last executing test programs: 39.492996737s ago: executing program 2 (id=203): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) unshare(0x24020400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000004050005000a000000140007800800114000000000080012400000ffff120003"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x8100}, 0x40000c0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @private=0xa010102}, {0x1}, 0x20, {0x2, 0x4e23, @loopback}, 'vcan0\x00'}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x10, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af10, &(0x7f0000000000)={0x1, r10}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x1004, &(0x7f0000000480)=""/4100}, 0x94) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000140)={0x7be, 0x2, 0x800, 0x1, 0x1b, "9f23fc21f6e2a61d"}) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x100000001, 0x4) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e07050514", @ANYRESOCT=r7, @ANYRES8=r9], 0xa) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "6ed6fd5737d92340", "145476388b9c6b3a934c53a17df7ccac", "6697da76", "a144d3677a1d2b36"}, 0x28) syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010700000009040000025883b2000905850134"], 0x0) close_range(r0, r1, 0x0) mmap(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1000008, 0x20010, r1, 0xc6acb000) 37.863051513s ago: executing program 2 (id=208): r0 = socket(0x11, 0x3, 0x7) symlinkat(&(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x150) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x41) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[], 0x228}, 0x1, 0x0, 0x0, 0x95}, 0x0) mq_unlink(&(0x7f0000000100)='&\x00') 36.490082989s ago: executing program 2 (id=212): openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="aa8aaaaaaaaaaaaaaaaa0000000000000009c1aa"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000c00000081114c00020000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sched_setscheduler(r1, 0x5, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4(r0, &(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000005940), 0x4, 0x2101, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xe, 0x2) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000007800010402005785d22cfb8a763e000064", @ANYRESDEC=r3], 0x2c}}, 0x0) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000180)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000001d40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000c80)=@deltfilter={0xfdc, 0x2d, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0xe, 0xfff3}, {0x5, 0x1}}, [@f_tcindex={{0xc}, {0x86c, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x5, 0xfff2}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1000}, @TCA_TCINDEX_POLICE={0x848, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x1, 0x5, 0xc16b, 0x3, 0x10, 0x0, 0x7, 0xa52f, 0xda4, 0x178, 0xffffff0a, 0x4e, 0x8, 0x5, 0x2, 0x0, 0x8, 0x9, 0x8, 0xff, 0x2, 0x9, 0x7, 0xd, 0xe36d, 0x101, 0x7, 0xc4, 0xfffffff9, 0x2, 0x8f3e, 0xa54, 0x200, 0x3, 0x2, 0x0, 0x8001, 0x4, 0x9, 0x3, 0x2, 0x1, 0x0, 0x9, 0x7, 0x57, 0x8, 0x2, 0x1ff, 0x10001, 0xfffffffb, 0x0, 0x8, 0x4, 0x1, 0x1, 0x6, 0x2, 0x5, 0x8001, 0x8e0d, 0x5, 0x1, 0x9, 0x787c, 0x5, 0xf01, 0x5, 0x401, 0xecbf, 0x4, 0xe4b3, 0x5, 0x6, 0xf8c, 0xb643, 0x9, 0x8001, 0x4, 0x7, 0xa, 0x18d9f5a5, 0x72, 0x610, 0xd, 0x5, 0x80000001, 0x8, 0x0, 0x7, 0xc, 0xe, 0x80040, 0x7, 0xffffffff, 0x4, 0x3, 0xa, 0x3e, 0xffffffff, 0x2, 0x5, 0x80000001, 0x6, 0x5, 0x6, 0x9, 0x6, 0xfffffffd, 0x401, 0x168ddf82, 0x3, 0x9, 0xadd, 0x7, 0x2, 0x80000001, 0x0, 0x5, 0x5, 0x3, 0xa93, 0xfffffffb, 0x6, 0x8, 0x44, 0x4, 0x3, 0xfffffff8, 0x2, 0x1, 0x10000, 0x9, 0xbb19, 0x5, 0x8000, 0x2, 0x1, 0x489, 0xc, 0x200, 0xffff8001, 0x2, 0x5, 0x6fe22552, 0x5, 0x8, 0x10000, 0x9, 0x0, 0x10, 0xfd, 0x3, 0x3, 0x701b, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0x5, 0x6, 0x9, 0x7, 0x3, 0x80, 0x0, 0xffffffff, 0x5, 0x9, 0xb, 0x2, 0x7387, 0x200, 0x7fff, 0x3, 0x271fb717, 0x40, 0xeb9, 0x101, 0xe105, 0x3, 0x10, 0x3, 0x75c, 0x401, 0xffffffff, 0xfffffc00, 0x8, 0x6fa3, 0x1, 0x60, 0x10, 0x7fff, 0x6, 0xeb, 0x7, 0xdc, 0x6, 0x9, 0x8, 0x3, 0x4, 0x2, 0x3fc6, 0x8, 0x66, 0x5, 0x8, 0x3, 0x5, 0x7, 0x5, 0x2, 0x5, 0x8, 0x1, 0x6, 0x2bc0, 0xffff, 0x4c649d6f, 0x7, 0x17d, 0x4, 0x8001, 0x2, 0x2, 0x5, 0x400, 0x200, 0x7ff, 0x8, 0x4e9, 0x2, 0x200, 0x0, 0x3909, 0x8f54, 0x0, 0x4, 0x9, 0x0, 0x7, 0x5, 0x32f7, 0x551, 0x0, 0x1, 0x6, 0x7fffffff, 0x8, 0x3, 0x6, 0x4, 0x7fffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xffff, 0x6, 0x7ff, 0x1, 0x6, 0x0, 0x6a4b, 0x8e0d, 0x6, 0x10000, 0x9, 0x400, 0x8, 0x1000, 0x9, 0x9, 0x4, 0x5, 0x3, 0x9872, 0x18, 0x7, 0x0, 0x9, 0x1, 0x6, 0x0, 0x7, 0xfe2, 0x1ff, 0x0, 0x6, 0x7, 0x0, 0x3, 0x1000, 0x5, 0x6d2, 0x1, 0x2, 0xe38, 0x8, 0x7ff, 0x6, 0x7, 0xc90, 0x5, 0x1, 0x100, 0x9, 0xe, 0x3, 0x0, 0x3, 0xfffffff7, 0x5, 0xf09f, 0x4, 0x8, 0x629, 0x7, 0x5, 0x3, 0xffffff14, 0x6, 0x71ce, 0x101, 0x6, 0x10000, 0x7d86, 0x8, 0x0, 0x1, 0x1, 0x2, 0x6, 0x7fffffff, 0x4, 0x4, 0x6, 0x6631f2b0, 0x2, 0xfffffffe, 0x22, 0x7, 0xd, 0xfe00000, 0x6, 0x101, 0x4, 0xffffffff, 0x2984, 0x8, 0x563, 0x333, 0x2, 0xef, 0xfa2, 0x8, 0x16a, 0xfffeffff, 0x2a, 0x0, 0x70ed, 0x401, 0x48df, 0x1000, 0x0, 0x7, 0x4, 0x1, 0x1, 0x5, 0x8, 0xd, 0x6, 0x101, 0x1, 0x3, 0x2, 0xb, 0xed, 0xa, 0x6, 0x1, 0x10, 0x3, 0x2, 0x0, 0x4, 0x1, 0xff, 0x8, 0x5, 0x93, 0x8, 0x8, 0x9, 0x2, 0x1, 0x3, 0x70, 0x6, 0x7, 0xcc1, 0x1, 0x5, 0x9, 0x2c, 0x98, 0x4, 0x5, 0x1, 0x5, 0x3, 0x7, 0x1, 0x3, 0x7, 0x3, 0x8, 0x6, 0x7, 0x3, 0x1, 0x0, 0xb2, 0x5, 0x9, 0x5, 0x8, 0x6, 0x1e, 0x9, 0x20, 0x3, 0x7, 0x3, 0xd, 0x8, 0x5, 0x776, 0x4, 0x8001, 0x7ff, 0x4, 0x1, 0x2, 0x40, 0x4c00, 0x10001, 0x0, 0xa, 0x1, 0x9, 0x2, 0x2, 0xffff, 0x2, 0x9, 0x0, 0x8, 0x21, 0x0, 0x30, 0x10001, 0xffffffff, 0x5, 0x1c00000, 0xfff, 0x3, 0x10, 0x8395, 0x4, 0x7fff, 0x9, 0x80, 0x10000, 0x915, 0x0, 0x7f, 0x3, 0x2cc, 0x2, 0x0, 0x1, 0x9, 0x6, 0x4, 0x4, 0x1, 0x4, 0xfffffffb, 0x7ff, 0x1c5f, 0x10, 0x1, 0x0, 0x401, 0x5, 0xfff, 0x6, 0x4, 0xfffff1ae, 0x9de7, 0xff6, 0x5, 0x80, 0x8, 0x0, 0x400, 0x5, 0x6ab, 0x3, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xbf7, 0x5, 0x8, 0x9, 0x3ddc, {0x1, 0x0, 0x9, 0x6, 0x2, 0x80}, {0x30, 0x2, 0x5, 0x9, 0x7, 0x10001}, 0x80000000, 0x6, 0x5}}]}]}}, @f_tcindex={{0xc}, {0x734, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xc6ae}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x6, 0x1}}, @TCA_TCINDEX_ACT={0x708, 0x7, [@m_ife={0x178, 0x1e, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x800}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x4}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xffff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xe}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5000, 0x388, 0x10000000, 0xab}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x97, 0x6, "ea0497955d90fa62419c92478f8026a0baa32720a8badfa3c8cc733f615d249537710279112f3b921e732b51faaab75a88e06c0b1ad9715eb4bd30a8a273439e83ebe4d22e0f7b55bba38aa4a901378f5155e13c79bc2616a84e57f6c17c3a0f32346f797326b063c65ab6d4b4133cab2837a722eb68711e4e267c7bc79fae828edc7d87b1c057faa43d9d71f7059dc49609c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0xf8, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0xb0, 0x6, "f0868340f4e1486621a908d926ba439c6d2331791c318993ed35ca636d08c00f57631af491d6f9e2582fd65be49b257de4947b247df5029cf2469f3e82aff9bad3be43bd3d5f96f377b214480671d24d640b936f8656163477a58dc3e3421fd259910135f60c4877d6792d1c070c2d5b80927bb71bad73d84208e1748a1cc4f66c0690d92939a9cbd46724e9768dae3784cdb7b098f9c0cc404301b2ad34afb362ba0e4f836551e380c627c7"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x58, 0x7, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0x25, 0x6, "06b568106d4bfa7c1e8957f2df89d9baed380ddaf4ce27dfd00db917fc782f83a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x90, 0x3, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7f, 0x7, 0x1, 0x9}}]}, {0x4b, 0x6, "7587da32bf9cf02cc7dcf07569e2c19b8ed1c7f2a87b0626b3649de647f2014ce0d8bfd8bbb637d752b23f7d2fd491c1b6493a209e2a3db298cf13fd300187e00238def6d97377"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xf4, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0xcb, 0x6, "be7d8e70ded916e96ca622cb2df2424173202f767c32eb1c16bf0cffe1e15b2f863d9a40c75dd27314a786d3a9786c3fec33794abb1a797c23140657814f93e81e0b8cdd87f448e02a83d2f31a784c38c1567a8373cff992f1c1d76dfb641510563ca2280aa6f54a362a55d536530982c62e83488143ace65961c234a186e92717fba5b31b0f31f0d24be2a97dd3e5bf48add05af5e30e7e1bd10563a06b99299cbc556dc235b3588a8f7ca4f5514a4a33065ee8fa3954168148adc1916f176bfb6b54c6e6e27f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xac, 0x13, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x8, 0x1, 0x7, 0xc}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x80000000, 0x5, 0x9, 0xd6}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x10000000, 0x40, 0x7}, 0x7}}]}, {0x27, 0x6, "43a293d0aec2f80237821a23ec0831312a866a53024c4d490ae96f4fc57dbd0fee597b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0xec, 0xf, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x73c, 0x720e6f76661458c8, 0x7fffffff, 0x9}, @dev={0xac, 0x14, 0x14, 0x10}, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x10000000, 0x1, 0x6}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}]}, {0x74, 0x6, "f7b78ceeeec991f9f3a6d81b6632be162c724966e0409c0337e2c2ad31ac7b01a2e1c98874b71e8d3b7db6131ad88bf515172114d6886259b4c2f7e7ca803e08a0b8ba4edd4e64b6c2c3472af4e41f4d412722cde98c61b0c40593c9a91fbd1e91f6236ef62a4eda8df5957df14e2242"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_simple={0x120, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x2, 0x4, 0x7, 0x200}}]}, {0xda, 0x6, "468e243c1f54e4449e83dac1ef7e1f61e540f2b9832722103bc9d4f7e05ad09a67dbeea1e6631eaa655a70d340e55197c4a9bac225876105916a02040dda55118392d46b18c83afed9604371ddaa66c639595ee438f7953fae6c2b62762864b62b09e2e84ab65c8e1a5e73aa25a54962667e076f9d0456699910afc9b5f80ae7ffe2d13c2e82728918ca49f1bbc428586d4bd5c3416f99b1239ae2e82b1c636f879616b4b699df81c4cd2fb6f337de54160d6bde4d9663f671b5c3d68835dab8251c2c490e0cc0071a7a0ce2ad9dbd4c4b75408dea5f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x10}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xb139}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}]}, 0xfdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"], 0x20}}, 0x0) 31.817687125s ago: executing program 2 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/mpls/platform_labels\x00', 0x10f) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x23d1) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000500)=""/127, &(0x7f0000000080)=0x126bfbafc275c502) ioctl(r0, 0x932, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x140) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="0d050042e8d2824434bc4943000800000095000000000000003948355090b0cde9574c70f2b71b3bae9df37274c88656e8e1d111f8d39556eb28e67bda980ad06fd5ddf1940d4683021f027a29638e6e4c1eae53e3f9a375f35dc369b95136413e8ec456614d6ef448b9c9b05c5094823c6a49476586d39910f8a59ee746c9a45e6b84572085d9f06e1410ba87e15df2c5987acc49bac760cb5f90b963564b11da74a3b74f87ae3f69859a27c7b4e14a33a316788e18fdd5de24757b830916cddcee2d0133eed61a32453c43c609711cc9acca401baf7e904fa030eee2e21497cae3e0ab0a456e73f4762310"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) io_uring_setup(0x27cd, &(0x7f00000000c0)={0x0, 0xc63b, 0x2000, 0x2, 0x1fa}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x40004) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 30.657415835s ago: executing program 2 (id=223): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0x42b, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r6 = syz_usb_connect(0x5, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x101, 0x5, 0xfffffffa, 0x1, 0x1, 0x4, 0x3, 0x3, 0x7f, 0x80, 0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, 0x0, 0x0) syz_usb_control_io$uac2(r6, 0x0, 0x0) 27.640433691s ago: executing program 2 (id=231): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) 27.179071079s ago: executing program 32 (id=231): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) 21.747178314s ago: executing program 1 (id=247): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="090d0000000000f0", @ANYRES32, @ANYBLOB='\b\x00'], 0x58}}, 0x0) 19.478482157s ago: executing program 1 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000040000000030a01020000000000000000010040000900030073797a300400000014000480080002400000000008000140000000010900010073797a310000000014000000110001"], 0x90}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000e6a000/0x2000)=nil, 0x2000, 0xfffffffffdfffffa, 0x2011, r1, 0xb39b2000) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="042f014b", @ANYRES32=r0, @ANYBLOB="168963c391a12466ab57217a8f05dcc2a0e556ca2b73a487a310131dd794845e4cb315f00484091f23ef27d94d73bba1be589d02b2b541c9d1a8a4d378087cf4ebb21b954559d535883764535de62e78b4eb2b70db1988cb00adef2c68cf4b1257a56f43a46f0631e0a4832f13584fea33fac15daf6e37b06187a608cb5c095133befa1b1585e18f655c7b416c66fc34ec44cf0ca5e4b0d47c4ebeccd8"], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time={0x7, 0x8}, {}, {}, @raw32}, {0x0, 0xf8, 0x0, 0x9, @tick=0x1, {}, {}, @ext={0x0, 0x0}}, {0x23, 0x0, 0xd, 0x29, @time={0x6, 0x5}, {0x8, 0x6f}, {0x6, 0x5}, @connect={{0x91, 0x6}, {0x8, 0x5}}}], 0x54) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast1, 0x5}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) 16.293614473s ago: executing program 1 (id=254): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) r1 = syz_io_uring_setup(0x4640, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x4003, 0x55}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x800, 0x31, 0x2a}, &(0x7f0000000740)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xf, 0x93b}, @exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "79e6f44d530dc1a2bbb526931e89c384"}, @eol, @fastopen={0x22, 0x6, "0da66c51"}, @mss={0x2, 0x0, 0x7}, @mptcp=@capable={0x1e, 0x14, 0x1, 0x8, 0x31, 0xd, [0xfffffffffffffffa]}]}}}}}}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESHEX=r0]) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r6, 0xee01) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x1b) write(r7, 0x0, 0x3f00) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000314050025bd7000fbdbdf250900020073797a31000000000800410072786500140033006c6f000000000000000000000000000019944975e634230c82badc5fbab7e9006cc5de3d96ce122d27f21df7c3cd93bdb543ae76ddcfe89fae2f35c5062f247e5237a0b9e8f3db85a97d06ddd0efdc6037f4cef896512775ccd0858b07ab9be81a407734d2b7203178f5683c59a3b9f142e5c82d0d9bf1ad6ec67c9bcf0ff7e73a6b4a8fdabdea54d914f8fe"], 0x38}}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000f8ffffff94ffff0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0xf}, 0x94) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x6, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000b, 0x11, 0xffffffffffffffff, 0x0) 14.573641825s ago: executing program 3 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) 13.190841541s ago: executing program 4 (id=259): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}}, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x56, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/23, 0x23}], 0x1, 0x0, 0x1e}, 0x10040) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) eventfd(0x8000) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x3, &(0x7f0000003100)=""/4107, &(0x7f0000001080)=0x100b) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d50, 0x60c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, "", {{{0x9, 0x5, 0x81, 0x2, 0x40}}}}}]}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000200), 0x10) r9 = dup2(r6, r7) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8003}, 0xe) 11.163457471s ago: executing program 0 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x10, 0x0, 0x3, 0x0, 0x0, 0x8, 0x11}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe4, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x4) 10.723136773s ago: executing program 0 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xc001) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000380)={0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x2, 0x1, {0x9, 0xa, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x1, 0x1}, {0x300, 0x1}}}, 0x24}}, 0x0) 10.41862854s ago: executing program 3 (id=263): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 10.263134739s ago: executing program 0 (id=264): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff000000070502"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x0, 0x1c}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000, 0x9, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="000501020000207c"], 0x0, 0x0, 0x0, 0x0, 0x0}) 9.30925938s ago: executing program 3 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x10000}}, 0xa) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 9.304843539s ago: executing program 4 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x100}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001240)='task\x00') fchdir(r6) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001095494209911a3682afa010203010902120001010740010904520700ffffff"], 0x0) 8.205666993s ago: executing program 3 (id=267): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fc00100}, {0x1ff, 0x3, 0x7f, 0x9}, {0x3, 0x36, 0x5, 0x7}, {0xff, 0x3, 0x9, 0x2}, {0x0, 0x6, 0x2, 0x1020000}, {0x8, 0x35, 0x7e, 0x4}, {0x9, 0x8, 0x10, 0x9}]}) ustat(0x90000000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0xf, 0x3, 0x20000006, 0x53, 0x6, 0xff, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0x7ffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x2, 