last executing test programs: 2m27.383709375s ago: executing program 3 (id=95): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x40000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) sendto$inet(r0, &(0x7f0000000200)="abfc97b628286660a227c510c24d482396a7406c896b34a3d63a55b8c845901c441dd121c1996ec315e6687bb600750f27a4ae4528975171b2b6c2b4409dc9fe", 0x40, 0x4c841, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x2ce, 0x0, 0x4, r3, 0x11}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x144) fcntl$setlease(r5, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x4, 0x6, 0x49, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', r6, 0x2f, 0x8, 0x9, 0x100, 0x78, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x700, 0x6, 0x6}}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000", 0x37}, {&(0x7f0000000140)="e8c0a85cd3351f43a118767a631e20d8616bd56dbfbd924835d93da09483316120e9293466", 0x25}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m26.772841053s ago: executing program 3 (id=98): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$alg(0x26, 0x5, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x4000800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f0000000580)) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) 2m26.104574759s ago: executing program 3 (id=99): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) gettimeofday(0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9) 2m25.79492306s ago: executing program 3 (id=104): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000280)=0xd) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x40) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x639) readv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/162, 0xa2}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2004c084}, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100004400128009000100766c616e0000000034000280280003800c00010009000000000000000c000100f9ffffff0b000000080001"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 2m21.440419905s ago: executing program 3 (id=108): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x8000) ioctl$TIOCSTI(r0, 0x5412, 0xffffffffffffffff) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x17, 0x2, 0x200, &(0x7f0000000580)="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"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r3, 0x0) openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x1, 0x20}, 0x18) 2m20.595924567s ago: executing program 3 (id=111): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYBLOB="c88845e7e05ae5ad00ff000000000000", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES64], 0x1c}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x82, 0x4) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="eee32158", 0xfffffffffffffdb4, 0x800, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) (async) r2 = io_uring_setup(0x585f, &(0x7f0000000440)={0x0, 0x2c28, 0x1, 0x0, 0x10000000}) io_uring_enter(r2, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f", @ANYRES32=r0], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001003984000000000018000095a2bc0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="13c66278a1bfb6bdbe8c4a9de5865fc6b03fca38557f79d62e97c874f71aec07d416cf55be00346623d5418a6dca4c723b4f292418830c685c72bb6aa1e42b8de4cb1122af8cd7a6a309efc6af524692524ec728cfb31c304fa33fa61ad6c9", @ANYRES32=r3], 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 2m20.306472573s ago: executing program 32 (id=111): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYBLOB="c88845e7e05ae5ad00ff000000000000", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES64], 0x1c}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x82, 0x4) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="eee32158", 0xfffffffffffffdb4, 0x800, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) (async) r2 = io_uring_setup(0x585f, &(0x7f0000000440)={0x0, 0x2c28, 0x1, 0x0, 0x10000000}) io_uring_enter(r2, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f", @ANYRES32=r0], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001003984000000000018000095a2bc0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="13c66278a1bfb6bdbe8c4a9de5865fc6b03fca38557f79d62e97c874f71aec07d416cf55be00346623d5418a6dca4c723b4f292418830c685c72bb6aa1e42b8de4cb1122af8cd7a6a309efc6af524692524ec728cfb31c304fa33fa61ad6c9", @ANYRES32=r3], 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 14.719316405s ago: executing program 4 (id=465): r0 = socket$netlink(0x10, 0x3, 0xf) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x1882}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x800) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 11.5984229s ago: executing program 4 (id=476): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@mcast2}, 0x14) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) r2 = getpid() r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x21c800, 0x4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) pwritev(r4, &(0x7f0000001400)=[{&(0x7f0000000180)="c3f1a0e4d8389b4e25beb11d8e7bb59f7c7353c47fb5bae996ae26dca796d8c6a65cbfcde0c41322ae7116a17b544025a5350fa5b1ca", 0x36}, {&(0x7f00000001c0)="2afae17159c72248a2917d3c86fe9cba2fa95edb93a9cfb73ca5954a1e67313f6a3bb8051983ed217c8e74211100b74fbea62c7c5bf18ff8eab153e491fd989283084fb2505890c65c29157e1b4f679660193be38b7bd70f8862db9a07f1bcb6223fa157d12a6dff2e833ca4607f91478d663bbc603b0a4cd96e3eaa8aa52649c026bf3b06aad46c1c787f5227c2bfdfba537874bf6dd5821a586a0a37ac77b95037b4129ceb4b787f6e88b973740fadb47aa1761db672191e720c84033c2c40ba8751ad2c11f855da0473ef333589df188b598e11159a2040e5412bf3883c94e73090fe4f84", 0xe6}, {&(0x7f00000002c0)="58db24c1c705f06524900c0d59201ced484d299b0d2a071815961882a3ad5ccee5a55f88da590493a3", 0x29}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="30ea60f6e184b00f21818f951ee32555b0533a31ccad62365f3c6b17bef9b10dd34fe6b1d030b0e562fae3dc1adc13d6cda79a0fc769a12445cf49b728acd1e6739ef2627e1e21d7571f34b4e9634e226a4644f7d6c4e0b2933d09cd5094ed4da6e27656dee56970dfa434fe67b74e426079bb2341aed8a48008bc12a27ca9ee0cda89e7b583d1a902edfcf88681b20a46d50ee68ec2bc3a1e47c35ff350b422f7a5633554459de65ea9af6cfe85cdd9888c84bfb20153129e9272e6ba023f1756211d452f70470a3159f716663570310d976673877665f4562fafa614b689c40a36f0ffdda29fe1", 0xe8}], 0x5, 0xd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x3, &(0x7f0000001480)) sched_setaffinity(r2, 0x8, &(0x7f00000014c0)=0x6) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001500), 0x20002, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001540)) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000001580)={0x81, 0x0, 0x2}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001640), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001c40)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001780)={0x460, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29eef754}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x82efb47}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b91152d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0382b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75bf4eb5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4af5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x659920a1}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x130b5ead}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20ed83b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15afb036}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a4fdd90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56c71651}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x705b4e69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4298f23e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4352680f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b0adb49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ab55f8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a6e6f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x410a2169}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a028034}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3838ef4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f3b521e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x100, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70842003}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3213}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6678}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3503}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3db9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ba2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30006a7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x224ebf}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8205}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf62}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32647085}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd326}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb215}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66efaec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68a0d7fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57eba9af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd526283}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32e965c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x551784c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3c6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39329d86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x390d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5642}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61eeed03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x642d80f4}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xfc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9f0cddd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e8f59f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x632b164}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c28c60f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd50a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8ab}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d00ce4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1772}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21c64306}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7044c695}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d17}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76d87d4d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c92fecc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7837e404}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b37}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5081e4ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76522e1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a197840}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3680decc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b62}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71f4ca2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5045}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36475b4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fd7b487}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7109e310}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b64c055}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb0030a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31724c73}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b8fa96d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458ae270}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ffb084c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xc2dc6696a56ec2e6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x2404c010}, 0x400a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001c80)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r8, 0x0, 0x4004) syz_open_dev$MSR(&(0x7f0000001cc0), 0x4, 0x0) r9 = socket$netlink(0x10, 0x3, 0x5) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d40), r0) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000001f00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x138, r10, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x18}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x30) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r11, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x6d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20044094}, 0x20004001) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002080)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file0\x00'}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r9) sendmsg$ETHTOOL_MSG_EEE_GET(r13, &(0x7f0000002600)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0xb4, r14, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 11.454281207s ago: executing program 5 (id=477): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 9.954389957s ago: executing program 4 (id=481): r0 = syz_io_uring_setup(0x25, &(0x7f00000000c0)={0x0, 0x219a, 0x80, 0x8001, 0x143}, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x3, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xffed}}}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x9, r0, 0x3, {0x9, 0x7}}, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) clock_settime(0x2, 0x0) getpid() r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690100000109021b00010000000009040000010e01000009058103"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0xc3, 0x0, 0x1}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.923697616s ago: executing program 2 (id=482): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000200)={0x0, 0x3, 0x2, 0x1, 0xb}) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20000805}, 0x20040010) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000000)=""/18) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0xc0049364, &(0x7f0000000180)) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) syz_usb_connect$uac1(0x0, 0x7b, &(0x7f0000000800)=ANY=[@ANYBLOB="1201500200000040cc1711104000010203010902690003010700000904000000010100000a240104000a0002"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 8.837511545s ago: executing program 5 (id=485): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0xfffffff1, {0x2, 0x4e22, @multicast1}}, 0x24) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) fchown(r0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00090027bd7000b805f33b0b"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 7.892200518s ago: executing program 5 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {}, {0x4, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x88a}, 0x28) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x6) statx(r6, 0x0, 0x1000, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mlock(&(0x7f0000080000/0xf000)=nil, 0xf000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4fd201bf827546cd, 0x0) 7.771569993s ago: executing program 2 (id=488): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) prlimit64(r1, 0x0, &(0x7f0000000280)={0x1ff, 0x8}, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080), 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x101141, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008855) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0xc, 0x0, &(0x7f0000000340)) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000000040)}, {&(0x7f00000003c0)="3700000370fcfbdb2b9780abb4ef73a5f9b5d8020024dd2a77b199d507cb276c9610acce6a789500a6ee98f846ee8b24f7543169a48143d1100700511504a4709b5ec69c1d593a80b5c9", 0x4a}], 0x2) getrlimit(0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4e4, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4040850) 7.692050533s ago: executing program 1 (id=489): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfa85, 0xe2182) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f0000000040), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_open_procfs$userns(r4, &(0x7f00000000c0)) r8 = socket(0xa, 0x3, 0x85) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x8936, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000180)) read$nci(r3, &(0x7f0000000240)=""/72, 0x48) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb77, 0x1011, 0x0, 0xa, 0x9, 0x3, 0xa4de36948e08189d}}) 6.711509168s ago: executing program 0 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x18, 0x23, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x2804}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x72bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_NH_ID={0x8, 0x1e, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="030707000000000000004d9b0104eeba65fd8a41e1badcbc60ac9b637fb377bcd77c007a22db6ba6632fe6fb21ca528928d5b2745b"], 0xc8) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) 6.652197402s