716523][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 376.716540][ C1] cpu_startup_entry+0x4f/0x60 [ 376.716557][ C1] start_secondary+0x21d/0x2b0 [ 376.716576][ C1] ? __pfx_start_secondary+0x10/0x10 [ 376.716596][ C1] common_startup_64+0x13e/0x148 [ 376.716617][ C1]