0x8007, 0x7ff, 0x8, 0x14c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x3, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x3, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8000, 0x5, 0xfffffff3, 0x2, 0xc8, 0x6, 0x4000e, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xd, 0x312, 0x78, 0x1, 0x9, 0x2, 0x7, 0x7ffe, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x3, 0x1000009, 0x5f31, 0xd, 0x40000101, 0x1, 0x2, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8220, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x6, 0x3, 0xbc45, 0x48c93694, 0x0, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x5, 0x6, 0x5, 0x5, 0x8, 0x3ff, 0x1, 0x86, 0x3, 0x303d, 0x3e7, 0xb, 0x5, 0x2, 0x8000002, 0x1, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x1fc, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x5, 0xa2, 0x8, 0xa9, 0x5, 0x6, 0xac8, 0x9, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x5, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x104, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x81, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xffffeffe, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xa1, 0x1, 0x1226, 0x5, 0x5, 0x1, 0xe, 0x10, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r0 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') openat(r0, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(r2, r3, 0x0, 0x201f00) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000030801010000000040000000070000090c00048008000240000000080500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x8000004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unshare(0x26020480) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x0, 0x0, &(0x7f0000000040)}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x0, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x2, 0x0, 0xde56353, 0x0}, {0x0, 0x0, 0x2000100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/regulator/regulator_summary\x00', 0x0, 0x0) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r8) 6.969386041s ago: executing program 0 (id=268): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) getrandom(&(0x7f0000000380)=""/12, 0xc, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x2b4540, 0x56}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6b4e1c1017bef5ac, 0x0, &(0x7f0000000500)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000700)={&(0x7f00000003c0)="120eb51c09523d85223b584dd4b8b51f5fae9c4f92c3ebf188846516fd2d224eb16784acefd27bd99a0b73b5190b1602b7b7e418fcc007f1df8de7633d8c336ac3a4928b4dd76ff6bd3c15ba3f462dc6016a467d0d5ffe3d3fb39728e921b43f1726f1e43c9cace17cb79359581dce9dcbf51a10f9", 0x75}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) recvmmsg(r5, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}], 0x2, 0x10120, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, 0x0) socket$unix(0x1, 0x2, 0x0) 5.002278602s ago: executing program 4 (id=269): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fc00100}, {0x3, 0x36, 0x5, 0x7}, {0xff, 0x3, 0x9, 0x2}, {0x0, 0x6, 0x2, 0x1020000}, {0x8, 0x35, 0x7e, 0x4}, {0x9, 0x8, 0x10, 0x9}]}) ustat(0x90000000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0xf, 0x3, 0x20000006, 0x53, 0x6, 0xff, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0x7ffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x2, 0x8007, 0x7ff, 0x8, 0x14c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x3, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x3, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8000, 0x5, 0xfffffff3, 0x2, 0xc8, 0x6, 0x4000e, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xd, 0x312, 0x78, 0x1, 0x9, 0x2, 0x7, 0x7ffe, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x3, 0x1000009, 0x5f31, 0xd, 0x40000101, 0x1, 0x2, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8220, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x6, 0x3, 0xbc45, 0x48c93694, 0x0, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x5, 0x6, 0x5, 0x5, 0x8, 0x3ff, 0x1, 0x86, 0x3, 0x303d, 0x3e7, 0xb, 0x5, 0x2, 0x8000002, 0x1, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x1fc, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x5, 0xa2, 0x8, 0xa9, 0x5, 0x6, 0xac8, 0x9, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x5, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x104, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x81, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xffffeffe, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xa1, 0x1, 0x1226, 0x5, 0x5, 0x1, 0xe, 0x10, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r0 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') openat(r0, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(r2, r3, 0x0, 0x201f00) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000030801010000000040000000070000090c00048008000240000000080500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x8000004) 4.944827845s ago: executing program 0 (id=270): syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) chdir(0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5, @ANYBLOB=',rootmode=', @ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273ad030000000000000092b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e16450000000000007fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e5648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f721c5767f17f3feb35300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6dbf1390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219dffffffff280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, 0x0) utimes(&(0x7f0000000240)='./file0/../file0\x00', 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, 0x0, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, r6) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r8, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000"}], 0x18}, 0x0) sendmsg(r8, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) 3.742721928s ago: executing program 3 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000006c0)=0x3, 0x4) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffaf) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) futex_waitv(&(0x7f00000004c0)=[{0x7, &(0x7f0000000000)=0xabe2, 0x82}, {0x36c, &(0x7f0000000080)=0x40, 0x2}, {0x0, &(0x7f00000000c0)=0x7, 0x2}, {0x4, &(0x7f0000000100)=0x4, 0x82}, {0x5, &(0x7f0000000140)=0x1a25ea8c, 0x2}, {0xd, &(0x7f0000000180), 0x82}, {0x4, &(0x7f00000001c0)=0x6, 0x2}, {0x6, &(0x7f0000000280)=0x10, 0x2}, {0x4, &(0x7f00000002c0)=0x10, 0x82}, {0x4, &(0x7f0000000300)=0xdc8c, 0x2}, {0xffff, &(0x7f0000000340)=0xbf0, 0x2}, {0x0, &(0x7f0000000380)=0x7fffffff, 0x2}, {0xfffffffffffffffc, &(0x7f00000003c0)=0x8000000000000000, 0x2}, {0x37, &(0x7f0000000400)=0xfff, 0x2}, {0x4, &(0x7f0000000440)=0x3, 0x2}, {0x9, &(0x7f0000000480)=0x7, 0x2}], 0x10, 0x0, &(0x7f0000000680)={r5, r6+60000000}, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @local, 0xfffffffb}, 0x1c) 3.524261477s ago: executing program 4 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) 2.751931942s ago: executing program 1 (id=273): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x7ffffffff000}, 0x0) 2.743459643s ago: executing program 0 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2043) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2d, 0x4, 0x8}}, 0x50) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x1, 0x5, 0xb, 0x0, 'unlock all\x00'}}, 0x34) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000001000086d040cc500000000000109022400010000800b09040004020300020009210600100122e30109058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0xff, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) pwritev(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000000)="dc50b8b6", 0x4}, {&(0x7f00000000c0)="b2449a08dd1fe18d845f1303aa5e408dbba0ed081e7bcd39382f5b56458dcf4a63c9428c1c39f8346c7b4de7dfd68b5167761f00abfb9af593c7c4", 0x3b}, {&(0x7f0000000100)="63b2c834cd23680e427d87836f5694ecf1c799cee2b3fb9ff8e5d8ec9fced0fcf4b22bf34bd209eca2d276b8166dbf436c8029cac84f7114fe6838531369f4cf1d45e4d01504c569ab30cfb99868587b35d9ca4606e5ac57f406fc70915fdd8dde0deee7713689a2c4197ab0ee0f0eabd35ce0f5b091d4d78a1d4b38dd9232ff79e4fe6367", 0x85}, {&(0x7f0000000440)="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", 0x1000}], 0x3, 0x3, 0x1) 2.630843364s ago: executing program 5 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000002340)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0) 2.480452414s ago: executing program 5 (id=275): socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 2.458136344s ago: executing program 1 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000380)=""/12, 0xc, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x2b4540, 0x56}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x6b4e1c1017bef5ac, 0x0, &(0x7f0000000500)) r2 = getpid() syz_open_procfs$userns(r2, &(0x7f0000000100)) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000000700)={&(0x7f00000003c0)="120eb51c09523d85223b584dd4b8b51f5fae9c4f92c3ebf188846516fd2d224eb16784acefd27bd99a0b73b5190b1602b7b7e418fcc007f1df8de7633d8c336ac3a4928b4dd76ff6bd3c15ba3f462dc6016a467d0d5ffe3d3fb39728e921b43f1726f1e43c9cace17cb79359581dce9dcbf51a10f9", 0x75}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/550, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cifs\x00', 0x0, 0x0) 1.127282275s ago: executing program 1 (id=277): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff000000070502"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x0, 0x1c}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000, 0x9, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="000501020000207c"], 0x0, 0x0, 0x0, 0x0, 0x0}) 909.744104ms ago: executing program 5 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001240)='task\x00') fchdir(r6) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001095494209911a3682afa010203010902120001010740010904520700ffffff"], 0x0) 807.311609ms ago: executing program 4 (id=279): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf2502000a000000000006001200040000000c000880050004000100000008000600f2000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) 584.217559ms ago: executing program 4 (id=280): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x17}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000003c0)={0x6, 0x10, [0xa1, 0xa4f2, 0x6, 0x4]}) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000440)={0x25b, 0x10000, {0xffffffffffffffff}, {0xee01}, 0x0, 0x8}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@mcast1, 0x4e20, 0x9, 0x4e24, 0x2, 0x2, 0x0, 0xa0, 0x4, 0x0, r6}, {0x3d46, 0x4, 0xfffffffffffffff7, 0x6, 0x80, 0x1, 0x98e, 0x5}, {0x8, 0xfffffffffffffff9, 0x0, 0x3}, 0x2, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0xa, @in6=@private2, 0x3503, 0x0, 0x2, 0x5, 0xfae, 0x101, 0xc}}, 0xe4) 0s ago: executing program 3 (id=281): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fc00100}, {0x1ff, 0x3, 0x7f, 0x9}, {0x3, 0x36, 0x5, 0x7}, {0xff, 0x3, 0x9, 0x2}, {0x0, 0x6, 0x2, 0x1020000}, {0x8, 0x35, 0x7e, 0x4}, {0x9, 0x8, 0x10, 0x9}]}) ustat(0x90000000000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0xf, 0x3, 0x20000006, 0x53, 0x6, 0xff, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0x7ffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x2, 0x8007, 0x7ff, 0x8, 0x14c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x3, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x3, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8000, 0x5, 0xfffffff3, 0x2, 0xc8, 0x6, 0x4000e, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xd, 0x312, 0x78, 0x1, 0x9, 0x2, 0x7, 0x7ffe, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x3, 0x1000009, 0x5f31, 0xd, 0x40000101, 0x1, 0x2, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8220, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x6, 0x3, 0xbc45, 0x48c93694, 0x0, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x5, 0x6, 0x5, 0x5, 0x8, 0x3ff, 0x1, 0x86, 0x3, 0x303d, 0x3e7, 0xb, 0x5, 0x2, 0x8000002, 0x1, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x1fc, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x5, 0xa2, 0x8, 0xa9, 0x5, 0x6, 0xac8, 0x9, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x5, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x104, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x81, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xffffeffe, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xa1, 0x1, 0x1226, 0x5, 0x5, 0x1, 0xe, 0x10, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r0 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') openat(r0, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(r2, r3, 0x0, 0x201f00) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000030801010000000040000000070000090c00048008000240000000080500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x8000004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unshare(0x26020480) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x0, 0x0, &(0x7f0000000040)}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x0, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x2, 0x0, 0xde56353, 0x0}, {0x0, 0x0, 0x2000100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/regulator/regulator_summary\x00', 0x0, 0x0) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r8) kernel console output (not intermixed with test programs): m_r:sysadm_t tclass=can_socket permissive=1 [ 83.928457][ T5809] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.111166][ T5826] qnx6: unable to read the first superblock [ 85.491445][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.696397][ T30] audit: type=1400 audit(1788014622.057:190): avc: denied { ioctl } for pid=5846 comm="syz.4.12" path="socket:[9160]" dev="sockfs" ino=9160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.238599][ T30] audit: type=1400 audit(1788014622.627:191): avc: denied { read write } for pid=5850 comm="syz.3.13" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.276414][ T5852] CacheFiles: No cache directory specified [ 87.231895][ T1610] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 87.237383][ T1610] usb 4-1: USB disconnect, device number 2 [ 88.498229][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 88.498268][ T30] audit: type=1400 audit(1788014624.887:206): avc: denied { create } for pid=5867 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.555806][ T30] audit: type=1400 audit(1788014624.927:207): avc: denied { mmap_zero } for pid=5867 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 88.556086][ T30] audit: type=1400 audit(1788014624.927:208): avc: denied { allowed } for pid=5867 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.556143][ T30] audit: type=1400 audit(1788014624.927:209): avc: denied { create } for pid=5867 comm="syz.0.18" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.556180][ T30] audit: type=1400 audit(1788014624.927:210): avc: denied { map } for pid=5867 comm="syz.0.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.556220][ T30] audit: type=1400 audit(1788014624.927:211): avc: denied { read write } for pid=5867 comm="syz.0.