ago: executing program 1 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x5827, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0xa, 0x0, 0xffffffffffffffe8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x1000000, 0x80c, 0x3, 0x1c, 0x7, 0x0, 0x10, 0x6, 0xe9, 0x9, 0x9, 0x4, 0x6}, {0x8, 0xcd5a, 0xa, 0x97, 0xd, 0xf2, 0x13, 0x8, 0x7, 0x2, 0x44, 0x6, 0x100003fffffffffd}, {0x7fffffff, 0x18, 0x5, 0xff, 0x2, 0x9, 0x8, 0xf8, 0x5, 0x8, 0x6, 0x3}], 0x800000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xd) 6.579956404s ago: executing program 4 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0xfffffffc, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x6, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x7, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x3, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0xd728, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x18, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x8200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x7, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x6, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x8000, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$input_event(r7, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x3, 0x1000000, 0xffffffffffffff7a, 0x3ff, 0x7fb, {0x4000005, 0x9, 0xfffffffffffffff8, 0xfe2b260, 0x8, 0x7ffffffffffe, 0x2, 0x4, 0x3, 0x8000, 0x7, r3, 0x0, 0x1, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000) 6.565557139s ago: executing program 0 (id=493): r0 = socket(0x26, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000040)=0x1fa, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c045}, 0x4040800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000100)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf252600000008000300", @ANYRES32=r4, @ANYBLOB="0d0000080035723e0059b3760bc758904283ede25cd82eeb00000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48081) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x80000002) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000000740)={0x2020}, 0x118e) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000004c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x802, 0xf83, 0x6}, 0x1c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x4800002d, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) r12 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000000440)={r12, &(0x7f0000000280)='\\:,\')\\\xc3(\x7f\x00', 0x400, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x9]}, {0x4f6, 0x5, 0x4, 0x400}}, 0xff, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x5}) 6.53039288s ago: executing program 2 (id=494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffff"], 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100003}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x200}, 0x10}, 0x94) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2d, 0xfffffffd}, 0xc) connect$qrtr(r1, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1c7d, "0300005627de1100a3250300541886d5ff4144b0f26a07219808229ad9000100"}) epoll_create1(0x0) close(0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x1, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xffff}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}}}}, 0xc0}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 5.422010122s ago: executing program 4 (id=495): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.487286633s ago: executing program 1 (id=496): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000cdb000/0x2000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x1269, &(0x7f0000001080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) mq_open(&(0x7f00005a1ffb)='G\x00h8\x00', 0x42, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000340)) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}, 0x800) r6 = openat$kvm(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) 4.419323521s ago: executing program 2 (id=497): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54000000020601020000000000000000000000000c000780080012400006000010000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a3100000000050001000700000054f3c3903c337e01f43d1689c8ca107a99362482b5c1d8f947deb6627465a2ccb0fa1f5d447fad115fcf7a10d547d81b4b54807ba94fd0d1025f4516f7386d09a36a97214cc81916b8ea51252460bf41a7a6ac09b679a51fb6444e1c70a824870c73920c0dc2bf1d41b6f91c95595cfbd4222bc82c958379e75326b8211d0702d49638fa124536883da8a5f823af61e5cff116af0cefa3e4c925b0bc7f6ac147a75a952033095a3070673afd30661c"], 0x54}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) 3.406811678s ago: executing program 1 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0800}, 0xc050) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc1485544, &(0x7f0000000000)=0x5) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001c80), 0x0, 0x40012002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.379171448s ago: executing program 2 (id=499): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x228, 0x1398, 0x1398, 0x228, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x6, "276ffe5afe5447da771c495aa9d200"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [0x0, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xff000000, 0xff0000ff, 0xff000000], 'macvtap0\x00', 'macvlan1\x00', {0xff}, {}, 0x33, 0x5, 0x7, 0x54}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000200)="66b816000f00d0135d413e2e0f0666baf80cb8b64bc18cef66bafc0c66b8000066ef0f01d1f30f1eed660f2d4d920f01c8f029699e66baf80cb85eb8e08fef66bafc0c66b8000066ef", 0x49}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="18100000cbb6cae90000963f000000e600001811", @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000a643037b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.238807098s ago: executing program 0 (id=500): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xfd14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) close(r0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="499a00000000000000000000000013dc05000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000200"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) copy_file_range(0xffffffffffffffff, &(0x7f00000006c0)=0x927b, r3, 0x0, 0xb3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r7, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x20) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xf, 0x7, 0x2, 0x0, 0x19}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r9, @ANYBLOB="02002cbdb6f8e7cbb3757000fedbdf250c0000004c0001801400020073797a6b616c6c6572310000000000000800030001000000140002007866726d300000000000000000000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2.887136172s ago: executing program 4 (id=501): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34414e40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000100)='%pB \x00'}, 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x10000, 0x8822d55593a2179}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) 2.83527757s ago: executing program 5 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {}, {0x4, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x88a}, 0x28) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x6) statx(r6, 0x0, 0x1000, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mlock(&(0x7f0000080000/0xf000)=nil, 0xf000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4fd201bf827546cd, 0x0) 2.646871176s ago: executing program 1 (id=503): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0x4dd5, 0x800, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000ff0fe0000900000000000000471d2226c20f0c23ae28eb864f9c7099518c9b82f68f91621efda11f4130aad6baee266322021e10814232b98f64b79dac43eb53f041849ed5222b0c2c08f2abc7002a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0x9, 0x7, 0x7ff, 0xfffffffffffffffa, 0x0, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000180), 0x1003) ftruncate(r1, 0x2007ffc) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000380)={0x30000, 0x8000000000000001, 0xfffffffeffffffff, 0xfffffff4, 0x5}) eventfd2(0xeffffffb, 0x80800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) 2.628844778s ago: executing program 0 (id=504): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) prlimit64(r1, 0x0, &(0x7f0000000280)={0x1ff, 0x8}, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080), 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x101141, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008855) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0xc, 0x0, &(0x7f0000000340)) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f0000000040)}, {&(0x7f00000003c0)="3700000370fcfbdb2b9780abb4ef73a5f9b5d8020024dd2a77b199d507cb276c9610acce6a789500a6ee98f846ee8b24f7543169a48143d1100700511504a4709b5ec69c1d593a80b5c9", 0x4a}], 0x2) getrlimit(0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4e4, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4040850) 1.905072641s ago: executing program 1 (id=505): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) fanotify_init(0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000004540)={0x9, 0xc, 0x3, 0x113, 0x5, 0x2, 0x2, 0xd4}, 0x0, 0x0, &(0x7f0000004600), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="1c35f22fd8d21b669f1ec12ba83530671bcf4320c4487390055b223c6f6fce1661a010ca9cdbe991bb257d4a3a001f1733b841fd30e008f021e529d48fae27330a9a4128525d108f439ecf899a9a8f9a5c988664b9853bd7170202d99257bd9fbb599f0fe0cd1950fe170430c2ff674b16cfcd6f8139e9d5e6456ab6d8ad6e06735b415a10ad1c40450503", 0x8b, 0x8040, &(0x7f0000000280)={0x11, 0xd, r1, 0x1, 0x6, 0x6, @local}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x2000, 0x8000002}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000000)) r5 = syz_open_dev$sg(0x0, 0x401, 0x400000) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000140), 0x1) 1.90385951s ago: executing program 0 (id=506): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x40000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) sendto$inet(r0, &(0x7f0000000200)="abfc97b628286660a227c510c24d482396a7406c896b34a3d63a55b8c845901c441dd121c1996ec315e6687bb600750f27a4ae4528975171b2b6c2b4409dc9fe", 0x40, 0x4c841, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(0x0, 0x0, 0x144) fcntl$setlease(r4, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x4, 0x6, 0x49, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', r5, 0x2f, 0x8, 0x9, 0x100, 0x78, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x700, 0x6, 0x6}}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000", 0x37}, {&(0x7f0000000140)="e8c0a85cd3351f43a118767a631e20d8616bd56dbfbd924835d93da09483316120e9293466", 0x25}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.220575752s ago: executing program 0 (id=507): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x5d) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) prlimit64(0x0, 0x1, &(0x7f0000000240)={0x2, 0xfff}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e200000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r6) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000080)='P') bind$bt_hci(r2, &(0x7f0000000040), 0x6) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$sock_bt_hci(r2, 0x400448e6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102392, 0x18ff8) r8 = creat(&(0x7f0000000400)='./file0\x00', 0x128) write$P9_RVERSION(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="b292edaa5c8f"], 0x13) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f00000000c0)=0x8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2b, 0x1, 0x3) 977.860206ms ago: executing program 5 (id=508): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x9, &(0x7f0000000080)=0x272) memfd_create(0x0, 0x6) 118.619577ms ago: executing program 2 (id=509): gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000140)="fdb1724e70b98982c4f9d387d8ff7678bfa6cb6acd570562e57d5b97852a7b6bbe127efb809a524f4bcb615232ebc04fe66594cd3dd26389d68b4ac95c05d9ea1e2763f5590ddbc41292d374958471d1905c66382d701807e82983f39bf57c34b1c11c03fc", &(0x7f00000001c0)="35a99084224cf05b22196891d36e6739d98306249d81d4991018306c46fc7e12ffa36914e0e7cff9ab8560b461617f1c4d64a9f11c5c372479c5e1457f4f0a2e9a3beaae1c2dd4ff63d5445b101e8f42a2aaabc392759227"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffb, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x400) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pread64(r1, &(0x7f0000000300)=""/205, 0xcd, 0xa) readv(r0, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x101, 0x10201) read$snddsp(r2, &(0x7f0000000240)=""/79, 0x4f) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 5 (id=510): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='aufs\x00', 0x9010, &(0x7f0000000300)='eth0\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40) kernel console output (not intermixed with test programs): devsim netdevsim4 netdevsim1: renamed from eth1 [ 63.613795][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.621707][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.630480][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.638312][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.649087][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.719615][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.729217][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.737242][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.745767][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.759431][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.769166][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.777454][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.786676][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.879097][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.890574][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.898722][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.907873][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.923105][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.931653][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.945243][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.955211][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.004039][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.028859][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.047935][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.057670][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.066966][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.076946][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.084919][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.093590][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.111829][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.121106][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.134671][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.153899][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.171506][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.179115][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.203281][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.210431][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.230454][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.237571][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.253205][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.270970][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.278069][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.315945][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.339484][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.346594][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.370816][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.377938][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.397348][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.438015][ T5618] Bluetooth: hci2: command tx timeout [ 64.461430][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.501707][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.508975][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.516671][ T5618] Bluetooth: hci0: command tx timeout [ 64.525666][ T5620] Bluetooth: hci4: command tx timeout [ 64.525672][ T4930] Bluetooth: hci3: command tx timeout [ 64.537074][ T5618] Bluetooth: hci1: command tx timeout [ 64.564448][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.571618][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.597252][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.703924][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.733199][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.740356][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.789270][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.796431][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.232876][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.361774][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.461284][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.507554][ T5608] veth0_vlan: entered promiscuous mode [ 65.553173][ T5608] veth1_vlan: entered promiscuous mode [ 65.585935][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.649582][ T5609] veth0_vlan: entered promiscuous mode [ 65.685218][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.699259][ T5609] veth1_vlan: entered promiscuous mode [ 65.714109][ T5608] veth0_macvtap: entered promiscuous mode [ 65.741854][ T5608] veth1_macvtap: entered promiscuous mode [ 65.758663][ T5617] veth0_vlan: entered promiscuous mode [ 65.789129][ T5617] veth1_vlan: entered promiscuous mode [ 65.798360][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.804548][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.804772][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.816429][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.847678][ T5609] veth0_macvtap: entered promiscuous mode [ 65.866329][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.877758][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.889585][ T5613] veth0_vlan: entered promiscuous mode [ 65.898980][ T1122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.907809][ T1122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.923609][ T5609] veth1_macvtap: entered promiscuous mode [ 65.934756][ T5622] veth0_vlan: entered promiscuous mode [ 65.944317][ T5613] veth1_vlan: entered promiscuous mode [ 65.979338][ T5617] veth0_macvtap: entered promiscuous mode [ 65.987066][ T5622] veth1_vlan: entered promiscuous mode [ 66.000099][ T5617] veth1_macvtap: entered promiscuous mode [ 66.028805][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.055628][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.084084][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.094989][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.118487][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.128337][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.130205][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.159389][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.168542][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.186388][ T5613] veth0_macvtap: entered promiscuous mode [ 66.196535][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.218506][ T5613] veth1_macvtap: entered promiscuous mode [ 66.227066][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.254389][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.262495][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.265105][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.279450][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.289230][ T5622] veth0_macvtap: entered promiscuous mode [ 66.306916][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.322135][ T5622] veth1_macvtap: entered promiscuous mode [ 66.329116][ T30] audit: type=1400 audit(1778334814.761:152): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.G6kwsg/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.354927][ T30] audit: type=1400 audit(1778334814.761:153): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.372410][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.384865][ T30] audit: type=1400 audit(1778334814.771:154): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.G6kwsg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.412570][ T30] audit: type=1400 audit(1778334814.771:155): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.434783][ T30] audit: type=1400 audit(1778334814.771:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.G6kwsg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.441634][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.473197][ T30] audit: type=1400 audit(1778334814.771:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.G6kwsg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.475097][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.500993][ T30] audit: type=1400 audit(1778334814.781:158): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.533937][ T5620] Bluetooth: hci2: command tx timeout [ 66.535224][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.539914][ T30] audit: type=1400 audit(1778334814.801:159): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.571532][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.578067][ T30] audit: type=1400 audit(1778334814.811:160): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=7121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.607119][ T5620] Bluetooth: hci3: command tx timeout [ 66.613112][ T5620] Bluetooth: hci4: command tx timeout [ 66.618549][ T5620] Bluetooth: hci1: command tx timeout [ 66.623950][ T5620] Bluetooth: hci0: command tx timeout [ 66.632338][ T30] audit: type=1400 audit(1778334814.831:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.672419][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.682985][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.712047][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.733153][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.740006][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.741541][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.761500][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.797767][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.814614][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.820592][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.823712][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.839894][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.863193][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.877893][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.924044][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.945609][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.143310][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.457772][ T5815] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 67.465855][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.844601][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.871660][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.924454][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.937350][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.991847][ T5822] netem: invalid attributes len -8 [ 68.012342][ T5822] netem: change failed [ 68.064209][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.089999][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.286122][ T803] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.470748][ T803] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 68.504675][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.537153][ T803] usb 3-1: Product: syz [ 68.552126][ T803] usb 3-1: Manufacturer: syz [ 68.565573][ T803] usb 3-1: SerialNumber: syz [ 68.595940][ T4930] Bluetooth: hci2: command tx timeout [ 68.676380][ T4930] Bluetooth: hci0: command tx timeout [ 68.676399][ T5620] Bluetooth: hci1: command tx timeout [ 68.676422][ T5620] Bluetooth: hci4: command tx timeout [ 68.681808][ T4930] Bluetooth: hci3: command tx timeout [ 69.309925][ T803] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 69.436478][ T803] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 69.502795][ T5879] binder: 5878:5879 ioctl 80489439 200000000400 returned -22 [ 69.527184][ T5879] binder: 5878:5879 ioctl c0306201 2000000003c0 returned -14 [ 70.443255][ T5916] binder: 5914:5916 ioctl 80489439 200000000400 returned -22 [ 70.656401][ T5881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.670402][ T5916] binder: 5914:5916 ioctl c0306201 2000000003c0 returned -14 [ 70.679013][ T5881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.723070][ T5926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.659204][ T803] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 72.692370][ T803] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 73.892574][ T803] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 73.931958][ T803] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 75.069696][ T803] usb 3-1: USB disconnect, device number 2 [ 75.088405][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 75.088423][ T30] audit: type=1400 audit(1778334823.531:208): avc: denied { create } for pid=5940 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.200543][ T30] audit: type=1400 audit(1778334823.631:209): avc: denied { setopt } for pid=5940 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.317658][ T5941] netlink: 'syz.3.17': attribute type 5 has an invalid length. [ 75.332076][ T30] audit: type=1400 audit(1778334823.761:210): avc: denied { ioctl } for pid=5949 comm="syz.4.20" path="socket:[9157]" dev="sockfs" ino=9157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.409220][ T5948] Invalid logical block size (2147483647) [ 75.448921][ T30] audit: type=1400 audit(1778334823.891:211): avc: denied { mounton } for pid=5949 comm="syz.4.20" path="/4/bus" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.486678][ T5742] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.595480][ T30] audit: type=1400 audit(1778334823.981:212): avc: denied { unlink } for pid=5949 comm="syz.4.20" name="#1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.661103][ T30] audit: type=1400 audit(1778334824.011:213): avc: denied { mount } for pid=5949 comm="syz.4.20" name="/" dev="overlay" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.729623][ T5742] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 75.739165][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.747262][ T5742] usb 4-1: Product: syz [ 75.751920][ T5742] usb 4-1: Manufacturer: syz [ 75.758949][ T5742] usb 4-1: SerialNumber: syz [ 75.981298][ T30] audit: type=1400 audit(1778334824.361:214): avc: denied { create } for pid=5962 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.532945][ T29] cfg80211: failed to load regulatory.db [ 76.564358][ T30] audit: type=1400 audit(1778334824.611:215): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.602950][ T30] audit: type=1400 audit(1778334825.041:216): avc: denied { create } for pid=5966 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.659829][ T5972] binder: 5971:5972 ioctl 80489439 200000000400 returned -22 [ 76.667422][ T30] audit: type=1400 audit(1778334825.041:217): avc: denied { write } for pid=5966 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.691452][ T5972] binder: BINDER_SET_CONTEXT_MGR already set [ 76.703377][ T5972] binder: 5971:5972 ioctl 4018620d 2000000002c0 returned -16 [ 76.741724][ T5972] binder: 5971:5972 ioctl c0306201 2000000003c0 returned -14 [ 77.452983][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 77.645452][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 78.058832][ T5984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5984 comm=syz.0.28 [ 78.944997][ T5997] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 78.984180][ T5997] netlink: 224 bytes leftover after parsing attributes in process `syz.2.31'. [ 79.020593][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 79.316792][ T5620] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 79.327282][ T5620] Bluetooth: hci1: Injecting HCI hardware error event [ 79.340007][ T5618] Bluetooth: hci1: hardware error 0x00 [ 79.937403][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 79.966384][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 79.993769][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 80.016223][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 80.038221][ T5742] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 80.121312][ T6005] FAULT_INJECTION: forcing a failure. [ 80.121312][ T6005] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.134604][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT(full) [ 80.134625][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.134634][ T6005] Call Trace: [ 80.134640][ T6005] [ 80.134644][ T6005] dump_stack_lvl+0x100/0x190 [ 80.134660][ T6005] should_fail_ex.cold+0x5/0xa [ 80.134675][ T6005] _copy_from_user+0x2e/0xd0 [ 80.134691][ T6005] copy_msghdr_from_user+0x9f/0x4f0 [ 80.134706][ T6005] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 80.134722][ T6005] ? sched_clock_cpu+0x6c/0x570 [ 80.134739][ T6005] ___sys_sendmsg+0x106/0x1e0 [ 80.134753][ T6005] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.134767][ T6005] ? kvm_sched_clock_read+0x11/0x20 [ 80.134796][ T6005] __sys_sendmsg+0x170/0x220 [ 80.134806][ T6005] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.134829][ T6005] ? rcu_is_watching+0x12/0xc0 [ 80.134847][ T6005] do_syscall_64+0x10b/0xf80 [ 80.134861][ T6005] ? clear_bhb_loop+0x40/0x90 [ 80.134874][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.134884][ T6005] RIP: 0033:0x7fd666d9cdd9 [ 80.134894][ T6005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.134904][ T6005] RSP: 002b:00007fd667b9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.134914][ T6005] RAX: ffffffffffffffda RBX: 00007fd667016090 RCX: 00007fd666d9cdd9 [ 80.134921][ T6005] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 80.134927][ T6005] RBP: 00007fd667b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.134933][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.134939][ T6005] R13: 00007fd667016128 R14: 00007fd667016090 R15: 00007ffda6ca1218 [ 80.134953][ T6005] [ 80.341522][ T5742] usb 4-1: USB disconnect, device number 2 [ 81.430274][ T5618] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 81.866061][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 81.866079][ T30] audit: type=1400 audit(1778334829.031:238): avc: denied { name_bind } for pid=6006 comm="syz.3.34" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.043215][ T30] audit: type=1400 audit(1778334829.031:239): avc: denied { node_bind } for pid=6006 comm="syz.3.34" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 82.170521][ T6014] warning: `syz.3.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.965523][ T30] audit: type=1400 audit(1778334832.381:240): avc: denied { read write } for pid=6025 comm="syz.0.40" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.493262][ T30] audit: type=1400 audit(1778334832.381:241): avc: denied { open } for pid=6025 comm="syz.0.40" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.632025][ T30] audit: type=1400 audit(1778334833.061:242): avc: denied { create } for pid=6032 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.983100][ T30] audit: type=1400 audit(1778334833.101:243): avc: denied { getopt } for pid=6032 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.023679][ T6038] Zero length message leads to an empty skb [ 85.170229][ T30] audit: type=1400 audit(1778334833.481:244): avc: denied { getopt } for pid=6032 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.140834][ T30] audit: type=1400 audit(1778334834.581:245): avc: denied { create } for pid=6048 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.200278][ T6049] netlink: 120 bytes leftover after parsing attributes in process `syz.4.45'. [ 86.236197][ T5721] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.538624][ T30] audit: type=1400 audit(1778334834.931:246): avc: denied { read write } for pid=6045 comm="syz.0.44" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.565515][ T30] audit: type=1400 audit(1778334834.931:247): avc: denied { open } for pid=6045 comm="syz.0.44" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.586393][ T5721] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 86.605579][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.861943][ T10] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.035397][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.044924][ T5721] usb 4-1: Product: syz [ 87.055405][ T5721] usb 4-1: Manufacturer: syz [ 87.063723][ T5721] usb 4-1: SerialNumber: syz [ 87.089721][ T10] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.102174][ T30] audit: type=1400 audit(1778334835.521:248): avc: denied { write } for pid=6053 comm="syz.4.46" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.161786][ T5721] usb 4-1: config 0 descriptor?? [ 87.174315][ T10] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.191132][ T5721] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 87.204401][ T10] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 87.222782][ T10] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 87.231522][ T10] usb 2-1: Manufacturer: syz [ 87.236396][ T10] usb 2-1: SerialNumber: syz [ 87.337134][ T30] audit: type=1400 audit(1778334835.781:249): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 87.520076][ T10] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 