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.556259][ T30] audit: type=1400 audit(1788014624.927:212): avc: denied { map } for pid=5867 comm="syz.0.18" path="socket:[7798]" dev="sockfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 89.701293][ T30] audit: type=1400 audit(1788014626.087:213): avc: denied { write } for pid=5879 comm="syz.3.21" name="ipv6_route" dev="proc" ino=4026533255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.430988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.741081][ T30] audit: type=1400 audit(1788014626.587:214): avc: denied { read write } for pid=5881 comm="syz.0.20" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.741138][ T30] audit: type=1400 audit(1788014626.587:215): avc: denied { open } for pid=5881 comm="syz.0.20" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 91.633837][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 91.634334][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 91.642345][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 91.642516][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 91.892023][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 91.892212][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 91.892570][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 91.892777][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 93.088880][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 93.089083][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 93.089514][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 93.089661][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 93.521624][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 93.521666][ T30] audit: type=1400 audit(1788014629.917:227): avc: denied { connect } for pid=5906 comm="syz.0.23" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.534936][ T30] audit: type=1400 audit(1788014629.917:228): avc: denied { prog_run } for pid=5907 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.594455][ T30] audit: type=1400 audit(1788014629.987:229): avc: denied { write } for pid=5906 comm="syz.0.23" laddr=fe80::13 lport=60 faddr=fe80::bb fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.635177][ T5908] xt_CT: No such helper "netbios-ns" [ 93.816577][ T30] audit: type=1400 audit(1788014630.207:230): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 93.924052][ T5888] ceph: No mds server is up or the cluster is laggy [ 93.926758][ T5891] ceph: No mds server is up or the cluster is laggy [ 94.554766][ T30] audit: type=1400 audit(1788014630.947:231): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.834867][ T30] audit: type=1400 audit(1788014631.227:232): avc: denied { ioctl } for pid=5924 comm="syz.3.32" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 96.016069][ T30] audit: type=1400 audit(1788014632.407:233): avc: denied { read write } for pid=5924 comm="syz.3.32" name="vbi4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.016839][ T30] audit: type=1400 audit(1788014632.407:234): avc: denied { open } for pid=5924 comm="syz.3.32" path="/dev/vbi4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.058362][ T30] audit: type=1400 audit(1788014632.437:235): avc: denied { read } for pid=5933 comm="syz.0.34" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.058412][ T30] audit: type=1400 audit(1788014632.437:236): avc: denied { open } for pid=5933 comm="syz.0.34" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.298891][ T5938] ntfs3(nullb0): Primary boot signature is not NTFS. [ 96.303168][ T5938] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 97.084206][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.255892][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 97.270124][ T5944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39'. [ 97.272115][ T5944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39'. [ 97.272227][ T5944] Zero length message leads to an empty skb [ 97.300895][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.316853][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.341378][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.342261][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.342703][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.342750][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.538610][ T5950] netlink: 'syz.0.40': attribute type 3 has an invalid length. [ 97.548263][ T1610] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.961652][ T1610] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 97.983658][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 97.983833][ T10] usbtmc 3-1:16.0: can't read capabilities [ 98.041052][ T1610] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 98.041167][ T1610] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.041216][ T1610] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 98.170363][ T1610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.170396][ T1610] usb 4-1: Product: syz [ 98.170429][ T1610] usb 4-1: Manufacturer: syz [ 98.170444][ T1610] usb 4-1: SerialNumber: syz [ 98.584367][ T1610] usb 4-1: config 0 descriptor?? [ 98.595111][ T1610] usb-storage 4-1:0.0: USB Mass Storage device detected [ 98.633334][ T10] usb 3-1: USB disconnect, device number 2 [ 98.640710][ T1610] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 99.819878][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 99.819924][ T30] audit: type=1400 audit(1788014636.207:255): avc: denied { view } for pid=5943 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 99.840012][ T5965] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.845095][ T30] audit: type=1400 audit(1788014636.227:256): avc: denied { map_read map_write } for pid=5959 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.871012][ T30] audit: type=1400 audit(1788014636.257:257): avc: denied { ioctl } for pid=5943 comm="syz.3.39" path="socket:[7921]" dev="sockfs" ino=7921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.920374][ T25] usb 4-1: USB disconnect, device number 3 [ 99.990021][ T5971] loop4: detected capacity change from 0 to 7 [ 100.002447][ T5971] Dev loop4: unable to read RDB block 7 [ 100.002502][ T5971] loop4: unable to read partition table [ 100.002660][ T5971] loop4: partition table beyond EOD, truncated [ 100.004900][ T5971] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 100.096746][ T30] audit: type=1400 audit(1788014636.487:258): avc: denied { write } for pid=5972 comm="syz.1.36" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.125147][ T30] audit: type=1400 audit(1788014636.517:259): avc: denied { ioctl } for pid=5972 comm="syz.1.36" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.125180][ T5973] binder: 5972:5973 ioctl f50f 0 returned -22 [ 100.172101][ T30] audit: type=1400 audit(1788014636.567:260): avc: denied { read } for pid=5972 comm="syz.1.36" path="socket:[9509]" dev="sockfs" ino=9509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.198171][ T5973] loop5: detected capacity change from 0 to 7 [ 100.208458][ T5973] Dev loop5: unable to read RDB block 7 [ 100.214606][ T5973] loop5: unable to read partition table [ 100.220585][ T5973] loop5: partition table beyond EOD, truncated [ 100.226934][ T5973] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 100.242752][ T30] audit: type=1400 audit(1788014636.637:261): avc: denied { ioctl } for pid=5972 comm="syz.1.36" path="socket:[9509]" dev="sockfs" ino=9509 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.270185][ T30] audit: type=1400 audit(1788014636.667:262): avc: denied { setopt } for pid=5972 comm="syz.1.36" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.293489][ T1610] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.372486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 101.396920][ T1610] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.401733][ T1610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.401758][ T1610] usb 3-1: Product: syz [ 101.401774][ T1610] usb 3-1: Manufacturer: syz [ 101.401789][ T1610] usb 3-1: SerialNumber: syz [ 101.502354][ T4972] Dev loop4: unable to read RDB block 7 [ 101.502395][ T4972] loop4: unable to read partition table [ 101.504386][ T4972] loop4: partition table beyond EOD, truncated [ 101.632622][ T30] audit: type=1400 audit(1788014638.027:263): avc: denied { firmware_load } for pid=5699 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 101.657879][ T5699] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.698153][ T4972] Dev loop4: unable to read RDB block 7 [ 101.698203][ T4972] loop4: unable to read partition table [ 101.698391][ T4972] loop4: partition table beyond EOD, truncated [ 101.823560][ T30] audit: type=1400 audit(1788014638.217:264): avc: denied { create } for pid=5982 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.850171][ T5985] vhci_hcd vhci_hcd.0: failed to lookup sock [ 102.037060][ T4972] Dev loop4: unable to read RDB block 7 [ 102.037111][ T4972] loop4: unable to read partition table [ 102.037301][ T4972] loop4: partition table beyond EOD, truncated [ 102.596234][ T4972] Dev loop4: unable to read RDB block 7 [ 102.596286][ T4972] loop4: unable to read partition table [ 102.596474][ T4972] loop4: partition table beyond EOD, truncated [ 102.687175][ T5699] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 102.688652][ T5699] ath9k_htc: Failed to initialize the device [ 102.951159][ T5699] usb 3-1: ath9k_htc: USB layer deinitialized [ 103.227281][ T25] usb 3-1: USB disconnect, device number 3 [ 103.737374][ T6014] ======================================================= [ 103.737374][ T6014] WARNING: The mand mount option has been deprecated and [ 103.737374][ T6014] and is ignored by this kernel. Remove the mand [ 103.737374][ T6014] option from the mount to silence this warning. [ 103.737374][ T6014] ======================================================= [ 103.759094][ T6014] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 103.942710][ T6014] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 103.943417][ T6014] overlayfs: failed to look up (tracing) for ino (-66) [ 105.380899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.791014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.005576][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 106.005603][ T30] audit: type=1400 audit(1788014642.397:282): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 106.185844][ T30] audit: type=1400 audit(1788014642.577:283): avc: denied { create } for pid=6024 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.526695][ T6037] netlink: 'syz.2.65': attribute type 39 has an invalid length. [ 106.850033][ T30] audit: type=1400 audit(1788014643.237:284): avc: denied { read } for pid=6029 comm="syz.4.63" name="trace_pipe_raw" dev="tracefs" ino=4131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 106.850075][ T30] audit: type=1400 audit(1788014643.237:285): avc: denied { open } for pid=6029 comm="syz.4.63" path="/15/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 106.909563][ T30] audit: type=1400 audit(1788014643.297:286): avc: denied { map } for pid=6029 comm="syz.4.63" path="/15/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 107.151293][ T30] audit: type=1400 audit(1788014643.547:287): avc: denied { accept } for pid=6040 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 107.200774][ T6041] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 107.200844][ T6041] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.66'. [ 107.683829][ T5714] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.916846][ T5714] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.917657][ T5714] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 108.002494][ T5714] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.023339][ T5714] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.147796][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.156127][ T5714] usb 2-1: Product: syz [ 108.162740][ T5714] usb 2-1: Manufacturer: syz [ 108.167750][ T5714] usb 2-1: SerialNumber: syz [ 108.471602][ T5714] usb 2-1: selecting invalid altsetting 1 [ 108.477714][ T30] audit: type=1400 audit(1788014644.867:288): avc: denied { setopt } for pid=6054 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.522701][ T5714] usb 2-1: unit 6 not found! [ 109.120537][ T6061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 109.305239][ T6061] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 109.305416][ T6061] overlayfs: failed to look up (tracing) for ino (-66) [ 110.626143][ T30] audit: type=1400 audit(1788014647.017:289): avc: denied { write } for pid=6063 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.646593][ T30] audit: type=1400 audit(1788014647.017:290): avc: denied { read } for pid=6063 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.646660][ T30] audit: type=1400 audit(1788014647.017:291): avc: denied { ioctl } for pid=6063 comm="syz.3.70" path="socket:[8158]" dev="sockfs" ino=8158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.760818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.422157][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 111.510810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.540811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 111.590809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.100721][ T6073] ntfs3(nullb0): Primary boot signature is not NTFS. [ 112.101413][ T6073] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 112.106260][ T30] audit: type=1400 audit(1788014648.477:292): avc: denied { name_bind } for pid=6065 comm="syz.0.71" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 112.777966][ T30] audit: type=1400 audit(1788014649.167:293): avc: denied { read append } for pid=6074 comm="syz.3.74" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 112.778331][ T30] audit: type=1400 audit(1788014649.167:294): avc: denied { ioctl open } for pid=6074 comm="syz.3.74" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 112.870667][ T5714] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 112.889698][ T5714] usb 2-1: USB disconnect, device number 2 [ 112.942317][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.020252][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.067116][ T30] audit: type=1400 audit(1788014649.457:295): avc: denied { bind } for pid=6079 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.067185][ T30] audit: type=1400 audit(1788014649.457:296): avc: denied { node_bind } for pid=6079 comm="syz.0.77" src=32768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 113.100472][ T30] audit: type=1400 audit(1788014649.487:297): avc: denied { name_bind } for pid=6078 comm="syz.1.76" src=7936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 113.202385][ T25] usb 4-1: New USB device found, idVendor=3820, idProduct=42b1, bcdDevice= 4.01 [ 113.202445][ T25] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 113.203713][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 113.203743][ T25] usb 4-1: can't read configurations, error -61 [ 113.330464][ T6088] loop9: detected capacity change from 0 to 2640 [ 113.335236][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.347327][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.358226][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.369133][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.378914][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.390199][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.390272][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.390314][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.390346][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.390364][ T6088] ldm_validate_partition_table(): Disk read failed. [ 113.390392][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.390422][ T6088] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.390466][ T6088] Dev loop9: unable to read RDB block 0 [ 113.390620][ T6088] loop9: unable to read partition table [ 113.390880][ T6088] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 113.469515][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.481444][ T25] usb 4-1: New USB device found, idVendor=3820, idProduct=42b1, bcdDevice= 4.01 [ 113.481496][ T25] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 113.483447][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 113.483478][ T25] usb 4-1: can't read configurations, error -61 [ 113.483729][ T25] usb usb4-port1: attempt power cycle [ 113.531084][ T5714] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 113.640918][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 113.646614][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 113.647958][ T10] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.647975][ T10] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.647992][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.648010][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.649952][ T10] usb 2-1: config 0 descriptor?? [ 113.720915][ T5714] usb 5-1: No LPM exit latency info found, disabling LPM. [ 113.720949][ T5714] usb 5-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 113.728493][ T5714] usb 5-1: config 0 has no interfaces? [ 113.771559][ T5714] usb 5-1: string descriptor 0 read error: -22 [ 113.771681][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.780275][ T5714] usb 5-1: config 0 descriptor?? [ 113.847096][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.863798][ T25] usb 4-1: New USB device found, idVendor=3820, idProduct=42b1, bcdDevice= 4.01 [ 113.863857][ T25] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 113.876459][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 113.876494][ T25] usb 4-1: can't read configurations, error -61 [ 114.001884][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.011646][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 114.024102][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 114.035752][ T25] usb 4-1: New USB device found, idVendor=3820, idProduct=42b1, bcdDevice= 4.01 [ 114.035805][ T25] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 114.053894][ T6089] nbd0: detected capacity change from 0 to 63 [ 114.055316][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 114.055365][ T25] usb 4-1: can't read configurations, error -61 [ 114.057428][ T25] usb usb4-port1: unable to enumerate USB device [ 114.111466][ T30] audit: type=1400 audit(1788014650.507:298): avc: denied { ioctl } for pid=6087 comm="syz.0.80" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9798 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 114.141415][ T52] block nbd0: Receive control failed (result -104) [ 114.164921][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.172572][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.179419][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.190601][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.197529][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.204506][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.211403][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.218348][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.225239][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.234181][ T10] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 114.259166][ T10] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 114.260935][ T6092] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 114.362057][ T10] kone 0003:1E7D:2CED.0001: couldn't init struct kone_device [ 114.371514][ T10] kone 0003:1E7D:2CED.0001: couldn't install mouse [ 114.390528][ T25] usb 5-1: USB disconnect, device number 2 [ 114.426916][ T10] kone 0003:1E7D:2CED.0001: probe with driver kone failed with error -5 [ 114.452185][ T10] usb 2-1: USB disconnect, device number 3 [ 114.466490][ T6094] fido_id[6094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 116.702466][ T30] audit: type=1400 audit(1788014653.097:299): avc: denied { remount } for pid=6098 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.235793][ T6109] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 117.235896][ T6109] audit: out of memory in audit_log_start [ 117.686843][ T30] audit: type=1400 audit(1788014653.637:300): avc: denied { prog_load } for pid=6107 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.686888][ T30] audit: type=1400 audit(1788014653.637:301): avc: denied { create } for pid=6107 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 117.744939][ T30] audit: type=1400 audit(1788014654.137:302): avc: denied { write } for pid=6105 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.827790][ T30] audit: type=1400 audit(1788014654.217:303): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 117.930065][ T6113] tipc: Started in network mode [ 117.935851][ T6113] tipc: Node identity 7e3f674ed132, cluster identity 4711 [ 117.945287][ T6113] tipc: Enabled bearer , priority 0 [ 117.988803][ T6113] syzkaller0: entered promiscuous mode [ 118.004106][ T6116] FAULT_INJECTION: forcing a failure. [ 118.004106][ T6116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.017007][ T6113] syzkaller0: entered allmulticast mode [ 118.017554][ T6113] tipc: Resetting bearer [ 118.029284][ T6116] CPU: 0 UID: 0 PID: 6116 Comm: syz.3.88 Not tainted syzkaller #0 PREEMPT(full) [ 118.029309][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.029322][ T6116] Call Trace: [ 118.029330][ T6116] [ 118.029338][ T6116] dump_stack_lvl+0x100/0x190 [ 118.029391][ T6116] should_fail_ex.cold+0x5/0xa [ 118.029420][ T6116] _copy_to_user+0x32/0xd0 [ 118.029453][ T6116] simple_read_from_buffer+0xcb/0x170 [ 118.029480][ T6116] proc_fail_nth_read+0x1af/0x230 [ 118.029504][ T6116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.029530][ T6116] ? rw_verify_area+0xce/0x6d0 [ 118.029558][ T6116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.029581][ T6116] vfs_read+0x1e4/0xb40 [ 118.029613][ T6116] ? lock_acquire+0x1d1/0x380 [ 118.029633][ T6116] ? __fget_files+0x34/0x3d0 [ 118.029655][ T6116] ? __pfx_vfs_read+0x10/0x10 [ 118.029684][ T6116] ? find_held_lock+0x2b/0x80 [ 118.029713][ T6116] ? __fget_files+0x215/0x3d0 [ 118.029742][ T6116] ? __fget_files+0x21f/0x3d0 [ 118.029775][ T6116] ksys_read+0x12a/0x250 [ 118.029804][ T6116] ? __pfx_ksys_read+0x10/0x10 [ 118.029841][ T6116] do_syscall_64+0x123/0x790 [ 118.029867][ T6116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.029890][ T6116] RIP: 0033:0x7f5d8615e98e [ 118.029918][ T6116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.029936][ T6116] RSP: 002b:00007f5d87043fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.029966][ T6116] RAX: ffffffffffffffda RBX: 00007f5d870446c0 RCX: 00007f5d8615e98e [ 118.029980][ T6116] RDX: 000000000000000f RSI: 00007f5d870440a0 RDI: 0000000000000005 [ 118.029993][ T6116] RBP: 00007f5d87044090 R08: 0000000000000000 R09: 0000000000000000 [ 118.030006][ T6116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.030019][ T6116] R13: 00007f5d86426128 R14: 00007f5d86426090 R15: 00007fffa0651818 [ 118.030048][ T6116] [ 118.645790][ T6113] tipc: Resetting bearer [ 119.467697][ T6122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6122 comm=syz.0.90 [ 119.483489][ T30] audit: type=1400 audit(1788014655.877:304): avc: denied { connect } for pid=6121 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.110971][ T5699] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.240984][ T5699] usb 1-1: device descriptor read/64, error -71 [ 121.472398][ T5699] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.621077][ T5699] usb 1-1: device descriptor read/64, error -71 [ 121.732570][ T5699] usb usb1-port1: attempt power cycle [ 121.940876][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.012014][ T6113] tipc: Disabling bearer [ 122.021413][ T5714] tipc: Node number set to 2936891214 [ 122.037998][ T6141] geneve2: entered promiscuous mode [ 122.044452][ T6141] geneve2: entered allmulticast mode [ 122.074553][ T5699] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.101071][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 122.109695][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 122.119318][ T5699] usb 1-1: device descriptor read/8, error -71 [ 122.126613][ T25] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 122.126650][ T25] usb 2-1: config 0 has no interface number 0 [ 122.126691][ T25] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 122.137538][ T30] audit: type=1400 audit(1788014658.527:305): avc: denied { set_context_mgr } for pid=6151 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 122.139993][ T30] audit: type=1400 audit(1788014658.527:306): avc: denied { map } for pid=6151 comm="syz.4.94" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.146153][ T6152] binder: 6151:6152 unknown command 0 [ 122.146169][ T6152] binder: 6151:6152 ioctl c0306201 2000000001c0 returned -22 [ 122.146218][ T30] audit: type=1400 audit(1788014658.537:307): avc: denied { call } for pid=6151 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 122.148812][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 122.230376][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.230405][ T25] usb 2-1: Product: syz [ 122.230421][ T25] usb 2-1: Manufacturer: syz [ 122.230436][ T25] usb 2-1: SerialNumber: syz [ 122.268335][ T25] usb 2-1: config 0 descriptor?? [ 122.283706][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 122.283744][ T30] audit: type=1400 audit(1788014658.667:309): avc: denied { connect } for pid=6153 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.286689][ T6150] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.363559][ T5699] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.391474][ T5699] usb 1-1: device descriptor read/8, error -71 [ 122.485870][ T30] audit: type=1400 audit(1788014658.877:310): avc: denied { read write } for pid=6161 comm="syz.2.98" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.493926][ T6150] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.511907][ T5699] usb usb1-port1: unable to enumerate USB device [ 122.539408][ T30] audit: type=1400 audit(1788014658.877:311): avc: denied { open } for pid=6161 comm="syz.2.98" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.572546][ T30] audit: type=1400 audit(1788014658.967:312): avc: denied { map_create } for pid=6161 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.622572][ T6164] FAULT_INJECTION: forcing a failure. [ 122.622572][ T6164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.622625][ T6164] CPU: 0 UID: 0 PID: 6164 Comm: syz.3.99 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.622651][ T6164] Tainted: [L]=SOFTLOCKUP [ 122.622660][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.622670][ T6164] Call Trace: [ 122.622676][ T6164] [ 122.622684][ T6164] dump_stack_lvl+0x100/0x190 [ 122.622720][ T6164] should_fail_ex.cold+0x5/0xa [ 122.622750][ T6164] _copy_from_user+0x2e/0xd0 [ 122.622782][ T6164] kstrtouint_from_user+0xd6/0x1d0 [ 122.622805][ T6164] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 122.622835][ T6164] ? lock_acquire+0x1d1/0x380 [ 122.622863][ T6164] proc_fail_nth_write+0x83/0x220 [ 122.622887][ T6164] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.622919][ T6164] vfs_write+0x2aa/0x1050 [ 122.622952][ T6164] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.622974][ T6164] ? lock_acquire+0x1d1/0x380 [ 122.622994][ T6164] ? __fget_files+0x34/0x3d0 [ 122.623016][ T6164] ? __pfx_vfs_write+0x10/0x10 [ 122.623045][ T6164] ? find_held_lock+0x2b/0x80 [ 122.623072][ T6164] ? __fget_files+0x215/0x3d0 [ 122.623100][ T6164] ? __fget_files+0x21f/0x3d0 [ 122.623132][ T6164] ksys_write+0x12a/0x250 [ 122.623150][ T6164] ? __pfx_ksys_write+0x10/0x10 [ 122.623178][ T6164] do_syscall_64+0x123/0x790 [ 122.623204][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.623225][ T6164] RIP: 0033:0x7f5d8615e98e [ 122.623242][ T6164] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.623261][ T6164] RSP: 002b:00007f5d87064fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.623281][ T6164] RAX: ffffffffffffffda RBX: 00007f5d870656c0 RCX: 00007f5d8615e98e [ 122.623294][ T6164] RDX: 0000000000000001 RSI: 00007f5d870650a0 RDI: 0000000000000008 [ 122.623306][ T6164] RBP: 00007f5d87065090 R08: 0000000000000000 R09: 0000000000000000 [ 122.623319][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.623331][ T6164] R13: 00007f5d86426038 R14: 00007f5d86425fa0 R15: 00007fffa0651818 [ 122.623366][ T6164] [ 123.230937][ T30] audit: type=1400 audit(1788014659.587:313): avc: denied { execute } for pid=6149 comm="syz.1.92" path="/13/bus" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.337344][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 123.361134][ T5699] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 123.374518][ T6171] netlink: 72 bytes leftover after parsing attributes in process `syz.3.101'. [ 123.384695][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 123.400430][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 123.493937][ T30] audit: type=1400 audit(1788014659.887:314): avc: denied { getopt } for pid=6173 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.515244][ T5699] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 123.528780][ T30] audit: type=1400 audit(1788014659.887:315): avc: denied { connect } for pid=6173 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.549793][ T5699] usb 3-1: config 1 has an invalid interface number: 82 but max is 0 [ 123.549821][ T5699] usb 3-1: config 1 has no interface number 0 [ 123.549849][ T5699] usb 3-1: config 1 interface 82 has no altsetting 0 [ 123.575268][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.583651][ T5699] usb 3-1: Product: syz [ 123.587908][ T5699] usb 3-1: Manufacturer: syz [ 123.592708][ T5699] usb 3-1: SerialNumber: syz [ 123.730870][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.774831][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.775209][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.790983][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 123.800004][ T25] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 123.800048][ T25] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 123.800508][ T25] asix 2-1:0.188: probe with driver asix failed with error -61 [ 123.840906][ T5722] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.900906][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 123.917133][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.956813][ T10] usb 1-1: config 0 has no interfaces? [ 124.060918][ T6188] ntfs3(nullb0): Primary boot signature is not NTFS. [ 124.069024][ T6188] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 124.340917][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 124.353532][ T5722] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 124.565291][ T5722] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 124.565330][ T5722] usb 4-1: config 0 has no interface number 0 [ 124.565670][ T5722] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.565694][ T5722] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.565718][ T5722] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 124.565744][ T5722] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 124.565770][ T5722] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.852682][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.852716][ T10] usb 1-1: Product: syz [ 124.852745][ T10] usb 1-1: Manufacturer: syz [ 124.894695][ T10] usb 1-1: SerialNumber: syz [ 124.903291][ T10] usb 1-1: config 0 descriptor?? [ 124.904433][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.904456][ T5722] usb 4-1: Product: syz [ 124.904471][ T5722] usb 4-1: Manufacturer: syz [ 124.904487][ T5722] usb 4-1: SerialNumber: syz [ 124.923911][ T5722] usb 4-1: config 0 descriptor?? [ 125.006422][ T30] audit: type=1400 audit(1788014661.397:316): avc: denied { prog_run } for pid=6190 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 125.025837][ T30] audit: type=1400 audit(1788014661.397:317): avc: denied { create } for pid=6190 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 125.025881][ T30] audit: type=1400 audit(1788014661.397:318): avc: denied { ioctl } for pid=6190 comm="syz.4.106" path="socket:[9954]" dev="sockfs" ino=9954 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 125.086957][ T25] usb 2-1: USB disconnect, device number 4 [ 125.165503][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 125.244374][ T6194] CacheFiles: No cache directory specified [ 125.390646][ T5722] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 125.687014][ T5722] usb 4-1: USB disconnect, device number 8 [ 125.712162][ T6202] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20000 [ 125.896895][ T5699] hub 3-1:1.82: bad descriptor, ignoring hub [ 125.896937][ T5699] hub 3-1:1.82: probe with driver hub failed with error -5 [ 126.141440][ T5699] sierra 3-1:1.82: Sierra USB modem converter detected [ 127.134553][ T5699] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 127.163932][ T5699] usb 3-1: USB disconnect, device number 4 [ 127.166531][ T6211] FAULT_INJECTION: forcing a failure. [ 127.166531][ T6211] name failslab, interval 1, probability 0, space 0, times 0 [ 127.166561][ T6211] CPU: 0 UID: 0 PID: 6211 Comm: syz.2.110 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.166589][ T6211] Tainted: [L]=SOFTLOCKUP [ 127.166597][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.166608][ T6211] Call Trace: [ 127.166615][ T6211] [ 127.166623][ T6211] dump_stack_lvl+0x100/0x190 [ 127.166658][ T6211] should_fail_ex.cold+0x5/0xa [ 127.166688][ T6211] should_failslab+0xc2/0x120 [ 127.166713][ T6211] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 127.166735][ T6211] ? sidtab_sid2str_get+0x84/0x670 [ 127.166758][ T6211] ? sidtab_sid2str_get+0x17a/0x670 [ 127.166785][ T6211] kmemdup_noprof+0x29/0x60 [ 127.166816][ T6211] sidtab_sid2str_get+0x17a/0x670 [ 127.166841][ T6211] security_sid_to_context_core+0x373/0x700 [ 127.166885][ T6211] avc_audit_post_callback+0x109/0x910 [ 127.166911][ T6211] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 127.166931][ T6211] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 127.166953][ T6211] ? skb_put+0x138/0x180 [ 127.166979][ T6211] ? audit_log_n_string+0x2a3/0x5a0 [ 127.167019][ T6211] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 127.167042][ T6211] common_lsm_audit+0x23f/0x2b0 [ 127.167063][ T6211] ? __pfx_common_lsm_audit+0x10/0x10 [ 127.167084][ T6211] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.167107][ T6211] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.167144][ T6211] slow_avc_audit+0x186/0x210 [ 127.167169][ T6211] ? __pfx_slow_avc_audit+0x10/0x10 [ 127.167197][ T6211] ? avc_denied+0x14a/0x190 [ 127.167223][ T6211] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 127.167251][ T6211] avc_has_perm+0x1a6/0x1e0 [ 127.167277][ T6211] ? __pfx_avc_has_perm+0x10/0x10 [ 127.167305][ T6211] ? get_pid_task+0x106/0x250 [ 127.167337][ T6211] sock_has_perm+0x253/0x2f0 [ 127.167364][ T6211] ? __pfx_sock_has_perm+0x10/0x10 [ 127.167392][ T6211] ? find_held_lock+0x2b/0x80 [ 127.167425][ T6211] ? __fget_files+0x34/0x3d0 [ 127.167448][ T6211] ? find_held_lock+0x2b/0x80 [ 127.167474][ T6211] ? __fget_files+0x215/0x3d0 [ 127.167501][ T6211] selinux_socket_setsockopt+0x41/0x80 [ 127.167531][ T6211] security_socket_setsockopt+0x9b/0x230 [ 127.167562][ T6211] do_sock_setsockopt+0x53/0x1d0 [ 127.167589][ T6211] __sys_setsockopt+0x195/0x220 [ 127.167627][ T6211] __x64_sys_setsockopt+0xbd/0x160 [ 127.167656][ T6211] ? do_syscall_64+0xae/0x790 [ 127.167678][ T6211] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.167699][ T6211] do_syscall_64+0x123/0x790 [ 127.167724][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.167745][ T6211] RIP: 0033:0x7f7cc5b9e159 [ 127.167762][ T6211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.167780][ T6211] RSP: 002b:00007f7cc3df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.167800][ T6211] RAX: ffffffffffffffda RBX: 00007f7cc5e25fa0 RCX: 00007f7cc5b9e159 [ 127.167814][ T6211] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000004 [ 127.167826][ T6211] RBP: 00007f7cc3df6090 R08: 0000000000000004 R09: 0000000000000000 [ 127.167839][ T6211] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 127.167851][ T6211] R13: 00007f7cc5e26038 R14: 00007f7cc5e25fa0 R15: 00007ffec3c996f8 [ 127.167885][ T6211] [ 127.250254][ T5722] usb 1-1: USB disconnect, device number 6 [ 127.392766][ T6215] FAULT_INJECTION: forcing a failure. [ 127.392766][ T6215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.392799][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz.4.112 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.392828][ T6215] Tainted: [L]=SOFTLOCKUP [ 127.392835][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.392848][ T6215] Call Trace: [ 127.392854][ T6215] [ 127.392862][ T6215] dump_stack_lvl+0x100/0x190 [ 127.392897][ T6215] should_fail_ex.cold+0x5/0xa [ 127.392926][ T6215] _copy_to_user+0x32/0xd0 [ 127.392958][ T6215] simple_read_from_buffer+0xcb/0x170 [ 127.392985][ T6215] proc_fail_nth_read+0x1af/0x230 [ 127.393009][ T6215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.393034][ T6215] ? rw_verify_area+0xce/0x6d0 [ 127.393062][ T6215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.393085][ T6215] vfs_read+0x1e4/0xb40 [ 127.393116][ T6215] ? lock_acquire+0x1d1/0x380 [ 127.393136][ T6215] ? __fget_files+0x34/0x3d0 [ 127.393159][ T6215] ? __pfx_vfs_read+0x10/0x10 [ 127.393187][ T6215] ? find_held_lock+0x2b/0x80 [ 