87.545288][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.556413][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input6 [ 87.582666][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 87.590379][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 87.597351][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 87.604309][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 87.611267][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 87.618261][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 87.625982][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 87.632940][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 87.639720][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 87.645890][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.680168][ T10] usb 2-1: USB disconnect, device number 2 [ 87.716948][ T5721] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 87.749186][ T5721] sq905c 4-1:0.0: Get version command failed [ 87.774736][ T5721] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 87.861998][ T30] audit: type=1400 audit(1778334836.301:250): avc: denied { read append } for pid=6044 comm="syz.3.43" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.922093][ T30] audit: type=1400 audit(1778334836.301:251): avc: denied { open } for pid=6044 comm="syz.3.43" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.975722][ T30] audit: type=1400 audit(1778334836.341:252): avc: denied { ioctl } for pid=6044 comm="syz.3.43" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.075457][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.185414][ T5625] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.205195][ T30] audit: type=1400 audit(1778334836.641:253): avc: denied { read write } for pid=6061 comm="syz.0.47" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.246967][ T10] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.264954][ T10] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.276606][ T30] audit: type=1400 audit(1778334836.651:254): avc: denied { open } for pid=6061 comm="syz.0.47" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.301828][ T10] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.312093][ T30] audit: type=1400 audit(1778334836.681:255): avc: denied { read write } for pid=6061 comm="syz.0.47" dev="anon_inodefs" ino=10722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.335887][ T30] audit: type=1400 audit(1778334836.681:256): avc: denied { open } for pid=6061 comm="syz.0.47" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.361493][ T10] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 88.371460][ T5625] usb 5-1: Using ep0 maxpacket: 32 [ 88.376617][ T10] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 88.395365][ T10] usb 2-1: Manufacturer: syz [ 88.400336][ T10] usb 2-1: SerialNumber: syz [ 88.405728][ T5625] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.418775][ T5625] usb 5-1: config 1 interface 0 has no altsetting 0 [ 88.433285][ T5625] usb 5-1: language id specifier not provided by device, defaulting to English [ 88.456723][ T5625] usb 5-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.40 [ 88.475483][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.490352][ T5625] usb 5-1: Manufacturer: ΰ₯‘μž¨μ΄€θ½±θΎ±θŠ›λ—‹ε˜Šδ‘₯θ›žξŸ‹οŽθ©­ζ·Ία”οͺ›ε•²γ’…η‹•νžξ’Ÿη£ˆαŒ‘ν€œδ“‘μ”œζ‘λ―δ‘žδ·ΎζιΎ‚ήμ΄ˆμ‚»θ·Šε¦΅θ€‚κβ©‹αΆΏθΊθ‚’α•£λ‘‚βƒ€δ’Έν‚±κ―‰ι©λ Œξ‘΅ [ 88.515606][ T5625] usb 5-1: SerialNumber: syz [ 88.639502][ T10] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 88.670514][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input7 [ 88.729010][ T6068] openvswitch: netlink: Flow key attr not present in new flow. [ 88.757026][ T5625] usbhid 5-1:1.0: can't add hid device: -71 [ 88.764724][ T5625] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 89.661163][ T5625] usb 5-1: USB disconnect, device number 2 [ 89.967367][ T5721] usb 4-1: USB disconnect, device number 3 [ 90.020440][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 90.028170][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 90.036237][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 90.043898][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 90.051262][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 90.058635][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 90.066432][ T5625] usb 2-1: USB disconnect, device number 3 [ 90.072292][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 90.072317][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 90.335733][ T30] audit: type=1400 audit(1778334838.781:257): avc: denied { getopt } for pid=6090 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.416988][ T6092] netlink: 88 bytes leftover after parsing attributes in process `syz.3.54'. [ 91.089963][ T6097] netlink: 120 bytes leftover after parsing attributes in process `syz.4.56'. [ 91.626874][ T29] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 91.916613][ T29] usb 5-1: config 0 has no interfaces? [ 91.929700][ T29] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 91.943536][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.963401][ T29] usb 5-1: Product: syz [ 91.975238][ T29] usb 5-1: Manufacturer: syz [ 91.982142][ T29] usb 5-1: SerialNumber: syz [ 92.010710][ T29] usb 5-1: config 0 descriptor?? [ 92.653807][ T803] usb 5-1: USB disconnect, device number 3 [ 92.729795][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 92.729811][ T30] audit: type=1400 audit(1778334841.171:267): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 92.816776][ T30] audit: type=1400 audit(1778334841.261:268): avc: denied { write } for pid=6119 comm="syz.3.64" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.868778][ T30] audit: type=1400 audit(1778334841.291:269): avc: denied { open } for pid=6119 comm="syz.3.64" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.936734][ T30] audit: type=1400 audit(1778334841.291:270): avc: denied { ioctl } for pid=6119 comm="syz.3.64" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 93.079372][ T6127] fuse: Unknown parameter '0x0000000000000005' [ 93.265472][ T30] audit: type=1400 audit(1778334841.601:271): avc: denied { write } for pid=6122 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 93.685130][ T30] audit: type=1400 audit(1778334842.121:272): avc: denied { connect } for pid=6134 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.354924][ T30] audit: type=1400 audit(1778334842.791:273): avc: denied { create } for pid=6138 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.393538][ T30] audit: type=1400 audit(1778334842.821:274): avc: denied { create } for pid=6138 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.464749][ T30] audit: type=1400 audit(1778334842.821:275): avc: denied { create } for pid=6138 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.484325][ T30] audit: type=1400 audit(1778334842.821:276): avc: denied { setopt } for pid=6138 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.547544][ T6142] Bluetooth: MGMT ver 1.23 [ 94.567437][ T6143] netlink: 120 bytes leftover after parsing attributes in process `syz.3.70'. [ 94.587226][ T12] Bluetooth: Error in BCSP hdr checksum [ 94.783104][ T6147] netlink: 104 bytes leftover after parsing attributes in process `syz.2.68'. [ 94.796878][ T6149] fuseblk: Bad value for 'user_id' [ 94.810185][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.829738][ T6149] fuseblk: Bad value for 'user_id' [ 94.858514][ T1122] Bluetooth: Error in BCSP hdr checksum [ 95.654826][ T6163] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 96.356264][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 96.394085][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.76'. [ 96.536774][ T6170] netlink: set zone limit has 4 unknown bytes [ 96.907746][ T6182] netlink: 'syz.1.81': attribute type 3 has an invalid length. [ 97.336840][ T5625] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.344483][ T803] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.521896][ T803] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 97.607046][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.627893][ T6174] dlm: no local IP address has been set [ 97.637588][ T803] usb 5-1: Product: syz [ 97.651889][ T803] usb 5-1: Manufacturer: syz [ 97.659146][ T6174] dlm: cannot start dlm midcomms -107 [ 97.679851][ T803] usb 5-1: SerialNumber: syz [ 97.816063][ T5612] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.420303][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 98.420337][ T30] audit: type=1400 audit(1778334846.561:297): avc: denied { mount } for pid=6192 comm="syz.1.84" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 98.683607][ T30] audit: type=1400 audit(1778334846.831:298): avc: denied { ioctl } for pid=6192 comm="syz.1.84" path="socket:[11044]" dev="sockfs" ino=11044 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.718097][ T30] audit: type=1400 audit(1778334846.841:299): avc: denied { ioctl } for pid=6192 comm="syz.1.84" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64af scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.762216][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.795833][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.819331][ T5612] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.830358][ T5612] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 98.838786][ T5612] usb 1-1: Manufacturer: syz [ 98.847146][ T5612] usb 1-1: config 0 descriptor?? [ 98.950954][ T30] audit: type=1400 audit(1778334847.391:300): avc: denied { write } for pid=6175 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.987000][ T803] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 98.999761][ T803] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 99.570048][ T6190] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 99.604314][ T5625] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.616239][ T5625] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 99.623933][ T5625] usb 4-1: can't read configurations, error -71 [ 99.665280][ T6190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.397494][ T5612] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 100.411004][ T5612] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 100.419962][ T5612] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 100.428596][ T5612] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 100.437562][ T5612] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 100.498078][ T30] audit: type=1400 audit(1778334848.901:301): avc: denied { create } for pid=6213 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.596530][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 100.835524][ T5620] Bluetooth: hci5: command 0x1003 tx timeout [ 100.845251][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 100.941194][ T30] audit: type=1400 audit(1778334848.971:302): avc: denied { setopt } for pid=6213 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.009652][ T5612] usb 1-1: USB disconnect, device number 2 [ 101.116156][ T30] audit: type=1400 audit(1778334848.971:303): avc: denied { write } for pid=6213 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.257364][ T30] audit: type=1400 audit(1778334849.351:304): avc: denied { read write } for pid=5622 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.428221][ T30] audit: type=1400 audit(1778334849.351:305): avc: denied { open } for pid=5622 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.499733][ T30] audit: type=1400 audit(1778334849.351:306): avc: denied { ioctl } for pid=5622 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.942236][ T803] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 101.980303][ T803] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 102.023948][ T803] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 102.070821][ T803] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 102.119527][ T803] usb 5-1: USB disconnect, device number 4 [ 102.240307][ T6234] netlink: 'syz.3.95': attribute type 29 has an invalid length. [ 102.483103][ T12] Bluetooth: Error in BCSP hdr checksum [ 102.575190][ T6230] can: request_module (can-proto-0) failed. [ 102.605154][ T6236] syz.4.96 uses obsolete (PF_INET,SOCK_PACKET) [ 102.739408][ T5876] Bluetooth: Error in BCSP hdr checksum [ 102.793102][ T6243] netlink: 'syz.3.98': attribute type 21 has an invalid length. [ 102.803451][ T6243] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.518760][ T6253] IPVS: set_ctl: invalid protocol: 22 10.1.1.6:20001 [ 103.580230][ T29] IPVS: starting estimator thread 0... [ 103.905575][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 103.914541][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 104.115404][ T5620] Bluetooth: hci5: command 0x1003 tx timeout [ 104.123471][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.127772][ T6255] IPVS: using max 44 ests per chain, 105600 per kthread [ 104.397042][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 104.397061][ T30] audit: type=1400 audit(1778334852.341:316): avc: denied { ioctl } for pid=6260 comm="syz.3.104" path="socket:[12463]" dev="sockfs" ino=12463 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.482529][ T30] audit: type=1400 audit(1778334855.901:317): avc: denied { write } for pid=6266 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 107.844184][ T30] audit: type=1400 audit(1778334856.201:318): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 108.234782][ T30] audit: type=1400 audit(1778334856.231:319): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.382949][ T30] audit: type=1400 audit(1778334856.821:320): avc: denied { create } for pid=6276 comm="syz.2.109" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.739503][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.932581][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.010151][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 109.020092][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.056081][ T9] usb 3-1: Product: syz [ 109.071423][ T9] usb 3-1: Manufacturer: syz [ 109.088704][ T9] usb 3-1: SerialNumber: syz [ 109.097500][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.180130][ T9] usb 3-1: config 0 descriptor?? [ 109.254428][ T30] audit: type=1400 audit(1778334857.691:321): avc: denied { ioctl } for pid=6282 comm="syz.0.113" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 110.070809][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.490322][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 110.551991][ T9] usb 3-1: Please update to version 0.2 or newer [ 110.639334][ T9] usb 3-1: Firmware: build [ 111.068970][ T30] audit: type=1400 audit(1778334859.391:322): avc: denied { write } for pid=6276 comm="syz.2.109" name="file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.234373][ T6296] netlink: 'syz.4.116': attribute type 3 has an invalid length. [ 111.245409][ T30] audit: type=1400 audit(1778334859.391:323): avc: denied { open } for pid=6276 comm="syz.2.109" path="/22/file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.354443][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.942361][ T30] audit: type=1400 audit(1778334860.351:324): avc: denied { unlink } for pid=5609 comm="syz-executor" name="file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.269958][ T9] usb 3-1: USB disconnect, device number 3 [ 112.295719][ T30] audit: type=1400 audit(1778334860.731:325): avc: denied { search } for pid=5274 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.333642][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.349204][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.352715][ T6307] loop5: detected capacity change from 0 to 2640 [ 112.358179][ T30] audit: type=1400 audit(1778334860.771:326): avc: denied { search } for pid=5274 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.395456][ T30] audit: type=1400 audit(1778334860.771:327): avc: denied { search } for pid=5274 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.421596][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.454104][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.464491][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.530430][ T6307] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.550799][ T30] audit: type=1400 audit(1778334860.771:328): avc: denied { read } for pid=5274 comm="dhcpcd" name="n30" dev="tmpfs" ino=2408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.691792][ T6307] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.706986][ T30] audit: type=1400 audit(1778334860.771:329): avc: denied { open } for pid=5274 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.784806][ T6307] Buffer I/O error on dev loop5, logical block 1, async page read [ 112.796750][ T48] bridge_slave_1: left allmulticast mode [ 112.817237][ T48] bridge_slave_1: left promiscuous mode [ 112.862268][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.881189][ T30] audit: type=1400 audit(1778334860.771:330): avc: denied { getattr } for pid=5274 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.909501][ T30] audit: type=1400 audit(1778334860.771:331): avc: denied { ioctl } for pid=6298 comm="syz-executor" path="socket:[12573]" dev="sockfs" ino=12573 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.985250][ T48] bridge_slave_0: left allmulticast mode [ 112.994441][ T6307] loop5: unable to read partition table [ 113.000251][ T48] bridge_slave_0: left promiscuous mode [ 113.007215][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.018751][ T6309] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 113.029995][ T6307] loop_reread_partitions: partition scan of loop5 (3„ Ύ‚³˜) failed (rc=-5) [ 113.030302][ T6309] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 113.073235][ T6309] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 113.082393][ T6309] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 113.092095][ T6309] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 113.101093][ T6309] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 113.110540][ T6309] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 113.114272][ T6323] fuse: Unknown parameter '0x0000000000000005' [ 113.572333][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.622274][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.632433][ T48] bond0 (unregistering): Released all slaves [ 113.652243][ T6283] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 113.660068][ T6283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.113'. [ 114.516642][ T5620] Bluetooth: hci4: command tx timeout [ 115.017878][ T146] Bluetooth: Error in BCSP hdr checksum [ 115.269998][ T6350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.973381][ T6353] netlink: 'syz.1.126': attribute type 3 has an invalid length. [ 116.605612][ T5618] Bluetooth: hci4: command tx timeout [ 116.686789][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 116.765768][ T6371] netlink: 'syz.2.130': attribute type 3 has an invalid length. [ 117.188530][ T6363] netlink: 'syz.1.128': attribute type 29 has an invalid length. [ 117.408809][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 117.408827][ T30] audit: type=1400 audit(1778334865.841:338): avc: denied { write } for pid=6338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.594941][ T30] audit: type=1400 audit(1778334865.841:339): avc: denied { add_name } for pid=6338 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.648631][ T48] hsr_slave_0: left promiscuous mode [ 117.680609][ T48] hsr_slave_1: left promiscuous mode [ 117.687401][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.700346][ T30] audit: type=1400 audit(1778334865.841:340): avc: denied { create } for pid=6338 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.734022][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.758202][ T30] audit: type=1400 audit(1778334865.841:341): avc: denied { write } for pid=6338 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.815114][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.824091][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.833224][ T30] audit: type=1400 audit(1778334865.841:342): avc: denied { append } for pid=6338 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.860822][ T30] audit: type=1326 audit(1778334866.141:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6374 comm="syz.2.131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd666d9cdd9 code=0x0 [ 117.904436][ T30] audit: type=1400 audit(1778334866.191:344): avc: denied { write } for pid=6377 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.926819][ T48] veth1_macvtap: left promiscuous mode [ 117.936593][ T48] veth0_macvtap: left promiscuous mode [ 117.942877][ T48] veth1_vlan: left promiscuous mode [ 117.949450][ T48] veth0_vlan: left promiscuous mode [ 117.973036][ T30] audit: type=1400 audit(1778334866.191:345): avc: denied { remove_name } for pid=6377 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.118765][ T30] audit: type=1400 audit(1778334866.191:346): avc: denied { unlink } for pid=6377 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.180904][ T30] audit: type=1400 audit(1778334866.281:347): avc: denied { setopt } for pid=6374 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.675429][ T5620] Bluetooth: hci4: command tx timeout [ 120.177796][ T48] team0 (unregistering): Port device team_slave_1 removed [ 120.197968][ T48] team0 (unregistering): Port device team_slave_0 removed [ 120.311108][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 120.320363][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 120.333696][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 120.680091][ T6410] fuse: Unknown parameter '0x0000000000000005' [ 120.765529][ T5620] Bluetooth: hci4: command tx timeout [ 120.869349][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 120.878369][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 121.870523][ T6435] input: syz1 as /devices/virtual/input/input9 [ 121.931138][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.943155][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.950540][ T6298] bridge_slave_0: entered allmulticast mode [ 121.958649][ T6298] bridge_slave_0: entered promiscuous mode [ 121.967659][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.975591][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.982824][ T6298] bridge_slave_1: entered allmulticast mode [ 121.991325][ T6298] bridge_slave_1: entered promiscuous mode [ 122.024677][ T6298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.042138][ T6298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.094480][ T6298] team0: Port device team_slave_0 added [ 122.116920][ T6298] team0: Port device team_slave_1 added [ 122.200167][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.215588][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.267538][ T6298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.319264][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.341635][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.414175][ T6298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.458357][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 122.529661][ T6298] hsr_slave_0: entered promiscuous mode [ 122.544759][ T6298] hsr_slave_1: entered promiscuous mode [ 122.564472][ T6298] debugfs: 'hsr0' already exists in 'hsr' [ 122.581783][ T6298] Cannot create hsr debugfs directory [ 123.796782][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 124.049127][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 124.049143][ T30] audit: type=1400 audit(1778334872.491:364): avc: denied { read } for pid=6462 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.143068][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 124.175940][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 124.193384][ T30] audit: type=1400 audit(1778334872.491:365): avc: denied { write } for pid=6462 comm="syz.1.146" lport=131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.256078][ T30] audit: type=1326 audit(1778334872.561:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.0.147" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0de859cdd9 code=0x0 [ 124.453172][ T6298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.489311][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.496498][ T30] audit: type=1400 audit(1778334872.931:367): avc: denied { write } for pid=6449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.532481][ T6298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.566691][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.575029][ T6485] fuse: Unknown parameter '0x0000000000000005' [ 124.600398][ T6298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.750875][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.764225][ T6298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.838201][ T6491] netlink: 'syz.1.151': attribute type 3 has an invalid length. [ 125.198472][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.287842][ T30] audit: type=1400 audit(1778334873.731:368): avc: denied { write } for pid=6493 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.426051][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 125.603612][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.818056][ T6508] netlink: 'syz.1.154': attribute type 3 has an invalid length. [ 126.529402][ T6298] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.570603][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.577718][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.428573][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.247277][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.254757][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.658101][ T30] audit: type=1400 audit(1778334877.091:369): avc: denied { setopt } for pid=6535 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.680337][ T30] audit: type=1400 audit(1778334877.091:370): avc: denied { create } for pid=6535 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 129.234990][ T30] audit: type=1400 audit(1778334877.671:371): avc: denied { write } for pid=6513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.283666][ T30] audit: type=1400 audit(1778334877.711:372): avc: denied { sys_admin } for pid=6535 comm="syz.2.159" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 129.611383][ T30] audit: type=1400 audit(1778334878.051:373): avc: denied { write } for pid=6558 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.903519][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 129.911530][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.918624][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.982051][ T6571] netlink: 'syz.4.164': attribute type 3 has an invalid length. [ 131.198263][ T6584] netlink: 'syz.1.166': attribute type 3 has an invalid length. [ 132.717249][ T6298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.734879][ T6601] netlink: 'syz.0.169': attribute type 29 has an invalid length. [ 134.145626][ T6627] netlink: 'syz.1.175': attribute type 29 has an invalid length. [ 134.355607][ T5612] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.550398][ T6631] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 134.551602][ T30] audit: type=1400 audit(1778334882.991:374): avc: denied { relabelto } for pid=6618 comm="syz.4.174" name="39" dev="tmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 134.552351][ T30] audit: type=1400 audit(1778334882.991:375): avc: denied { associate } for pid=6618 comm="syz.4.174" name="39" dev="tmpfs" ino=220 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 134.569545][ T5612] usb 3-1: Using ep0 maxpacket: 32 [ 134.573903][ T5612] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 134.573932][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.609285][ T6298] veth0_vlan: entered promiscuous mode [ 134.615165][ T6298] veth1_vlan: entered promiscuous mode [ 134.647069][ T5612] usb 3-1: config 0 descriptor?? [ 134.684284][ T5612] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 134.772707][ T6298] veth0_macvtap: entered promiscuous mode [ 134.778763][ T6298] veth1_macvtap: entered promiscuous mode [ 134.796794][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.819971][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.825500][ T1168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.825620][ T1168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.825710][ T1168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.825779][ T1168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.217087][ T6641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.433073][ T6645] capability: warning: `syz.1.179' uses deprecated v2 capabilities in a way that may be insecure [ 135.444972][ T6645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.787362][ T5612] gspca_vc032x: reg_w err -110 [ 135.787433][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787463][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787487][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787510][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787533][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787556][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787579][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787603][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787626][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787649][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787672][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787709][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787732][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787755][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787778][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787801][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787824][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787846][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.787869][ T5612] gspca_vc032x: Unknown sensor... [ 135.788227][ T5612] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 135.926457][ T30] audit: type=1400 audit(1778334883.851:376): avc: denied { mount } for pid=6639 comm="syz.1.179" name="/" dev="hugetlbfs" ino=14407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 136.018422][ T30] audit: type=1400 audit(1778334884.461:377): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 137.021232][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.045691][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.097124][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.144825][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.344932][ T30] audit: type=1400 audit(1778334885.781:378): avc: denied { mounton } for pid=6298 comm="syz-executor" path="/root/syzkaller.EOBZIM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 137.360116][ T29] usb 3-1: USB disconnect, device number 4 [ 139.351380][ T6656] netlink: 'syz.0.181': attribute type 29 has an invalid length. [ 140.266187][ T6679] netlink: 'syz.4.185': attribute type 3 has an invalid length. [ 141.175377][ T5721] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.588951][ T5721] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 142.616090][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.635400][ T5721] usb 2-1: Product: syz [ 142.644403][ T5721] usb 2-1: Manufacturer: syz [ 142.652112][ T5721] usb 2-1: SerialNumber: syz [ 142.673320][ T5721] usb 2-1: config 0 descriptor?? [ 142.694872][ T5721] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 143.409064][ T5721] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 143.461104][ T5721] usb 2-1: USB disconnect, device number 4 [ 143.582091][ T30] audit: type=1400 audit(1778334892.021:379): avc: denied { bind } for pid=6709 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.924334][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 143.939777][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'. [ 143.996088][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 144.008649][ T6718] netlink: 'syz.5.195': attribute type 2 has an invalid length. [ 144.037278][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'. [ 144.147167][ T6720] loop1: detected capacity change from 0 to 16384 [ 144.419776][ T6731] netlink: 'syz.1.197': attribute type 3 has an invalid length. [ 145.439182][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 145.465461][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 145.753602][ T30] audit: type=1326 audit(1778334894.181:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.200" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f320b59cdd9 code=0x0 [ 145.932603][ T6751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 145.941605][ T6751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 146.517079][ T30] audit: type=1400 audit(1778334894.951:381): avc: denied { append } for pid=6754 comm="syz.2.203" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 146.542225][ T5620] Bluetooth: unknown link type 73 [ 146.548076][ T5620] Bluetooth: hci4: connection err: -111 [ 146.681321][ T30] audit: type=1400 audit(1778334895.021:382): avc: denied { write } for pid=6754 comm="syz.2.203" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 146.741978][ T30] audit: type=1400 audit(1778334895.061:383): avc: denied { write } for pid=6724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.864435][ T30] audit: type=1400 audit(1778334895.301:384): avc: denied { write } for pid=6766 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.938220][ T30] audit: type=1400 audit(1778334895.341:385): avc: denied { write } for pid=6763 comm="syz.0.205" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.002240][ T30] audit: type=1400 audit(1778334895.421:386): avc: denied { write } for pid=6772 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.182763][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 147.254624][ T30] audit: type=1400 audit(1778334895.431:387): avc: denied { block_suspend } for pid=6772 comm="syz.4.208" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.707572][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.210'. [ 148.143040][ T6795] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20001 [ 148.230039][ T30] audit: type=1400 audit(1778334896.671:388): avc: denied { bind } for pid=6800 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.634588][ T30] audit: type=1400 audit(1778334896.841:389): avc: denied { ioctl } for pid=6800 comm="syz.2.212" path="socket:[14307]" dev="sockfs" ino=14307 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.909747][ T6814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.647393][ T6811] netlink: 'syz.0.213': attribute type 29 has an invalid length. [ 150.717139][ T30] audit: type=1400 audit(1778334899.151:390): avc: denied { write } for pid=6783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.172124][ T30] audit: type=1400 audit(1778334899.611:391): avc: denied { write } for pid=6824 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.381556][ T5620] Bluetooth: unknown link type 73 [ 151.386907][ T5620] Bluetooth: hci0: connection err: -111 [ 152.477578][ T6855] IPVS: sh: FWM 3 0x00000003 - no destination available [ 152.837535][ T30] audit: type=1400 audit(1778334901.281:392): avc: denied { write } for pid=6829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.257235][ T30] audit: type=1400 audit(1778334901.701:393): avc: denied { write } for pid=6866 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.508411][ T6871] __nla_validate_parse: 4 callbacks suppressed [ 153.508482][ T6871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.226'. [ 153.840119][ T6865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.226'. [ 154.095620][ T6871] bond1: peer notification delay (2365) is not a multiple of miimon (1977090052), value rounded to 0 ms [ 154.168654][ T6865] bond1: peer notification delay (2365) is not a multiple of miimon (1977155588), value rounded to 0 ms [ 154.350960][ T30] audit: type=1400 audit(1778334902.791:394): avc: denied { create } for pid=6885 comm="syz.5.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.417012][ T30] audit: type=1400 audit(1778334902.821:395): avc: denied { setopt } for pid=6885 comm="syz.5.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.507515][ T30] audit: type=1400 audit(1778334902.951:396): avc: denied { create } for pid=6892 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.613647][ T30] audit: type=1400 audit(1778334903.051:397): avc: denied { ioctl } for pid=6892 comm="syz.1.230" path="socket:[16525]" dev="sockfs" ino=16525 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.670540][ T5620] Bluetooth: unknown link type 73 [ 154.675829][ T5620] Bluetooth: hci2: connection err: -111 [ 154.716485][ T30] audit: type=1400 audit(1778334903.121:398): avc: denied { bind } for pid=6885 comm="syz.5.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.799215][ T6906] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 154.818472][ T30] audit: type=1400 audit(1778334903.141:399): avc: denied { map } for pid=6885 comm="syz.5.229" path="socket:[16511]" dev="sockfs" ino=16511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.884095][ T6906] veth1_macvtap: left promiscuous mode [ 154.901844][ T30] audit: type=1400 audit(1778334903.141:400): avc: denied { read accept } for pid=6885 comm="syz.5.229" path="socket:[16511]" dev="sockfs" ino=16511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.959916][ T30] audit: type=1400 audit(1778334903.211:401): avc: denied { write } for pid=6883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.055888][ T30] audit: type=1400 audit(1778334903.491:402): avc: denied { write } for pid=6912 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.555165][ T6920] netlink: 'syz.4.235': attribute type 3 has an invalid length. [ 156.394251][ T6928] fuse: Bad value for 'fd' [ 156.466341][ T30] audit: type=1400 audit(1778334904.901:403): avc: denied { read } for pid=6929 comm="syz.0.238" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 160.678332][ T5721] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 160.808711][ T6952] netlink: 'syz.4.242': attribute type 29 has an invalid length. [ 160.834678][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.240'. [ 160.843999][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.240'. [ 160.961121][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.997718][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.009103][ T5721] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 161.018458][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.036968][ T5721] usb 1-1: config 0 descriptor?? [ 161.061431][ T5620] Bluetooth: unknown link type 73 [ 161.066914][ T5620] Bluetooth: hci4: connection err: -111 [ 161.856224][ T5721] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 161.863623][ T5721] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 161.902303][ T5721] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0002/input/input12 [ 162.006225][ T5721] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 162.125803][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 162.125821][ T30] audit: type=1400 audit(1778334910.561:406): avc: denied { write } for pid=6974 comm="syz.5.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 162.155590][ T6945] ======================================================= [ 162.155590][ T6945] WARNING: The mand mount option has been deprecated and [ 162.155590][ T6945] and is ignored by this kernel. Remove the mand [ 162.155590][ T6945] option from the mount to silence this warning. [ 162.155590][ T6945] ======================================================= [ 162.278263][ T5721] usb 1-1: USB disconnect, device number 3 [ 162.312471][ T30] audit: type=1400 audit(1778334910.751:407): avc: denied { read } for pid=6977 comm="syz.1.249" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.405832][ T30] audit: type=1400 audit(1778334910.751:408): avc: denied { open } for pid=6977 comm="syz.1.249" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.477189][ T30] audit: type=1400 audit(1778334910.761:409): avc: denied { ioctl } for pid=6977 comm="syz.1.249" path="/dev/usbmon8" dev="devtmpfs" ino=740 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.498634][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.507924][ T6990] batadv_slave_1: entered promiscuous mode [ 163.626057][ T6995] FAULT_INJECTION: forcing a failure. [ 163.626057][ T6995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.639408][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.0.254 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.639437][ T6995] Tainted: [L]=SOFTLOCKUP [ 163.639443][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.639453][ T6995] Call Trace: [ 163.639458][ T6995] [ 163.639465][ T6995] dump_stack_lvl+0x100/0x190 [ 163.639491][ T6995] should_fail_ex.cold+0x5/0xa [ 163.639516][ T6995] _copy_from_user+0x2e/0xd0 [ 163.639543][ T6995] copy_msghdr_from_user+0x9f/0x4f0 [ 163.639567][ T6995] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 163.639600][ T6995] ___sys_sendmsg+0x106/0x1e0 [ 163.639624][ T6995] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.639676][ T6995] __sys_sendmsg+0x170/0x220 [ 163.639693][ T6995] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.639720][ T6995] ? rcu_is_watching+0x12/0xc0 [ 163.639750][ T6995] do_syscall_64+0x10b/0xf80 [ 163.639773][ T6995] ? clear_bhb_loop+0x40/0x90 [ 163.639799][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.639817][ T6995] RIP: 0033:0x7f0de859cdd9 [ 163.639832][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.639853][ T6995] RSP: 002b:00007f0de93be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.639871][ T6995] RAX: ffffffffffffffda RBX: 00007f0de8815fa0 RCX: 00007f0de859cdd9 [ 163.639882][ T6995] RDX: 0000000020000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 163.639892][ T6995] RBP: 00007f0de93be090 R08: 0000000000000000 R09: 0000000000000000 [ 163.639902][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.639912][ T6995] R13: 00007f0de8816038 R14: 00007f0de8815fa0 R15: 00007ffcb6d80318 [ 163.639936][ T6995] [ 163.873956][ T6996] netlink: 'syz.5.252': attribute type 3 has an invalid length. [ 165.075011][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.259'. [ 165.198283][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.259'. [ 165.360982][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.390008][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.505247][ T7023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.520801][ T30] audit: type=1400 audit(1778334913.931:410): avc: denied { mount } for pid=7021 comm="syz.5.262" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 165.575938][ T5721] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.682841][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.795692][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 165.841545][ T7023] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 165.852603][ T7023] overlayfs: failed to look up (tracing) for ino (-66) [ 165.869535][ T5721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.902397][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 166.009203][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 166.037585][ T5721] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.093186][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.138681][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 166.199781][ T5721] usb 2-1: Product: syz [ 166.235907][ T5721] usb 2-1: Manufacturer: syz [ 166.301119][ T5721] usb 2-1: SerialNumber: syz [ 166.314416][ T29] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 166.363352][ T5721] usb 2-1: config 0 descriptor?? [ 166.377853][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.405857][ T29] usb 3-1: Product: syz [ 166.417758][ T29] usb 3-1: Manufacturer: syz [ 166.422793][ T29] usb 3-1: SerialNumber: syz [ 166.432141][ T29] usb 3-1: config 0 descriptor?? [ 166.445184][ T7020] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 166.454257][ T7020] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 166.477737][ T29] usb 3-1: ucan: probing device on interface #0 [ 166.844007][ T30] audit: type=1400 audit(1778334915.281:411): avc: denied { unmount } for pid=6298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 166.881978][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 166.941902][ T7034] Option 'ΣΎ,0A–˜' to dns_resolver key: bad/missing value [ 167.021333][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.031405][ T30] audit: type=1400 audit(1778334915.471:412): avc: denied { read write } for pid=7015 comm="syz.1.260" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.054869][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.058231][ T30] audit: type=1400 audit(1778334915.471:413): avc: denied { open } for pid=7015 comm="syz.1.260" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.086370][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.097594][ T30] audit: type=1400 audit(1778334915.471:414): avc: denied { ioctl } for pid=7015 comm="syz.1.260" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.141915][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.150884][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.151804][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.167846][ T5708] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 167.200897][ T7028] overlayfs: statfs failed on './file0' [ 167.204286][ T29] usb 3-1: ucan: device reported invalid device info [ 167.213951][ T29] usb 3-1: ucan: probe failed; try to update the device firmware [ 167.337018][ T5708] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.349514][ T5708] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.360139][ T5708] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.375648][ T5708] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 167.379894][ T7043] netlink: 72 bytes leftover after parsing attributes in process `syz.4.267'. [ 167.385138][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 167.403496][ T5708] usb 6-1: Product: syz [ 167.409362][ T5708] usb 6-1: Manufacturer: syz [ 167.414153][ T5708] usb 6-1: SerialNumber: syz [ 167.636156][ T5708] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 167.777604][ T5708] usb 2-1: USB disconnect, device number 5 [ 167.821367][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 167.838798][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 167.975085][ T30] audit: type=1326 audit(1778334916.411:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.4.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f320b59cdd9 code=0x0 [ 168.240021][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.495284][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.864367][ T30] audit: type=1400 audit(1778334916.681:416): avc: denied { read write } for pid=7032 comm="syz.5.264" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 168.889909][ T30] audit: type=1400 audit(1778334916.681:417): avc: denied { open } for pid=7032 comm="syz.5.264" path="/20/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 168.912788][ T30] audit: type=1400 audit(1778334917.221:418): avc: denied { create } for pid=7032 comm="syz.5.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 168.932096][ T30] audit: type=1400 audit(1778334917.361:419): avc: denied { read write } for pid=7032 comm="syz.5.264" name="lp0" dev="devtmpfs" ino=2860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 168.945160][ T5742] usb 6-1: USB disconnect, device number 2 [ 168.955800][ T30] audit: type=1400 audit(1778334917.361:420): avc: denied { open } for pid=7032 comm="syz.5.264" path="/dev/usb/lp0" dev="devtmpfs" ino=2860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 168.992896][ T803] usb 3-1: USB disconnect, device number 5 [ 169.045962][ T5742] usblp0: removed [ 169.070994][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 169.099006][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 169.104542][ T7066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.275'. [ 169.285371][ T30] audit: type=1326 audit(1778334917.691:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.4.273" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f320b59cdd9 code=0x0 [ 169.329172][ T5618] Bluetooth: hci5: command 0x1003 tx timeout [ 169.339733][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 169.385665][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.607580][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 169.619801][ T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 169.830050][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.875468][ T5620] Bluetooth: hci0: command tx timeout [ 169.918721][ T9] usb 2-1: config 0 descriptor?? [ 169.952652][ T7066] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.230659][ T7078] netlink: 'syz.4.277': attribute type 3 has an invalid length. [ 170.240269][ T7076] netlink: 'syz.5.276': attribute type 3 has an invalid length. [ 171.205748][ T5620] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 171.243146][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.251147][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.258627][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.265752][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.272703][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.284289][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.291488][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.302582][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.314163][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.322162][ T9] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 171.337310][ T9] asus 0003:0B05:1ABE.0003: unexpected long global item [ 171.347596][ T9] asus 0003:0B05:1ABE.0003: Asus hid parse failed: -22 [ 171.354675][ T9] asus 0003:0B05:1ABE.0003: probe with driver asus failed with error -22 [ 171.377298][ T9] usb 2-1: USB disconnect, device number 6 [ 171.565402][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.724590][ T7093] netlink: 'syz.5.281': attribute type 3 has an invalid length. [ 172.107145][ T30] audit: type=1400 audit(1778334920.521:422): avc: denied { append } for pid=7090 