127.393214][ T6215] ? __fget_files+0x215/0x3d0 [ 127.393242][ T6215] ? __fget_files+0x21f/0x3d0 [ 127.393273][ T6215] ksys_read+0x12a/0x250 [ 127.393302][ T6215] ? __pfx_ksys_read+0x10/0x10 [ 127.393341][ T6215] do_syscall_64+0x123/0x790 [ 127.393367][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.393388][ T6215] RIP: 0033:0x7f439a55e98e [ 127.393405][ T6215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.393424][ T6215] RSP: 002b:00007f439b48ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.393443][ T6215] RAX: ffffffffffffffda RBX: 00007f439b4906c0 RCX: 00007f439a55e98e [ 127.393457][ T6215] RDX: 000000000000000f RSI: 00007f439b4900a0 RDI: 0000000000000004 [ 127.393469][ T6215] RBP: 00007f439b490090 R08: 0000000000000000 R09: 0000000000000000 [ 127.393481][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.393493][ T6215] R13: 00007f439a826038 R14: 00007f439a825fa0 R15: 00007ffd69ad7ca8 [ 127.393522][ T6215] [ 127.420039][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.420105][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.723991][ T1610] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 128.820030][ T5699] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 128.820568][ T5699] sierra 3-1:1.82: device disconnected [ 128.996079][ T1610] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 129.000998][ T1610] usb 2-1: config 1 has an invalid interface number: 82 but max is 0 [ 129.001029][ T1610] usb 2-1: config 1 has no interface number 0 [ 129.001072][ T1610] usb 2-1: config 1 interface 82 has no altsetting 0 [ 129.004431][ T1610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.004460][ T1610] usb 2-1: Product: syz [ 129.004489][ T1610] usb 2-1: Manufacturer: syz [ 129.004508][ T1610] usb 2-1: SerialNumber: syz [ 129.059118][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 129.059135][ T30] audit: type=1400 audit(1788014665.447:324): avc: denied { read write } for pid=6219 comm="syz.2.115" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.059179][ T30] audit: type=1400 audit(1788014665.447:325): avc: denied { open } for pid=6219 comm="syz.2.115" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.588039][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 129.662137][ T30] audit: type=1400 audit(1788014666.057:326): avc: denied { setattr } for pid=6219 comm="syz.2.115" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 129.833660][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 129.846197][ T10] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 129.846235][ T10] usb 5-1: config 1 has no interface number 0 [ 129.846285][ T10] usb 5-1: config 1 interface 82 has no altsetting 0 [ 129.874946][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.897004][ T10] usb 5-1: Product: syz [ 129.901731][ T10] usb 5-1: Manufacturer: syz [ 129.906859][ T10] usb 5-1: SerialNumber: syz [ 130.200814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.677405][ T1610] hub 2-1:1.82: bad descriptor, ignoring hub [ 130.677452][ T1610] hub 2-1:1.82: probe with driver hub failed with error -5 [ 130.678412][ T1610] sierra 2-1:1.82: Sierra USB modem converter detected [ 130.689078][ T1610] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 130.714235][ T1610] usb 2-1: USB disconnect, device number 5 [ 130.729778][ T30] audit: type=1400 audit(1788014667.117:327): avc: denied { write } for pid=6226 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.738150][ T1610] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 130.738603][ T1610] sierra 2-1:1.82: device disconnected [ 131.801201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.898179][ T10] hub 5-1:1.82: bad descriptor, ignoring hub [ 131.898206][ T10] hub 5-1:1.82: probe with driver hub failed with error -5 [ 131.899129][ T10] sierra 5-1:1.82: Sierra USB modem converter detected [ 131.928775][ T10] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 131.971597][ T10] usb 5-1: USB disconnect, device number 3 [ 131.988380][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 131.996587][ T30] audit: type=1400 audit(1788014668.367:328): avc: denied { watch } for pid=6226 comm="syz.3.117" path="/28/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.996652][ T30] audit: type=1400 audit(1788014668.367:329): avc: denied { watch_sb watch_reads } for pid=6226 comm="syz.3.117" path="/28/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.094143][ T10] sierra 5-1:1.82: device disconnected [ 132.126754][ T6240] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20004 [ 132.135667][ T30] audit: type=1400 audit(1788014668.527:330): avc: denied { create } for pid=6239 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.158825][ T30] audit: type=1400 audit(1788014668.547:331): avc: denied { ioctl } for pid=6239 comm="syz.4.120" path="socket:[10069]" dev="sockfs" ino=10069 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.580986][ T6249] ntfs3(nullb0): Primary boot signature is not NTFS. [ 132.581587][ T6249] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 133.455233][ T30] audit: type=1400 audit(1788014669.847:332): avc: denied { map_read map_write } for pid=6250 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.934753][ T6267] CacheFiles: No cache directory specified [ 135.082935][ T5714] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 135.231895][ T5714] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 135.243017][ T5714] usb 1-1: config 1 has an invalid interface number: 82 but max is 0 [ 135.243044][ T5714] usb 1-1: config 1 has no interface number 0 [ 135.243072][ T5714] usb 1-1: config 1 interface 82 has no altsetting 0 [ 135.246749][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.246772][ T5714] usb 1-1: Product: syz [ 135.246785][ T5714] usb 1-1: Manufacturer: syz [ 135.246800][ T5714] usb 1-1: SerialNumber: syz [ 137.560753][ T5714] hub 1-1:1.82: bad descriptor, ignoring hub [ 137.560819][ T5714] hub 1-1:1.82: probe with driver hub failed with error -5 [ 137.561787][ T5714] sierra 1-1:1.82: Sierra USB modem converter detected [ 137.622149][ T5714] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 137.652316][ T5714] usb 1-1: USB disconnect, device number 7 [ 137.691647][ T5714] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 137.700869][ T5714] sierra 1-1:1.82: device disconnected [ 138.040563][ T30] audit: type=1400 audit(1788014674.427:333): avc: denied { read } for pid=6281 comm="syz.4.132" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.041231][ T30] audit: type=1400 audit(1788014674.437:334): avc: denied { open } for pid=6281 comm="syz.4.132" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.061143][ T6282] serio: Serial port ttynull [ 138.336124][ T6289] CacheFiles: No cache directory specified [ 138.804049][ T30] audit: type=1400 audit(1788014675.197:335): avc: denied { read } for pid=6291 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.577389][ T30] audit: type=1400 audit(1788014675.967:336): avc: denied { create } for pid=6302 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.617972][ T30] audit: type=1400 audit(1788014676.007:337): avc: denied { remount } for pid=6302 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 139.715822][ T30] audit: type=1400 audit(1788014676.107:338): avc: denied { setopt } for pid=6302 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.741035][ T30] audit: type=1400 audit(1788014676.137:339): avc: denied { connect } for pid=6302 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.056208][ T6305] ntfs3(nullb0): Primary boot signature is not NTFS. [ 140.056362][ T6305] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 140.112852][ T30] audit: type=1400 audit(1788014676.507:340): avc: denied { write } for pid=6301 comm="syz.3.140" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.160503][ T30] audit: type=1400 audit(1788014676.547:341): avc: denied { connect } for pid=6301 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.191752][ T30] audit: type=1400 audit(1788014676.587:342): avc: denied { shutdown } for pid=6301 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.631469][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.815361][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 141.059013][ T25] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 141.095122][ T25] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 141.095158][ T25] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.095200][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.911835][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 142.927483][ T25] usb 1-1: USB disconnect, device number 8 [ 143.330332][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 143.339493][ T30] audit: type=1400 audit(1788014679.717:358): avc: denied { write } for pid=6332 comm="syz.0.149" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 143.370022][ T30] audit: type=1400 audit(1788014679.757:359): avc: denied { ioctl } for pid=6332 comm="syz.0.149" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x64ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 143.442681][ T30] audit: type=1400 audit(1788014679.827:360): avc: denied { kexec_image_load } for pid=6334 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 144.688547][ T4935] block nbd0: Possible stuck request ffff8880283f0000: control (read@0,1024B). Runtime 30 seconds [ 144.689465][ T4935] block nbd0: Possible stuck request ffff8880283f01c0: control (read@1024,1024B). Runtime 30 seconds [ 144.689495][ T4935] block nbd0: Possible stuck request ffff8880283f0380: control (read@2048,2048B). Runtime 30 seconds [ 144.914297][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 147.719386][ T6387] FAULT_INJECTION: forcing a failure. [ 147.719386][ T6387] name failslab, interval 1, probability 0, space 0, times 0 [ 147.733334][ T6387] CPU: 0 UID: 0 PID: 6387 Comm: syz.2.160 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.733374][ T6387] Tainted: [L]=SOFTLOCKUP [ 147.733381][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 147.733395][ T6387] Call Trace: [ 147.733402][ T6387] [ 147.733410][ T6387] dump_stack_lvl+0x100/0x190 [ 147.733447][ T6387] should_fail_ex.cold+0x5/0xa [ 147.733471][ T6387] ? __netlink_lookup+0x652/0x900 [ 147.733504][ T6387] should_failslab+0xc2/0x120 [ 147.733530][ T6387] kmem_cache_alloc_noprof+0x92/0x6a0 [ 147.733553][ T6387] ? skb_clone+0x190/0x400 [ 147.733578][ T6387] skb_clone+0x190/0x400 [ 147.733599][ T6387] netlink_deliver_tap+0xaed/0xcc0 [ 147.733635][ T6387] netlink_unicast+0x62b/0x850 [ 147.733670][ T6387] ? __pfx_netlink_unicast+0x10/0x10 [ 147.733710][ T6387] netlink_sendmsg+0x8b0/0xda0 [ 147.733746][ T6387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.733780][ T6387] ? selinux_socket_sendmsg+0x198/0x2f0 [ 147.733818][ T6387] ____sys_sendmsg+0xa4d/0xbe0 [ 147.733842][ T6387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.733874][ T6387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.733907][ T6387] ? lock_acquire+0x1d1/0x380 [ 147.733928][ T6387] ? get_pid_task+0x2a/0x250 [ 147.733959][ T6387] ___sys_sendmsg+0x190/0x1e0 [ 147.733989][ T6387] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.734016][ T6387] ? get_pid_task+0x106/0x250 [ 147.734055][ T6387] ? find_held_lock+0x2b/0x80 [ 147.734104][ T6387] __sys_sendmsg+0x160/0x210 [ 147.734138][ T6387] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.734189][ T6387] do_syscall_64+0x123/0x790 [ 147.734218][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.734241][ T6387] RIP: 0033:0x7f7cc5b9e159 [ 147.734258][ T6387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.734278][ T6387] RSP: 002b:00007f7cc3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.734298][ T6387] RAX: ffffffffffffffda RBX: 00007f7cc5e25fa0 RCX: 00007f7cc5b9e159 [ 147.734313][ T6387] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 147.734326][ T6387] RBP: 00007f7cc3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.734339][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.734356][ T6387] R13: 00007f7cc5e26038 R14: 00007f7cc5e25fa0 R15: 00007ffec3c996f8 [ 147.734387][ T6387] [ 148.437112][ T6393] ntfs3(nullb0): Primary boot signature is not NTFS. [ 148.447472][ T6393] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 150.136655][ T30] audit: type=1400 audit(1788014686.527:361): avc: denied { write } for pid=6398 comm="syz.1.164" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.672439][ T30] audit: type=1400 audit(1788014687.037:362): avc: denied { shutdown } for pid=6402 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.811111][ T5714] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 151.013061][ T5714] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 151.028071][ T5714] usb 2-1: config 1 has an invalid interface number: 82 but max is 0 [ 151.038401][ T5714] usb 2-1: config 1 has no interface number 0 [ 151.047954][ T5714] usb 2-1: config 1 interface 82 has no altsetting 0 [ 151.092304][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.092360][ T5714] usb 2-1: Product: syz [ 151.102529][ T5714] usb 2-1: Manufacturer: syz [ 151.102560][ T5714] usb 2-1: SerialNumber: syz [ 151.467916][ T30] audit: type=1400 audit(1788014687.857:363): avc: denied { bind } for pid=6404 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.659123][ T30] audit: type=1400 audit(1788014688.047:364): avc: denied { connect } for pid=6404 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.708207][ T30] audit: type=1400 audit(1788014688.097:365): avc: denied { write } for pid=6404 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.092212][ T6418] syz_tun: entered allmulticast mode [ 152.107478][ T6418] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 152.120630][ T30] audit: type=1400 audit(1788014688.507:366): avc: denied { append } for pid=6416 comm="syz.0.161" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.186610][ T6418] dvmrp6: entered allmulticast mode [ 152.201888][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 152.219752][ T6418] syz_tun: left allmulticast mode [ 152.489643][ T30] audit: type=1400 audit(1788014688.877:367): avc: denied { mounton } for pid=6416 comm="syz.0.161" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 152.755888][ T30] audit: type=1400 audit(1788014689.147:368): avc: denied { nlmsg_read } for pid=6427 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.960315][ T5714] hub 2-1:1.82: bad descriptor, ignoring hub [ 152.960356][ T5714] hub 2-1:1.82: probe with driver hub failed with error -5 [ 152.966982][ T5714] sierra 2-1:1.82: Sierra USB modem converter detected [ 153.018672][ T5714] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 153.062830][ T5714] usb 2-1: USB disconnect, device number 6 [ 153.080603][ T5714] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 153.091222][ T5714] sierra 2-1:1.82: device disconnected [ 153.138589][ T6440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6440 comm=syz.1.172 [ 154.076480][ T5714] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.137809][ T6451] netlink: 'syz.0.175': attribute type 39 has an invalid length. [ 155.175768][ T30] audit: type=1400 audit(1788014691.567:369): avc: denied { read } for pid=6450 comm="syz.0.175" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.221167][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 155.229470][ T5714] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 155.241544][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.253112][ T5714] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.264208][ T5714] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.274218][ T5714] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 155.287741][ T5714] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.295561][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.308383][ T5714] usb 2-1: config 0 descriptor?? [ 155.539040][ T30] audit: type=1400 audit(1788014691.927:370): avc: denied { sqpoll } for pid=6439 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 156.056281][ T6470] ntfs3(nullb0): Primary boot signature is not NTFS. [ 156.056863][ T6470] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 156.687597][ T5714] usbhid 2-1:0.0: can't add hid device: -71 [ 156.687669][ T5714] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.714077][ T5714] usb 2-1: USB disconnect, device number 7 [ 157.480980][ T5714] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.653445][ T5714] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 157.667097][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.677629][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 157.687696][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 157.698003][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 157.714718][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 157.725044][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 157.735144][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 157.745299][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 157.762249][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 157.777878][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 157.777941][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 157.778004][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 157.778060][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 157.778116][ T5714] usb 1-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 157.869105][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.869145][ T5714] usb 1-1: Product: syz [ 157.869174][ T5714] usb 1-1: Manufacturer: syz [ 