comm="syz.2.282" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.466199][ T29] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 172.496956][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.934082][ T29] usb 5-1: Product: syz [ 172.938943][ T29] usb 5-1: Manufacturer: syz [ 172.954686][ T29] usb 5-1: SerialNumber: syz [ 172.966090][ T29] usb 5-1: config 0 descriptor?? [ 173.097939][ T29] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 173.134299][ T7101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.192083][ T7091] netlink: 'syz.2.282': attribute type 29 has an invalid length. [ 173.538123][ T7108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.584948][ T7108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.745978][ T29] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 173.758689][ T30] audit: type=1400 audit(1778334922.191:423): avc: denied { mount } for pid=7111 comm="syz.0.287" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 173.788852][ T29] sq905c 5-1:0.0: Get version command failed [ 173.815868][ T7115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.288'. [ 173.826292][ T29] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 174.003859][ T30] audit: type=1400 audit(1778334922.201:424): avc: denied { mounton } for pid=7111 comm="syz.0.287" path="/55/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 174.115024][ T30] audit: type=1400 audit(1778334922.551:425): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 174.431272][ T30] audit: type=1400 audit(1778334922.871:426): avc: denied { write } for pid=7119 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 174.730783][ T7134] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 175.206845][ T5721] usb 5-1: USB disconnect, device number 5 [ 175.626953][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.293'. [ 175.658664][ T7137] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7137 comm=syz.5.293 [ 177.026809][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 177.404293][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 178.255595][ T30] audit: type=1400 audit(1778334926.691:427): avc: denied { ioctl } for pid=7165 comm="syz.0.301" path="/58/file0/file0" dev="fuse" ino=66 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 178.310546][ T7171] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 178.346905][ T7171] bond2: (slave lo): Enslaving as an active interface with an up link [ 178.373221][ T7171] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 178.836576][ T7192] netlink: 'syz.5.306': attribute type 3 has an invalid length. [ 179.654998][ T30] audit: type=1400 audit(1778334927.141:428): avc: denied { shutdown } for pid=7181 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.835517][ T803] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 179.930513][ T30] audit: type=1400 audit(1778334927.141:429): avc: denied { read } for pid=7181 comm="syz.1.304" lport=46746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.158858][ T803] usb 2-1: device descriptor read/64, error -71 [ 180.646475][ T803] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.244134][ T803] usb 2-1: device descriptor read/64, error -71 [ 181.425120][ T803] usb usb2-port1: attempt power cycle [ 181.667607][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 181.696052][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 181.848106][ T30] audit: type=1326 audit(1778334930.271:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7212 comm="syz.0.310" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0de859cdd9 code=0x0 [ 183.136204][ T30] audit: type=1400 audit(1778334931.571:431): avc: denied { bind } for pid=7226 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.225346][ T30] audit: type=1400 audit(1778334931.581:432): avc: denied { name_bind } for pid=7226 comm="syz.2.313" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 183.254784][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 183.295391][ T30] audit: type=1400 audit(1778334931.581:433): avc: denied { node_bind } for pid=7226 comm="syz.2.313" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 183.449953][ T7233] netlink: 'syz.2.316': attribute type 3 has an invalid length. [ 183.591212][ T7237] fuse: Unknown parameter '0x00000000000000060000000000000000000000000000000000000000' [ 185.639398][ T4930] Bluetooth: hci2: command 0x0406 tx timeout [ 185.639413][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 187.430599][ T30] audit: type=1400 audit(1778334935.871:434): avc: denied { create } for pid=7262 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.489179][ T30] audit: type=1400 audit(1778334935.891:435): avc: denied { ioctl } for pid=7262 comm="syz.0.323" path="socket:[18758]" dev="sockfs" ino=18758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.540136][ T30] audit: type=1400 audit(1778334935.891:436): avc: denied { connect } for pid=7262 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.718596][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.014113][ T30] audit: type=1804 audit(1778334937.461:437): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.328" name="/newroot/72/file1" dev="fuse" ino=1 res=1 errno=0 [ 189.053277][ T30] audit: type=1800 audit(1778334937.481:438): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.328" name="/" dev="fuse" ino=1 res=0 errno=0 [ 189.082009][ T30] audit: type=1800 audit(1778334937.491:439): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.328" name="/" dev="fuse" ino=1 res=0 errno=0 [ 189.475398][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 189.531675][ T7299] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 189.573724][ T7299] bond2: entered promiscuous mode [ 189.581008][ T7299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.603295][ T7299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.610706][ T7299] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 190.250912][ T7299] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 190.266104][ T7299] bond2: (slave vti0): making interface the new active one [ 190.275103][ T7299] vti0: entered promiscuous mode [ 190.287018][ T7299] bond2: (slave vti0): Enslaving as an active interface with an up link [ 192.533053][ T30] audit: type=1400 audit(1778334940.921:440): avc: denied { bind } for pid=7306 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.266699][ T803] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 193.452058][ T803] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 193.490947][ T803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.539064][ T803] usb 2-1: config 0 has no interface number 0 [ 193.586806][ T803] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 193.629382][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.686152][ T803] usb 2-1: Product: syz [ 193.708580][ T803] usb 2-1: Manufacturer: syz [ 193.738148][ T803] usb 2-1: SerialNumber: syz [ 193.769634][ T803] usb 2-1: config 0 descriptor?? [ 194.675321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 194.778468][ T30] audit: type=1400 audit(1778335199.218:441): avc: denied { execute } for pid=7349 comm="syz.4.345" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 194.825253][ T7346] mmap: syz.2.343 (7346) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 195.359025][ T5708] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 196.016589][ T5708] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 196.033980][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.042763][ T5708] usb 6-1: Product: syz [ 196.047732][ T5708] usb 6-1: Manufacturer: syz [ 196.067052][ T7356] netlink: 'syz.0.346': attribute type 29 has an invalid length. [ 196.075041][ T5708] usb 6-1: SerialNumber: syz [ 196.098309][ T5708] usb 6-1: config 0 descriptor?? [ 196.120978][ T5708] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 196.190919][ T7358] netlink: 280 bytes leftover after parsing attributes in process `syz.4.347'. [ 196.279946][ T803] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 196.310267][ T803] uvcvideo 2-1:0.64: No valid video chain found. [ 196.388239][ T803] usb 2-1: USB disconnect, device number 10 [ 196.551572][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.689245][ T5708] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 196.705182][ T5708] sq905c 6-1:0.0: Get version command failed [ 196.711786][ T5708] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 196.737246][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.976026][ T10] usb 6-1: USB disconnect, device number 3 [ 198.528602][ T803] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 198.620839][ T7379] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 198.656134][ T7379] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 198.668286][ T7379] overlayfs: missing 'lowerdir' [ 199.769834][ T803] usb 2-1: device descriptor read/all, error -71 [ 199.918776][ T7392] fuse: Unknown parameter '0x0000000000000005' [ 201.122602][ T7407] netlink: 'syz.4.358': attribute type 3 has an invalid length. [ 202.216760][ T7412] block device autoloading is deprecated and will be removed. [ 203.376912][ T7432] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 204.438111][ T5620] Bluetooth: hci5: command 0x1003 tx timeout [ 204.507007][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 204.908795][ T30] audit: type=1400 audit(1778335209.358:442): avc: denied { setopt } for pid=7460 comm="syz.2.373" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.993609][ T30] audit: type=1400 audit(1778335209.438:443): avc: denied { connect } for pid=7460 comm="syz.2.373" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.850927][ T30] audit: type=1400 audit(1778335210.298:444): avc: denied { getopt } for pid=7473 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 207.092372][ T7481] loop5: detected capacity change from 0 to 2640 [ 207.431176][ T7481] buffer_io_error: 323 callbacks suppressed [ 207.431193][ T7481] Buffer I/O error on dev loop5, logical block 0, async page read [ 207.512605][ T7486] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 207.530211][ T7486] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 207.561153][ T7491] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 207.575416][ T7486] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 207.596941][ T7486] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 207.614201][ T7491] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 207.624693][ T7486] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 207.705978][ T7486] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 207.714535][ T7486] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 209.597313][ T7504] netlink: 'syz.4.385': attribute type 3 has an invalid length. [ 211.597133][ T4979] ldm_validate_partition_table(): Disk read failed. [ 211.613449][ T4979] Dev loop5: unable to read RDB block 0 [ 211.637762][ T4979] loop5: unable to read partition table [ 211.678247][ T7512] netlink: 'syz.1.388': attribute type 3 has an invalid length. [ 211.698114][ T7514] netlink: 'syz.4.389': attribute type 3 has an invalid length. [ 212.967343][ T7546] o2cb: This node has not been configured. [ 212.973319][ T7546] o2cb: Cluster check failed. Fix errors before retrying. [ 212.981395][ T7546] (syz.2.393,7546,0):user_dlm_register:674 ERROR: status = -22 [ 212.989054][ T7546] (syz.2.393,7546,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 213.233244][ T30] audit: type=1400 audit(1778335217.408:445): avc: denied { write } for pid=7532 comm="syz.2.393" name="/" dev="ocfs2_dlmfs" ino=20481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.356843][ T30] audit: type=1400 audit(1778335217.408:446): avc: denied { add_name } for pid=7532 comm="syz.2.393" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.462509][ T30] audit: type=1400 audit(1778335217.408:447): avc: denied { create } for pid=7532 comm="syz.2.393" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 213.502405][ T30] audit: type=1400 audit(1778335217.418:448): avc: denied { associate } for pid=7532 comm="syz.2.393" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.604588][ T30] audit: type=1400 audit(1778335217.458:449): avc: denied { shutdown } for pid=7532 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.611830][ T7561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7561 comm=syz.1.400 [ 214.693675][ T7558] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 214.700417][ T7558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.709221][ T7558] vhci_hcd vhci_hcd.0: Device attached [ 214.729984][ T30] audit: type=1400 audit(1778335218.488:450): avc: denied { bind } for pid=7553 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.943043][ T7562] vhci_hcd: connection closed [ 214.967104][ T12] vhci_hcd vhci_hcd.1: stop threads [ 215.019937][ T12] vhci_hcd vhci_hcd.1: release socket [ 215.025883][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 217.624407][ T30] audit: type=1400 audit(1778335222.068:451): avc: denied { map } for pid=7593 comm="syz.5.409" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.354523][ T30] audit: type=1400 audit(1778335222.488:452): avc: denied { append } for pid=7604 comm="syz.2.412" name="comedi2" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.151755][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 219.176005][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 219.203210][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 219.221349][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 219.978492][ T30] audit: type=1326 audit(1778335224.208:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f320b59cdd9 code=0x0 [ 220.005737][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 220.014936][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 220.054988][ T30] audit: type=1326 audit(1778335224.418:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.0.415" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0de859cdd9 code=0x0 [ 220.130117][ T30] audit: type=1326 audit(1778335224.538:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.2.418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd666d9cdd9 code=0x0 [ 220.628250][ T5620] Bluetooth: hci5: command 0x1003 tx timeout [ 220.632863][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.715919][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 220.849921][ T7643] fuse: Unknown parameter '0xffffffffffffffff' [ 220.871976][ T7646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.423'. [ 220.889743][ T30] audit: type=1400 audit(1778335225.338:456): avc: denied { getopt } for pid=7640 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.954572][ T7646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.423'. [ 221.040744][ T7652] loop5: detected capacity change from 0 to 2640 [ 221.053339][ T7652] buffer_io_error: 339 callbacks suppressed [ 221.053357][ T7652] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.069987][ T7652] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.085499][ T7652] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.094334][ T7652] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.106023][ T7652] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.135244][ T7652] loop5: unable to read partition table [ 221.143052][ T7654] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 221.153553][ T7652] loop_reread_partitions: partition scan of loop5 (3„ Ύ‚³˜) failed (rc=-5) [ 221.163191][ T7654] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 221.172082][ T7654] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 221.289962][ T7654] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 221.300670][ T7654] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 222.631554][ T30] audit: type=1400 audit(1778335226.908:457): avc: denied { connect } for pid=7656 comm="syz.5.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 224.046923][ T30] audit: type=1400 audit(1778335228.498:458): avc: denied { write } for pid=7679 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.197828][ T30] audit: type=1400 audit(1778335228.628:459): avc: denied { read } for pid=7679 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.861974][ T30] audit: type=1400 audit(1778335230.308:460): avc: denied { connect } for pid=7696 comm="syz.5.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.952384][ T30] audit: type=1400 audit(1778335230.308:461): avc: denied { create } for pid=7696 comm="syz.5.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.978385][ T7700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.436'. [ 225.984886][ T30] audit: type=1400 audit(1778335230.308:462): avc: denied { write } for pid=7696 comm="syz.5.