157.869192][ T5714] usb 1-1: SerialNumber: syz [ 157.903210][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.903365][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.903484][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.903598][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.903747][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.903863][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.903978][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.904073][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.904211][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.904328][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.982886][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.983328][ T6473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.876711][ T30] audit: type=1400 audit(1788014695.257:371): avc: denied { mount } for pid=6472 comm="syz.0.180" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 159.491326][ T5791] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 159.787852][ T5791] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 159.795549][ T5791] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 159.795667][ T5791] usb 5-1: config 1 has no interface number 0 [ 159.795801][ T5791] usb 5-1: config 1 interface 82 has no altsetting 0 [ 159.805070][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.805109][ T5791] usb 5-1: Product: syz [ 159.805217][ T5791] usb 5-1: Manufacturer: syz [ 159.805289][ T5791] usb 5-1: SerialNumber: syz [ 159.946783][ T5714] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 160.272712][ T5714] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 160.885157][ T30] audit: type=1400 audit(1788014697.267:372): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 160.949148][ T5714] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 160.950762][ T5714] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 160.952306][ T5714] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 160.970836][ T5714] usb 1-1: USB disconnect, device number 9 [ 160.987777][ T5714] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 160.996077][ T5714] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 161.001993][ T5714] keyspan 1-1:1.0: device disconnected [ 161.211897][ T30] audit: type=1400 audit(1788014697.597:373): avc: denied { unlink } for pid=6502 comm="syz.1.190" name="#1" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 161.250920][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 161.305108][ T5791] hub 5-1:1.82: bad descriptor, ignoring hub [ 161.312554][ T5791] hub 5-1:1.82: probe with driver hub failed with error -5 [ 161.322374][ T5791] sierra 5-1:1.82: Sierra USB modem converter detected [ 161.338288][ T30] audit: type=1800 audit(1788014697.727:374): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.190" name="file0" dev="overlay" ino=200 res=0 errno=0 [ 161.375927][ T5791] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 161.478781][ T6507] evm: overlay not supported [ 162.485650][ T5791] usb 5-1: USB disconnect, device number 4 [ 162.638146][ T10] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 162.890504][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.890558][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.890596][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.197486][ T5791] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 163.206745][ T5791] sierra 5-1:1.82: device disconnected [ 163.226999][ T10] usb 3-1: config 0 descriptor?? [ 163.342252][ T30] audit: type=1400 audit(1788014699.737:375): avc: denied { getopt } for pid=6513 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.079136][ T6515] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 164.079252][ T6515] CIFS mount error: No usable UNC path provided in device string! [ 164.079252][ T6515] [ 164.079574][ T6515] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 164.453707][ T6514] netlink: 72 bytes leftover after parsing attributes in process `syz.0.193'. [ 165.859565][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 165.859669][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 165.885770][ T10] usb 3-1: USB disconnect, device number 5 [ 166.060905][ T5714] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 166.213676][ T5714] usb 4-1: not running at top speed; connect to a high speed hub [ 166.213722][ T5714] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 166.232637][ T5714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 166.232684][ T5714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 166.255814][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.255852][ T5714] usb 4-1: Product: syz [ 166.255884][ T5714] usb 4-1: Manufacturer: syz [ 166.255904][ T5714] usb 4-1: SerialNumber: syz [ 166.289093][ T5714] oti6858 4-1:1.0: oti6858 converter detected [ 166.301160][ T5714] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 166.698614][ T10] usb 4-1: USB disconnect, device number 9 [ 166.830880][ T5714] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 166.933144][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 166.983923][ T10] oti6858 4-1:1.0: device disconnected [ 167.002021][ T5714] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 167.012334][ T5714] usb 3-1: config 1 has an invalid interface number: 82 but max is 0 [ 167.012372][ T5714] usb 3-1: config 1 has no interface number 0 [ 167.012403][ T5714] usb 3-1: config 1 interface 82 has no altsetting 0 [ 167.042978][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.044485][ T5714] usb 3-1: Product: syz [ 167.044651][ T5714] usb 3-1: Manufacturer: syz [ 167.044672][ T5714] usb 3-1: SerialNumber: syz [ 167.348377][ T30] audit: type=1400 audit(1788014703.737:376): avc: denied { append } for pid=6531 comm="syz.1.192" name="sg0" dev="devtmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 167.428013][ T30] audit: type=1400 audit(1788014703.817:377): avc: denied { create } for pid=6531 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 168.770876][ T1610] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 168.778752][ T5699] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.959518][ T30] audit: type=1400 audit(1788014705.327:378): avc: denied { mount } for pid=6550 comm="syz.0.202" name="/" dev="rpc_pipefs" ino=11122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 168.997122][ T1610] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 169.015505][ T5699] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 169.026445][ T5699] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 169.045599][ T5699] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.054955][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 231, changing to 11 [ 169.055021][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 169.055081][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.111367][ T1610] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 169.120562][ T1610] usb 5-1: config 1 has no interface number 0 [ 169.120668][ T1610] usb 5-1: config 1 interface 82 has no altsetting 0 [ 169.137603][ T5699] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.148446][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 231, changing to 11 [ 169.148515][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 169.148575][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.185882][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.199535][ T1610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.207639][ T1610] usb 5-1: Product: syz [ 169.207666][ T1610] usb 5-1: Manufacturer: syz [ 169.207684][ T1610] usb 5-1: SerialNumber: syz [ 169.223724][ T5699] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.223785][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 231, changing to 11 [ 169.223825][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 169.223855][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.288277][ T5699] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.290200][ T5714] hub 3-1:1.82: bad descriptor, ignoring hub [ 169.290230][ T5714] hub 3-1:1.82: probe with driver hub failed with error -5 [ 169.294465][ T5714] sierra 3-1:1.82: Sierra USB modem converter detected [ 169.304082][ T5714] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 169.333938][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 169.335335][ T5714] usb 3-1: USB disconnect, device number 6 [ 169.336911][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.336954][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.353715][ T5714] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 169.362911][ T5714] sierra 3-1:1.82: device disconnected [ 169.372997][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 231, changing to 11 [ 169.373051][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 169.373079][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.421956][ T5699] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.422004][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 231, changing to 11 [ 169.422056][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 169.422084][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.506016][ T5699] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.506063][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 231, changing to 11 [ 169.506092][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 169.506144][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.507191][ T5699] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.507233][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 231, changing to 11 [ 169.507261][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 169.507308][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.508268][ T5699] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.508329][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 231, changing to 11 [ 169.508357][ T5699] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 169.508385][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.510493][ T5699] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 169.510517][ T5699] usb 4-1: Product: syz [ 169.510533][ T5699] usb 4-1: Manufacturer: syz [ 169.510549][ T5699] usb 4-1: SerialNumber: syz [ 169.643460][ T5699] usb 4-1: config 0 descriptor?? [ 169.694952][ T5699] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 169.906006][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.907857][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.921281][ T5714] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.931069][ T30] audit: type=1400 audit(1788014706.317:379): avc: denied { mounton } for pid=6558 comm="syz.0.204" path="/43/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 169.956042][ T6560] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 170.013346][ T6541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.017314][ T6541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.072063][ T5714] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 170.078576][ T5714] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 170.078618][ T5714] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 170.078645][ T5714] usb 3-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.078684][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.170609][ T6560] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 170.170649][ T6560] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 170.176261][ T193] usb 4-1: USB disconnect, device number 10 [ 170.187364][ T193] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 170.192203][ T43] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.192249][ T43] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.192287][ T43] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.192323][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.293681][ T5699] usb 3-1: USB disconnect, device number 7 [ 170.663637][ T6566] netlink: 'syz.0.205': attribute type 39 has an invalid length. [ 170.970058][ T1610] hub 5-1:1.82: bad descriptor, ignoring hub [ 170.970108][ T1610] hub 5-1:1.82: probe with driver hub failed with error -5 [ 170.974794][ T1610] sierra 5-1:1.82: Sierra USB modem converter detected [ 170.992982][ T1610] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 171.017241][ T1610] usb 5-1: USB disconnect, device number 5 [ 171.362158][ T30] audit: type=1400 audit(1788014707.747:380): avc: denied { create } for pid=6574 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.425196][ T30] audit: type=1400 audit(1788014707.817:381): avc: denied { connect } for pid=6574 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.507054][ T1610] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 171.507572][ T1610] sierra 5-1:1.82: device disconnected [ 171.984538][ T30] audit: type=1400 audit(1788014708.267:382): avc: denied { setopt } for pid=6574 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.984766][ T30] audit: type=1400 audit(1788014708.357:383): avc: denied { bind } for pid=6574 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.984955][ T30] audit: type=1400 audit(1788014708.357:384): avc: denied { write } for pid=6574 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.195084][ T30] audit: type=1400 audit(1788014708.587:385): avc: denied { create } for pid=6584 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 172.249298][ T1610] usb 2-1: USB disconnect, device number 8 [ 172.398863][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 172.398900][ T30] audit: type=1400 audit(1788014708.787:390): avc: denied { prog_load } for pid=6588 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.405281][ T30] audit: type=1400 audit(1788014708.787:391): avc: denied { bpf } for pid=6588 comm="syz.1.210" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.406182][ T30] audit: type=1400 audit(1788014708.797:392): avc: denied { perfmon } for pid=6588 comm="syz.1.210" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.425467][ T30] audit: type=1400 audit(1788014708.807:393): avc: denied { prog_run } for pid=6588 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.555053][ T30] audit: type=1400 audit(1788014708.917:394): avc: denied { read write } for pid=6587 comm="syz.4.211" name="video1" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 172.555248][ T30] audit: type=1400 audit(1788014708.917:395): avc: denied { open } for pid=6587 comm="syz.4.211" path="/dev/video1" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 172.555307][ T30] audit: type=1400 audit(1788014708.937:396): avc: denied { create } for pid=6587 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.596986][ T30] audit: type=1400 audit(1788014708.977:397): avc: denied { write } for pid=6587 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.597134][ T30] audit: type=1400 audit(1788014708.977:398): avc: denied { read } for pid=6587 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.220710][ T30] audit: type=1400 audit(1788014709.607:399): avc: denied { read write } for pid=5620 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.306738][ T6596] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 174.316250][ T6596] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.214'. [ 174.895008][ T5837] block nbd0: Possible stuck request ffff8880283f0000: control (read@0,1024B). Runtime 60 seconds [ 174.895063][ T5837] block nbd0: Possible stuck request ffff8880283f01c0: control (read@1024,1024B). Runtime 60 seconds [ 174.895087][ T5837] block nbd0: Possible stuck request ffff8880283f0380: control (read@2048,2048B). Runtime 60 seconds [ 175.243998][ T6609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.217'. [ 176.047203][ T6609] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 177.505173][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 177.511369][ T30] audit: type=1400 audit(1788014713.897:425): avc: denied { write } for pid=6621 comm="syz.3.221" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.985443][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 177.998122][ T30] audit: type=1400 audit(1788014714.387:426): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 178.008012][ T30] audit: type=1400 audit(1788014714.387:427): avc: denied { mount } for pid=6625 comm="syz.1.220" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 178.009282][ T30] audit: type=1400 audit(1788014714.387:428): avc: denied { create } for pid=6625 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.010602][ T30] audit: type=1400 audit(1788014714.387:429): avc: denied { read write } for pid=6625 comm="syz.1.220" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.010982][ T30] audit: type=1400 audit(1788014714.387:430): avc: denied { open } for pid=6625 comm="syz.1.220" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.217116][ T30] audit: type=1400 audit(1788014714.607:431): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.391032][ T30] audit: type=1400 audit(1788014714.747:432): avc: denied { write } for pid=6625 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.391141][ T30] audit: type=1400 audit(1788014714.757:433): avc: denied { read } for pid=6625 comm="syz.1.220" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.391318][ T30] audit: type=1400 audit(1788014714.757:434): avc: denied { open } for pid=6625 comm="syz.1.220" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.452459][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 178.520272][ T10] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.520328][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.778907][ T6635] trusted_key: encrypted_key: master key parameter is missing [ 179.682092][ T6638] /dev/nullb0: Can't open blockdev [ 179.841834][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 181.152775][ T1000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.248717][ T5699] usb 4-1: USB disconnect, device number 11 [ 181.444224][ T1000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.481537][ T6666] mmap: syz.3.232 (6666) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 181.553744][ T1000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.702627][ T1000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.874736][ T4921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.886137][ T4921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.893843][ T4921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.903616][ T4921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.913190][ T4921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.582010][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 182.582050][ T30] audit: type=1400 audit(1788014718.977:470): avc: denied { sys_module } for pid=6673 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 182.688055][ T30] audit: type=1400 audit(1788014719.077:471): avc: denied { read } for pid=5267 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 182.741067][ T5714] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 182.754470][ T30] audit: type=1400 audit(1788014719.147:472): avc: denied { search } for pid=5267 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.763927][ T30] audit: type=1400 audit(1788014719.157:473): avc: denied { search } for pid=5267 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.763976][ T30] audit: type=1400 audit(1788014719.157:474): avc: denied { search } for pid=5267 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.764015][ T30] audit: type=1400 audit(1788014719.157:475): avc: denied { read } for pid=5267 comm="dhcpcd" name="n30" dev="tmpfs" ino=2812 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.764054][ T30] audit: type=1400 audit(1788014719.157:476): avc: denied { open } for pid=5267 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2812 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.764095][ T30] audit: type=1400 audit(1788014719.157:477): avc: denied { getattr } for pid=5267 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2812 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.918138][ T30] audit: type=1400 audit(1788014719.307:478): avc: denied { read } for pid=6664 comm="syz.3.232" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 182.941468][ T30] audit: type=1400 audit(1788014719.337:479): avc: denied { open } for pid=6664 comm="syz.3.232" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 182.955114][ T1000] bridge_slave_1: left allmulticast mode [ 182.955144][ T1000] bridge_slave_1: left promiscuous mode [ 182.955963][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.988344][ T1000] bridge_slave_0: left allmulticast mode [ 182.990708][ T1000] bridge_slave_0: left promiscuous mode [ 183.000358][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.009215][ T5714] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 183.019689][ T5714] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 183.028066][ T5714] usb 5-1: config 1 has no interface number 0 [ 183.028146][ T5714] usb 5-1: config 1 interface 82 has no altsetting 0 [ 183.045343][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.045380][ T5714] usb 5-1: Product: syz [ 183.045406][ T5714] usb 5-1: Manufacturer: syz [ 183.045425][ T5714] usb 5-1: SerialNumber: syz [ 183.753606][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.776437][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.779904][ T1000] bond0 (unregistering): Released all slaves [ 184.521164][ T52] Bluetooth: hci0: command tx timeout [ 184.677376][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 185.068927][ T5714] hub 5-1:1.82: bad descriptor, ignoring hub [ 185.068969][ T5714] hub 5-1:1.82: probe with driver hub failed with error -5 [ 185.334989][ T5714] sierra 5-1:1.82: Sierra USB modem converter detected [ 185.831201][ T5714] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 185.871476][ T5714] usb 5-1: USB disconnect, device number 6 [ 185.880653][ T5714] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 185.889967][ T5714] sierra 5-1:1.82: device disconnected [ 186.553168][ T6728] CIFS mount error: No usable UNC path provided in device string! [ 186.553168][ T6728] [ 186.553235][ T6728] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 186.782923][ T52] Bluetooth: hci0: command tx timeout [ 186.854945][ T1000] hsr_slave_0: left promiscuous mode [ 186.877180][ T1000] hsr_slave_1: left promiscuous mode [ 186.895330][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.902979][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.981083][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.989890][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.068731][ T1000] veth1_macvtap: left promiscuous mode [ 187.075246][ T1000] veth0_macvtap: left promiscuous mode [ 187.082339][ T1000] veth1_vlan: left promiscuous mode [ 187.087811][ T1000] veth0_vlan: left promiscuous mode [ 187.123363][ T6735] FAULT_INJECTION: forcing a failure. [ 187.123363][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.123403][ T6735] CPU: 1 UID: 0 PID: 6735 Comm: syz.3.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.123431][ T6735] Tainted: [L]=SOFTLOCKUP [ 187.123438][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 187.123462][ T6735] Call Trace: [ 187.123469][ T6735] [ 187.123477][ T6735] dump_stack_lvl+0x100/0x190 [ 187.123513][ T6735] should_fail_ex.cold+0x5/0xa [ 187.123542][ T6735] _copy_from_user+0x2e/0xd0 [ 187.123574][ T6735] kstrtouint_from_user+0xd6/0x1d0 [ 187.123597][ T6735] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 187.123628][ T6735] ? lock_acquire+0x1d1/0x380 [ 187.123655][ T6735] proc_fail_nth_write+0x83/0x220 [ 187.123679][ T6735] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.123712][ T6735] vfs_write+0x2aa/0x1050 [ 187.123744][ T6735] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.123767][ T6735] ? lock_acquire+0x1d1/0x380 [ 187.123787][ T6735] ? __fget_files+0x34/0x3d0 [ 187.123809][ T6735] ? __pfx_vfs_write+0x10/0x10 [ 187.123838][ T6735] ? find_held_lock+0x2b/0x80 [ 187.123865][ T6735] ? __fget_files+0x215/0x3d0 [ 187.123893][ T6735] ? __fget_files+0x21f/0x3d0 [ 187.123924][ T6735] ksys_write+0x12a/0x250 [ 187.123943][ T6735] ? __pfx_ksys_write+0x10/0x10 [ 187.123972][ T6735] do_syscall_64+0x123/0x790 [ 187.123999][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.124021][ T6735] RIP: 0033:0x7f5d8615e98e [ 187.124039][ T6735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.124058][ T6735] RSP: 002b:00007f5d87064fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.124078][ T6735] RAX: ffffffffffffffda RBX: 00007f5d870656c0 RCX: 00007f5d8615e98e [ 187.124092][ T6735] RDX: 0000000000000001 RSI: 00007f5d870650a0 RDI: 0000000000000004 [ 187.124104][ T6735] RBP: 00007f5d87065090 R08: 0000000000000000 R09: 0000000000000000 [ 187.124117][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.124130][ T6735] R13: 00007f5d86426038 R14: 00007f5d86425fa0 R15: 00007fffa0651818 [ 187.124159][ T6735] [ 188.341296][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 188.341349][ T30] audit: type=1400 audit(1788014724.727:508): avc: denied { sqpoll } for pid=6740 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 188.843974][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.844049][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.852238][ T52] Bluetooth: hci0: command tx timeout [ 189.407138][ T30] audit: type=1400 audit(1788014725.787:509): avc: denied { create } for pid=6750 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 189.427442][ T30] audit: type=1400 audit(1788014725.797:510): avc: denied { create } for pid=6750 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.427489][ T30] audit: type=1400 audit(1788014725.797:511): avc: denied { connect } for pid=6750 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.529583][ T30] audit: type=1400 audit(1788014725.917:512): avc: denied { map } for pid=6752 comm="syz.1.250" path="socket:[12158]" dev="sockfs" ino=12158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.532351][ T52] Bluetooth: hci1: Malformed Event: 0x2f [ 189.554133][ T30] audit: type=1400 audit(1788014725.917:513): avc: denied { read } for pid=6752 comm="syz.1.250" path="socket:[12158]" dev="sockfs" ino=12158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.651030][ T30] audit: type=1400 audit(1788014726.027:514): avc: denied { connect } for pid=6752 comm="syz.1.250" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.651340][ T30] audit: type=1400 audit(1788014726.037:515): avc: denied { write } for pid=6752 comm="syz.1.250" path="socket:[12159]" dev="sockfs" ino=12159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.971770][ T30] audit: type=1400 audit(1788014726.367:516): avc: denied { create } for pid=6752 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 190.001113][ T1610] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 190.159435][ T1610] usb 4-1: Using ep0 maxpacket: 32 [ 190.337430][ T30] audit: type=1400 audit(1788014726.727:517): avc: denied { mmap_zero } for pid=6750 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 190.920952][ T52] Bluetooth: hci0: command tx timeout [ 191.166225][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 191.214807][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 191.327957][ T1610] usb 4-1: unable to get BOS descriptor or descriptor too short [ 191.328005][ T1610] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 191.328724][ T1610] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 191.328754][ T1610] usb 4-1: can't read configurations, error -71 [ 192.797484][ T6772] Bluetooth: MGMT ver 1.23 [ 192.938411][ T6772] tmpfs: Unknown parameter '0x00000000000000040x0000000000000004' [ 193.335478][ T6772] lo speed is unknown, defaulting to 1000 [ 193.639389][ T6772] lo speed is unknown, defaulting to 1000 [ 193.806290][ T6772] lo speed is unknown, defaulting to 1000 [ 194.699946][ T6802] ntfs3(nullb0): Primary boot signature is not NTFS. [ 194.701138][ T6802] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 195.685087][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.685248][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.685355][ T6673] bridge_slave_0: entered allmulticast mode [ 195.686875][ T6673] bridge_slave_0: entered promiscuous mode [ 195.689559][ T6673] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.689686][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.689779][ T6673] bridge_slave_1: entered allmulticast mode [ 195.691190][ T6673] bridge_slave_1: entered promiscuous mode [ 195.714682][ T6673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.717237][ T6673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.741773][ T6673] team0: Port device team_slave_0 added [ 195.747382][ T6673] team0: Port device team_slave_1 added [ 195.769924][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.769938][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.769962][ T6673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.772869][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.772882][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.772906][ T6673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.880480][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 195.880527][ T30] audit: type=1400 audit(1788014732.277:527): avc: denied { write } for pid=6771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.973416][ T30] audit: type=1400 audit(1788014732.367:528): avc: denied { create } for pid=6811 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.031548][ T30] audit: type=1400 audit(1788014732.427:529): avc: denied { bind } for pid=6811 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.042286][ T6793] Bluetooth: hci1: command 0x0406 tx timeout [ 196.042322][ T6793] Bluetooth: hci2: command 0x0406 tx timeout [ 196.045277][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 196.046021][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 196.077838][ T30] audit: type=1400 audit(1788014732.457:530): avc: denied { listen } for pid=6811 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.092980][ T6673] hsr_slave_0: entered promiscuous mode [ 196.102237][ T6673] hsr_slave_1: entered promiscuous mode [ 196.125056][ T6673] debugfs: 'hsr0' already exists in 'hsr' [ 196.125090][ T6673] Cannot create hsr debugfs directory [ 196.185264][ T30] audit: type=1400 audit(1788014732.577:531): avc: denied { write } for pid=6813 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.302670][ T30] audit: type=1400 audit(1788014732.697:532): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 196.373194][ T30] audit: type=1400 audit(1788014732.767:533): avc: denied { override_creds } for pid=6819 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 196.462492][ T30] audit: type=1400 audit(1788014732.857:534): avc: denied { write } for pid=6811 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.462620][ T6772] infiniband syz1: set active [ 196.462637][ T6772] infiniband syz1: added lo [ 196.507026][ T1610] lo speed is unknown, defaulting to 1000 [ 196.526309][ T30] audit: type=1400 audit(1788014732.917:535): avc: denied { read } for pid=6796 comm="syz.3.258" name="trace_pipe_raw" dev="tracefs" ino=4131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 196.526510][ T30] audit: type=1400 audit(1788014732.917:536): avc: denied { open } for pid=6796 comm="syz.3.258" path="/55/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 196.584586][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 196.616151][ T6772] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 196.616209][ T6772] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 196.616269][ T6772] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 196.732978][ T6772] RDS/IB: syz1: added [ 196.739493][ T6772] smc: adding ib device syz1 with port count 1 [ 196.746037][ T6772] smc: ib device syz1 port 1 has no pnetid [ 196.990961][ T1610] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.146119][ T1610] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 0.00 [ 197.148613][ T1610] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.148656][ T1610] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 197.148692][ T1610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.198146][ T6812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 197.728899][ T5714] lo speed is unknown, defaulting to 1000 [ 197.770671][ T6772] lo speed is unknown, defaulting to 1000 [ 198.138187][ T6673] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 198.175157][ T6673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.183242][ T6673] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.214597][ T6673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.226574][ T6673] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.254878][ T6673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.278373][ T6673] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.323143][ T6673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.540935][ T6772] lo speed is unknown, defaulting to 1000 [ 198.556745][ T6851] netlink: 'syz.3.263': attribute type 39 has an invalid length. [ 198.774650][ T6673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.833213][ T6673] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.849637][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.849732][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.876830][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.876942][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.971414][ T6673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.009024][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 199.062044][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.232431][ T25] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 199.233391][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.233430][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.300237][ T25] usb 5-1: USB disconnect, device number 7 [ 199.555715][ T6772] lo speed is unknown, defaulting to 1000 [ 201.615533][ T6673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.650958][ T25] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 201.668686][ T6772] lo speed is unknown, defaulting to 1000 [ 201.718094][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 201.718145][ T30] audit: type=1400 audit(1788014738.107:546): avc: denied { write } for pid=6864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.801800][ T25] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 201.802956][ T25] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 201.802997][ T25] usb 5-1: config 1 has no interface number 0 [ 201.803027][ T25] usb 5-1: config 1 interface 82 has no altsetting 0 [ 201.808803][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.808829][ T25] usb 5-1: Product: syz [ 201.808844][ T25] usb 5-1: Manufacturer: syz [ 201.808865][ T25] usb 5-1: SerialNumber: syz [ 201.883032][ T5707] usb 1-1: USB disconnect, device number 10 [ 202.145305][ T30] audit: type=1400 audit(1788014738.537:547): avc: denied { write } for pid=6894 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.038762][ T30] audit: type=1400 audit(1788014739.427:548): avc: denied { create } for pid=6897 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 203.481585][ T30] audit: type=1400 audit(1788014739.587:549): avc: denied { execute } for pid=6897 comm="syz.0.268" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 203.481637][ T30] audit: type=1400 audit(1788014739.697:550): avc: denied { create } for pid=6897 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.481677][ T30] audit: type=1400 audit(1788014739.797:551): avc: denied { bind } for pid=6897 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.481813][ T30] audit: type=1400 audit(1788014739.867:552): avc: denied { write } for pid=6897 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.481936][ T30] audit: type=1400 audit(1788014739.867:553): avc: denied { read } for pid=6897 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 203.482116][ T30] audit: type=1400 audit(1788014739.867:554): avc: denied { remount } for pid=6897 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.891799][ T25] hub 5-1:1.82: bad descriptor, ignoring hub [ 203.897974][ T25] hub 5-1:1.82: probe with driver hub failed with error -5 [ 203.924007][ T25] sierra 5-1:1.82: Sierra USB modem converter detected [ 204.058149][ T25] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 204.125055][ T25] usb 5-1: USB disconnect, device number 8 [ 204.141801][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 204.167669][ T30] audit: type=1400 audit(1788014740.557:555): avc: denied { write } for pid=6896 comm="syz.3.267" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 204.197526][ T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 204.209215][ T25] sierra 5-1:1.82: device disconnected [ 205.177113][ T6673] veth0_vlan: entered promiscuous mode [ 205.243450][ T6673] veth1_vlan: entered promiscuous mode [ 205.278683][ T6772] lo speed is unknown, defaulting to 1000 [ 205.357965][ T6673] veth0_macvtap: entered promiscuous mode [ 205.370451][ T6673] veth1_macvtap: entered promiscuous mode [ 205.413352][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.427338][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.485878][ T4935] block nbd0: Possible stuck request ffff8880283f0000: control (read@0,1024B). Runtime 90 seconds [ 205.488330][ T6448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.488447][ T6448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.488482][ T6448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.488514][ T6448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.507724][ T4935] block nbd0: Possible stuck request ffff8880283f01c0: control (read@1024,1024B). Runtime 90 seconds [ 205.507757][ T4935] block nbd0: Possible stuck request ffff8880283f0380: control (read@2048,2048B). Runtime 90 seconds [ 205.530921][ T193] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 205.683307][ T193] usb 4-1: Using ep0 maxpacket: 32 [ 205.684062][ T193] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 205.686400][ T193] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 205.686425][ T193] usb 4-1: config 0 has no interface number 0 [ 205.686460][ T193] usb 4-1: config 0 interface 12 has no altsetting 0 [ 205.692461][ T193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.692485][ T193] usb 4-1: Product: syz [ 205.692500][ T193] usb 4-1: Manufacturer: syz [ 205.692516][ T193] usb 4-1: SerialNumber: syz [ 205.706750][ T193] usb 4-1: config 0 descriptor?? [ 205.799593][ T6448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.799628][ T6448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.997794][ T6448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.997817][ T6448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.228939][ T6929] netlink: 52 bytes leftover after parsing attributes in process `syz.1.273'. [ 206.254337][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.254742][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.310737][ T6929] netlink: 52 bytes leftover after parsing attributes in process `syz.1.273'. [ 206.450832][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 207.670830][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 207.676429][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 207.734791][ T25] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.745774][ T25] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.745805][ T25] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.770803][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.770857][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.799762][ T25] usb 1-1: config 0 descriptor?? [ 208.000233][ T6915] SELinux: invalid class [ 208.000555][ T6915] SELinux: failed to load policy [ 208.002342][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 208.002358][ T30] audit: type=1400 audit(1788014744.387:570): avc: denied { load_policy } for pid=6913 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 208.062165][ T30] audit: type=1400 audit(1788014744.457:571): avc: denied { name_bind } for pid=6913 comm="syz.3.271" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 208.073200][ T193] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 208.073253][ T193] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 208.073273][ T193] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 208.073376][ T193] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 208.087255][ T193] usb 4-1: USB disconnect, device number 14 [ 208.312761][ T25] hid_parser_main: 14 callbacks suppressed [ 208.313867][ T30] audit: type=1400 audit(1788014744.707:572): avc: denied { create } for pid=6949 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.315285][ T30] audit: type=1400 audit(1788014744.707:573): avc: denied { ioctl } for pid=6949 comm="syz.4.280" path="socket:[13909]" dev="sockfs" ino=13909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.316366][ T30] audit: type=1400 audit(1788014744.707:574): avc: denied { create } for pid=6949 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.385956][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.393567][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.401109][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.408557][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.408673][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.408761][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.446457][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.446556][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.453863][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.453972][ T25] logitech 0003:046D:C50C.0002: unknown main item tag 0x0 [ 208.776454][ T25] logitech 0003:046D:C50C.0002: hidraw0: USB HID v0.06 Device [HID 046d:c50c] on usb-dummy_hcd.0-1/input0 [ 208.944696][ T5791] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 209.291641][ T5791] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 209.306432][ T6950] lo speed is unknown, defaulting to 1000 [ 209.306469][ T6950] lo speed is unknown, defaulting to 1000 [ 209.318900][ T5791] usb 6-1: config 1 has an invalid interface number: 82 but max is 0 [ 209.318927][ T5791] usb 6-1: config 1 has no interface number 0 [ 209.318956][ T5791] usb 6-1: config 1 interface 82 has no altsetting 0 [ 209.342087][ T6950] lo speed is unknown, defaulting to 1000 [ 209.342625][ T6950] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 209.342645][ T6950] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 209.342670][ T6950] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 209.388105][ T6950] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 209.644338][ T6950] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 209.744930][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.745022][ T5791] usb 6-1: Product: syz [ 209.745039][ T5791] usb 6-1: Manufacturer: syz [ 209.745053][ T5791] usb 6-1: SerialNumber: syz [ 209.913693][ T193] usb 1-1: USB disconnect, device number 11 [ 209.973110][ T6950] lo speed is unknown, defaulting to 1000 [ 210.003891][ T6950] lo speed is unknown, defaulting to 1000 [ 210.012296][ T6950] lo speed is unknown, defaulting to 1000 [ 210.045507][ T6950] lo speed is unknown, defaulting to 1000 [ 210.056065][ T6950] lo speed is unknown, defaulting to 1000 [ 210.068707][ T6952] smc: removing ib device syz1 [ 210.097271][ T6952] smbdirect: ib_dev[syz1] removed [ 210.866900][ T6952] ------------[ cut here ]------------ [ 210.866925][ T6952] !xa_empty(&pool->xa) [ 210.866936][ T6952] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.4.280/6952 [ 210.887707][ T6952] Modules linked in: [ 210.892804][ T6952] CPU: 0 UID: 0 PID: 6952 Comm: syz.4.280 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.904166][ T6952] Tainted: [L]=SOFTLOCKUP [ 210.908476][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 210.919264][ T6952] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 210.924937][ T6952] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 c6 ce 18 f9 5b c3 cc cc cc cc e8 bb ce 18 f9 90 <0f> 0b 90 e8 b2 ce 18 f9 5b c3 cc cc cc cc e8 97 e0 8b f9 eb d0 0f [ 210.944561][ T6952] RSP: 0018:ffffc900057e7190 EFLAGS: 00010246 [ 210.950617][ T6952] RAX: 0000000000080000 RBX: ffff8880461a93d8 RCX: ffffc9000fba9000 [ 210.959377][ T6952] RDX: 0000000000080000 RSI: ffffffff88f30875 RDI: ffff8880461a9458 [ 210.968075][ T6952] RBP: ffffffff88f16010 R08: 0000000000000005 R09: 0000000000000001 [ 210.976136][ T6952] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880461a86d0 [ 210.984140][ T6952] R13: ffff8880461a7fe0 R14: ffff8880461a7fe0 R15: ffff8880461a9138 [ 210.992124][ T6952] FS: 00007f439b46f6c0(0000) GS:ffff888123b64000(0000) knlGS:0000000000000000 [ 211.001084][ T6952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.007646][ T6952] CR2: 0000200000009000 CR3: 000000002dacd000 CR4: 00000000003526f0 [ 211.015633][ T6952] Call Trace: [ 211.018894][ T6952] [ 211.021825][ T6952] rxe_dealloc+0x25/0xc0 [ 211.026053][ T6952] ib_dealloc_device+0x49/0x230 [ 211.030950][ T6952] __ib_unregister_device+0x396/0x480 [ 211.036324][ T6952] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 211.042147][ T6952] ib_unregister_device_and_put+0x5a/0x80 [ 211.047855][ T6952] nldev_dellink+0x308/0x440 [ 211.052472][ T6952] ? __pfx_nldev_dellink+0x10/0x10 [ 211.058371][ T6952] ? rcu_is_watching+0x13/0xc0 [ 211.063637][ T6952] ? cap_capable+0x107/0x430 [ 211.068237][ T6952] ? bpf_lsm_capable+0x9/0x10 [ 211.072943][ T6952] ? security_capable+0x80/0x260 [ 211.077889][ T6952] ? ns_capable+0xd2/0xf0 [ 211.082275][ T6952] ? __pfx_nldev_dellink+0x10/0x10 [ 211.087389][ T6952] rdma_nl_rcv_msg+0x392/0x6f0 [ 211.092180][ T6952] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 211.097459][ T6952] ? __lock_acquire+0x4c5/0x1ec0 [ 211.102431][ T6952] ? __netlink_lookup+0xa9/0x900 [ 211.107360][ T6952] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 211.113799][ T6952] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 211.120743][ T6952] ? netlink_deliver_tap+0x1ae/0xcc0 [ 211.126072][ T6952] netlink_unicast+0x585/0x850 [ 211.130870][ T6952] ? __pfx_netlink_unicast+0x10/0x10 [ 211.136155][ T6952] ? __pfx_sock_has_perm+0x10/0x10 [ 211.141304][ T6952] netlink_sendmsg+0x8b0/0xda0 [ 211.146076][ T6952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.151385][ T6952] ? selinux_socket_sendmsg+0x198/0x2f0 [ 211.156938][ T6952] ____sys_sendmsg+0xa4d/0xbe0 [ 211.162490][ T6952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.167769][ T6952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.173612][ T6952] ___sys_sendmsg+0x190/0x1e0 [ 211.178295][ T6952] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.183498][ T6952] ? futex_wait+0x11e/0x370 [ 211.188015][ T6952] ? find_held_lock+0x2b/0x80 [ 211.192741][ T6952] __sys_sendmsg+0x160/0x210 [ 211.197325][ T6952] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.202476][ T6952] do_syscall_64+0x123/0x790 [ 211.207060][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.212959][ T6952] RIP: 0033:0x7f439a59e159 [ 211.217371][ T6952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.237030][ T6952] RSP: 002b:00007f439b46f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.246050][ T6952] RAX: ffffffffffffffda RBX: 00007f439a826090 RCX: 00007f439a59e159 [ 211.254090][ T6952] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000e [ 211.263117][ T6952] RBP: 00007f439a635024 R08: 0000000000000000 R09: 0000000000000000 [ 211.271700][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.279656][ T6952] R13: 00007f439a826128 R14: 00007f439a826090 R15: 00007ffd69ad7ca8 [ 211.287679][ T6952] [ 211.290696][ T6952] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 211.297967][ T6952] CPU: 0 UID: 0 PID: 6952 Comm: syz.4.280 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.308706][ T6952] Tainted: [L]=SOFTLOCKUP [ 211.313014][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 211.323051][ T6952] Call Trace: [ 211.326340][ T6952] [ 211.329265][ T6952] dump_stack_lvl+0x100/0x190 [ 211.333956][ T6952] vpanic+0x553/0x970 [ 211.337937][ T6952] ? __pfx_vpanic+0x10/0x10 [ 211.342432][ T6952] panic+0xd1/0xe0 [ 211.346157][ T6952] ? __pfx_panic+0x10/0x10 [ 211.350571][ T6952] check_panic_on_warn.cold+0x19/0x34 [ 211.355923][ T6952] ? rxe_pool_cleanup+0x46/0x60 [ 211.360764][ T6952] __warn.cold+0x191/0x318 [ 211.365182][ T6952] __report_bug+0x30f/0x440 [ 211.369669][ T6952] ? rxe_pool_cleanup+0x46/0x60 [ 211.374524][ T6952] ? __pfx___report_bug+0x10/0x10 [ 211.379532][ T6952] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 211.385339][ T6952] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 211.391137][ T6952] ? __flush_workqueue+0x426/0x1200 [ 211.396351][ T6952] ? rxe_pool_cleanup+0x46/0x60 [ 211.401204][ T6952] report_bug+0xb3/0x220 [ 211.405452][ T6952] ? rxe_pool_cleanup+0x46/0x60 [ 211.410307][ T6952] handle_bug+0x16a/0x2a0 [ 211.414648][ T6952] exc_invalid_op+0x17/0x50 [ 211.419162][ T6952] asm_exc_invalid_op+0x1a/0x20 [ 211.424019][ T6952] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 211.429485][ T6952] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 c6 ce 18 f9 5b c3 cc cc cc cc e8 bb ce 18 f9 90 <0f> 0b 90 e8 b2 ce 18 f9 5b c3 cc cc cc cc e8 97 e0 8b f9 eb d0 0f [ 211.449087][ T6952] RSP: 0018:ffffc900057e7190 EFLAGS: 00010246 [ 211.455158][ T6952] RAX: 0000000000080000 RBX: ffff8880461a93d8 RCX: ffffc9000fba9000 [ 211.463129][ T6952] RDX: 0000000000080000 RSI: ffffffff88f30875 RDI: ffff8880461a9458 [ 211.471092][ T6952] RBP: ffffffff88f16010 R08: 0000000000000005 R09: 0000000000000001 [ 211.479060][ T6952] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880461a86d0 [ 211.487026][ T6952] R13: ffff8880461a7fe0 R14: ffff8880461a7fe0 R15: ffff8880461a9138 [ 211.494995][ T6952] ? __pfx_rxe_dealloc+0x10/0x10 [ 211.499935][ T6952] ? rxe_pool_cleanup+0x45/0x60 [ 211.504783][ T6952] rxe_dealloc+0x25/0xc0 [ 211.509015][ T6952] ib_dealloc_device+0x49/0x230 [ 211.513868][ T6952] __ib_unregister_device+0x396/0x480 [ 211.519249][ T6952] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 211.525053][ T6952] ib_unregister_device_and_put+0x5a/0x80 [ 211.530775][ T6952] nldev_dellink+0x308/0x440 [ 211.535365][ T6952] ? __pfx_nldev_dellink+0x10/0x10 [ 211.540549][ T6952] ? rcu_is_watching+0x13/0xc0 [ 211.545305][ T6952] ? cap_capable+0x107/0x430 [ 211.549892][ T6952] ? bpf_lsm_capable+0x9/0x10 [ 211.554566][ T6952] ? security_capable+0x80/0x260 [ 211.559499][ T6952] ? ns_capable+0xd2/0xf0 [ 211.563815][ T6952] ? __pfx_nldev_dellink+0x10/0x10 [ 211.568924][ T6952] rdma_nl_rcv_msg+0x392/0x6f0 [ 211.573686][ T6952] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 211.578968][ T6952] ? __lock_acquire+0x4c5/0x1ec0 [ 211.583898][ T6952] ? __netlink_lookup+0xa9/0x900 [ 211.588836][ T6952] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 211.595269][ T6952] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 211.602211][ T6952] ? netlink_deliver_tap+0x1ae/0xcc0 [ 211.607493][ T6952] netlink_unicast+0x585/0x850 [ 211.612255][ T6952] ? __pfx_netlink_unicast+0x10/0x10 [ 211.617534][ T6952] ? __pfx_sock_has_perm+0x10/0x10 [ 211.622643][ T6952] netlink_sendmsg+0x8b0/0xda0 [ 211.627411][ T6952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.632695][ T6952] ? selinux_socket_sendmsg+0x198/0x2f0 [ 211.638241][ T6952] ____sys_sendmsg+0xa4d/0xbe0 [ 211.642992][ T6952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.648276][ T6952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.653565][ T6952] ___sys_sendmsg+0x190/0x1e0 [ 211.658236][ T6952] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.663428][ T6952] ? futex_wait+0x11e/0x370 [ 211.667938][ T6952] ? find_held_lock+0x2b/0x80 [ 211.672625][ T6952] __sys_sendmsg+0x160/0x210 [ 211.677215][ T6952] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.682336][ T6952] do_syscall_64+0x123/0x790 [ 211.686917][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.692796][ T6952] RIP: 0033:0x7f439a59e159 [ 211.697195][ T6952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.716788][ T6952] RSP: 002b:00007f439b46f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.725188][ T6952] RAX: ffffffffffffffda RBX: 00007f439a826090 RCX: 00007f439a59e159 [ 211.733144][ T6952] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000e [ 211.741101][ T6952] RBP: 00007f439a635024 R08: 0000000000000000 R09: 0000000000000000 [ 211.749063][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.757020][ T6952] R13: 00007f439a826128 R14: 00007f439a826090 R15: 00007ffd69ad7ca8 [ 211.764992][ T6952] [ 211.768208][ T6952] Kernel Offset: disabled [ 211.772516][ T6952] Rebooting in 86400 seconds..