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 226.067344][ T7707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.086195][ T7700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.436'. [ 226.931530][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 227.011409][ T30] audit: type=1400 audit(1778335231.448:463): avc: denied { module_request } for pid=7722 comm="syz.2.439" kmod="rtnl-link-vxlane" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 227.054671][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 227.071511][ T7702] wireguard0: entered promiscuous mode [ 227.094356][ T30] audit: type=1400 audit(1778335231.538:464): avc: denied { write } for pid=7699 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.114917][ T7702] wireguard0: entered allmulticast mode [ 227.359918][ T7731] netlink: 'syz.4.441': attribute type 3 has an invalid length. [ 229.411479][ T5625] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 229.745337][ T5625] usb 6-1: Using ep0 maxpacket: 8 [ 229.761597][ T5625] usb 6-1: unable to get BOS descriptor or descriptor too short [ 229.771006][ T5625] usb 6-1: config 9 has an invalid interface number: 111 but max is 0 [ 229.788239][ T5625] usb 6-1: config 9 has no interface number 0 [ 229.806613][ T5625] usb 6-1: config 9 interface 111 has no altsetting 0 [ 229.818857][ T5625] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=f7.35 [ 229.829958][ T5625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.838014][ T5625] usb 6-1: Product: syz [ 229.842309][ T5625] usb 6-1: Manufacturer: syz [ 229.847017][ T5625] usb 6-1: SerialNumber: syz [ 229.913336][ T7757] team0: No ports can be present during mode change [ 230.330079][ T7761] netlink: 'syz.5.448': attribute type 61 has an invalid length. [ 230.353459][ T7764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.450'. [ 230.359470][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.448'. [ 230.374775][ T7764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.450'. [ 230.517344][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 230.530051][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 230.605361][ T30] audit: type=1326 audit(1778335235.048:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdcf39cdd9 code=0x0 [ 232.965608][ T30] audit: type=1400 audit(1778335237.418:466): avc: denied { create } for pid=7782 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 232.991214][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 233.062091][ T30] audit: type=1400 audit(1778335237.438:467): avc: denied { write } for pid=7782 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 233.095585][ T5625] peak_usb 6-1:9.111 can0: unable to request usb[type=0 value=1] err=-71 [ 233.111458][ T5625] peak_usb 6-1:9.111: unable to read PCAN-USB Pro FD firmware info (err -71) [ 233.246030][ T5618] Bluetooth: unknown link type 73 [ 233.251144][ T5618] Bluetooth: hci2: connection err: -111 [ 233.627175][ T7790] netlink: 'syz.1.460': attribute type 3 has an invalid length. [ 234.111127][ T5708] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 234.137026][ T5625] peak_usb 6-1:9.111: probe with driver peak_usb failed with error -71 [ 234.141162][ T7802] netlink: 48 bytes leftover after parsing attributes in process `syz.1.462'. [ 234.239763][ T5625] usb 6-1: USB disconnect, device number 4 [ 234.282935][ T5708] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 234.333325][ T5708] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 234.374580][ T5708] usb 1-1: Product: syz [ 234.403258][ T5708] usb 1-1: Manufacturer: syz [ 234.445198][ T5708] usb 1-1: SerialNumber: syz [ 234.636967][ T5708] usb 1-1: config 0 descriptor?? [ 234.661338][ T5708] ch341 1-1:0.0: ch341-uart converter detected [ 236.663198][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.754429][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.805669][ T7835] netlink: 'syz.5.470': attribute type 2 has an invalid length. [ 236.862137][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 236.913245][ T5708] usb 1-1: failed to send control message: -71 [ 236.948283][ T5708] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 237.055341][ T5708] usb 1-1: USB disconnect, device number 4 [ 237.297753][ T5708] ch341 1-1:0.0: device disconnected [ 237.616628][ T7843] netlink: 'syz.0.473': attribute type 3 has an invalid length. [ 237.994401][ T5620] Bluetooth: unknown link type 73 [ 237.999782][ T5620] Bluetooth: hci3: connection err: -111 [ 238.644867][ T30] audit: type=1400 audit(1778335242.638:468): avc: denied { read } for pid=7853 comm="syz.4.476" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 238.727523][ T30] audit: type=1400 audit(1778335242.638:469): avc: denied { open } for pid=7853 comm="syz.4.476" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 238.827277][ T30] audit: type=1400 audit(1778335243.278:470): avc: denied { create } for pid=7853 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 239.095128][ T7854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.123024][ T7854] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.198083][ T7854] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.206278][ T7865] fuse: Bad value for 'fd' [ 239.240307][ T30] audit: type=1400 audit(1778335243.688:471): avc: denied { execute } for pid=7863 comm="syz.2.479" name="file0" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.277157][ T7854] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.287894][ T7854] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 239.339997][ T7854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.348615][ T7854] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 239.358506][ T7854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.371833][ T7854] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 239.531341][ T30] audit: type=1326 audit(1778335243.978:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.4.481" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f320b59cdd9 code=0x0 [ 240.070074][ T30] audit: type=1400 audit(1778335244.518:473): avc: denied { mount } for pid=7871 comm="syz.2.482" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 240.072473][ T7875] overlayfs: failed to resolve '/Z[]^_`abcdefghijklmnopqrstuvwxyz{|}~': -2 [ 240.096430][ T30] audit: type=1400 audit(1778335244.518:474): avc: denied { mounton } for pid=7871 comm="syz.2.482" path="/91/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 240.125104][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 240.136792][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 240.161223][ T30] audit: type=1400 audit(1778335244.598:475): avc: denied { mount } for pid=7871 comm="syz.2.482" name="/" dev="autofs" ino=20460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 240.238863][ T30] audit: type=1326 audit(1778335244.688:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.1.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdcf39cdd9 code=0x0 [ 240.297257][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.396006][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 240.577623][ T10] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 240.601762][ T10] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 240.620839][ T10] usb 5-1: Manufacturer: syz [ 240.639787][ T10] usb 5-1: config 0 descriptor?? [ 240.660883][ T10] uvcvideo 5-1:0.0: Found UVC 0.00 device (18ec:3288) [ 240.691157][ T10] uvcvideo 5-1:0.0: No valid video chain found. [ 240.716933][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.738772][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.767446][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.797553][ T29] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 240.821183][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.843073][ T29] usb 3-1: Product: syz [ 240.859141][ T29] usb 3-1: Manufacturer: syz [ 240.875011][ T29] usb 3-1: SerialNumber: syz [ 240.916508][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.183023][ T29] usb 3-1: unable to issue vendor read request (ret = -71) [ 241.211522][ T29] usb 3-1: unable to issue vendor read request (ret = -71) [ 241.232434][ T29] usb 3-1: unable to issue vendor read request (ret = -71) [ 241.260105][ T29] usb 3-1: unable to issue vendor read request (ret = -71) [ 241.315364][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 241.395946][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 241.395955][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 241.436570][ T7896] netlink: 'syz.5.485': attribute type 3 has an invalid length. [ 241.439011][ T29] usb 3-1: USB disconnect, device number 6 [ 241.653508][ T30] audit: type=1400 audit(1778335246.098:477): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 242.795901][ T10] usb 5-1: USB disconnect, device number 6 [ 242.980981][ T5620] Bluetooth: unknown link type 73 [ 242.986789][ T5620] Bluetooth: hci0: connection err: -111 [ 242.995393][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.599358][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 243.599381][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 243.599435][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 243.636649][ T7925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.494'. [ 243.651880][ T7925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.494'. [ 244.016781][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 244.016801][ T30] audit: type=1400 audit(1778335248.448:482): avc: denied { name_bind 0x1000000 } for pid=7913 comm="syz.0.493" path="socket:[21733]" dev="sockfs" ino=21733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 244.795471][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 245.067016][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.095383][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.126519][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.148223][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 245.160840][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.059620][ T10] usb 1-1: config 0 descriptor?? [ 246.110767][ T10] usb 1-1: can't set config #0, error -71 [ 246.124771][ T10] usb 1-1: USB disconnect, device number 5 [ 246.493183][ T7948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.816616][ T7970] netlink: 'syz.0.506': attribute type 29 has an invalid length. [ 248.287354][ T30] audit: type=1400 audit(1778335252.738:483): avc: denied { connect } for pid=7971 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 248.423623][ T7976] fuse: Unknown parameter '0x0000000000000006' [ 248.575841][ T5625] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 248.746438][ T5625] usb 1-1: Using ep0 maxpacket: 16 [ 248.764179][ T5625] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.788963][ T5625] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.812842][ T5625] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 248.833786][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.859918][ T5625] usb 1-1: config 0 descriptor?? [ 249.376819][ T5625] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 249.595571][ C0] ================================================================== [ 249.603653][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x103c/0x10a0 [ 249.611648][ C0] Read of size 1 at addr ffff888035c0ffff by task syz.0.507/7983 [ 249.619365][ C0] [ 249.621689][ C0] CPU: 0 UID: 0 PID: 7983 Comm: syz.0.507 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.621710][ C0] Tainted: [L]=SOFTLOCKUP [ 249.621716][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.621725][ C0] Call Trace: [ 249.621731][ C0] [ 249.621737][ C0] dump_stack_lvl+0x100/0x190 [ 249.621758][ C0] print_report+0x13d/0x4b0 [ 249.621780][ C0] ? __virt_addr_valid+0x239/0x430 [ 249.621800][ C0] ? mcp2221_raw_event+0x103c/0x10a0 [ 249.621827][ C0] kasan_report+0xdf/0x1d0 [ 249.621846][ C0] ? mcp2221_raw_event+0x103c/0x10a0 [ 249.621871][ C0] mcp2221_raw_event+0x103c/0x10a0 [ 249.621894][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 249.621915][ C0] __hid_input_report.constprop.0+0x314/0x460 [ 249.621933][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 249.621955][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 249.621974][ C0] hid_irq_in+0x52e/0x6b0 [ 249.621988][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 249.622007][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 249.622023][ C0] dummy_timer+0xda1/0x36c0 [ 249.622045][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 249.622066][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 249.622081][ C0] ? rcu_is_watching+0x12/0xc0 [ 249.622104][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 249.622123][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 249.622140][ C0] __hrtimer_run_queues+0x470/0xa00 [ 249.622168][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 249.622192][ C0] handle_softirqs+0x1ea/0xa00 [ 249.622215][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 249.622236][ C0] ? _raw_spin_unlock+0x28/0x50 [ 249.622252][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 249.622268][ C0] __irq_exit_rcu+0x162/0x210 [ 249.622288][ C0] irq_exit_rcu+0x9/0x30 [ 249.622309][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 249.622330][ C0] [ 249.622335][ C0] [ 249.622341][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.622358][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x64/0x70 [ 249.622377][ C0] Code: 82 b0 16 00 00 83 f8 02 75 e6 48 8b 8a b8 16 00 00 8b 92 b4 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 cd 48 89 01 48 89 34 c1 d7 03 85 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 249.622392][ C0] RSP: 0018:ffffc90003c0f958 EFLAGS: 00000287 [ 249.622411][ C0] RAX: 00000000000008bb RBX: ffffffff90611e70 RCX: ffffc900100db000 [ 249.622421][ C0] RDX: 0000000000080000 RSI: ffffffff8218d49d RDI: ffffffff8e40f470 [ 249.622431][ C0] RBP: 00007f0de859ca6b R08: 0000000000000001 R09: 0000000000000000 [ 249.622441][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 00007f0de859ca6b [ 249.622450][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802e54ca00 [ 249.622463][ C0] ? bpf_ksym_find+0x7d/0x1c0 [ 249.622486][ C0] bpf_ksym_find+0x7d/0x1c0 [ 249.622507][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.622526][ C0] is_bpf_text_address+0x58/0x1a0 [ 249.622547][ C0] kernel_text_address+0x8d/0x100 [ 249.622568][ C0] __kernel_text_address+0xd/0x30 [ 249.622587][ C0] unwind_get_return_address+0x59/0xa0 [ 249.622609][ C0] arch_stack_walk+0xa6/0xf0 [ 249.622634][ C0] ? raw_ioctl+0x265/0x2b80 [ 249.622649][ C0] stack_trace_save+0x8e/0xc0 [ 249.622664][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 249.622680][ C0] ? __lock_acquire+0x4a5/0x2630 [ 249.622699][ C0] ? do_raw_spin_lock+0x128/0x260 [ 249.622721][ C0] kasan_save_stack+0x30/0x50 [ 249.622735][ C0] ? kasan_save_stack+0x30/0x50 [ 249.622748][ C0] ? kasan_save_track+0x14/0x30 [ 249.622761][ C0] ? kasan_save_free_info+0x3b/0x70 [ 249.622780][ C0] ? __kasan_slab_free+0x5f/0x80 [ 249.622794][ C0] ? kfree+0x223/0x6c0 [ 249.622812][ C0] ? raw_ioctl+0x265/0x2b80 [ 249.622826][ C0] ? __x64_sys_ioctl+0x18e/0x210 [ 249.622840][ C0] ? do_syscall_64+0x10b/0xf80 [ 249.622860][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.622886][ C0] kasan_save_track+0x14/0x30 [ 249.622900][ C0] kasan_save_free_info+0x3b/0x70 [ 249.622919][ C0] __kasan_slab_free+0x5f/0x80 [ 249.622932][ C0] ? raw_ioctl+0x1d0/0x2b80 [ 249.622946][ C0] kfree+0x223/0x6c0 [ 249.622966][ C0] raw_ioctl+0x265/0x2b80 [ 249.622982][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 249.622997][ C0] ? selinux_file_ioctl+0xb6/0x290 [ 249.623017][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 249.623032][ C0] __x64_sys_ioctl+0x18e/0x210 [ 249.623048][ C0] do_syscall_64+0x10b/0xf80 [ 249.623067][ C0] ? clear_bhb_loop+0x40/0x90 [ 249.623084][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.623099][ C0] RIP: 0033:0x7f0de859ca6b [ 249.623112][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 249.623128][ C0] RSP: 002b:00007f0de939bf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.623142][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f0de859ca6b [ 249.623152][ C0] RDX: 00007f0de939bfe0 RSI: 0000000040085507 RDI: 0000000000000005 [ 249.623164][ C0] RBP: 0000000000000005 R08: 00007f0de8940320 R09: 0000000000000000 [ 249.623174][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 0000200000000080 [ 249.623185][ C0] R13: 0000000000000000 R14: 00007f0de8816090 R15: 00007ffcb6d80318 [ 249.623201][ C0] [ 249.623207][ C0] [ 250.136753][ C0] Allocated by task 3409: [ 250.141064][ C0] kasan_save_stack+0x30/0x50 [ 250.145728][ C0] kasan_save_track+0x14/0x30 [ 250.150408][ C0] __kasan_kmalloc+0xaa/0xb0 [ 250.154994][ C0] __kmalloc_node_track_caller_noprof+0x304/0x850 [ 250.161396][ C0] kmalloc_reserve+0xe8/0x350 [ 250.166063][ C0] __alloc_skb+0x185/0x710 [ 250.170468][ C0] nsim_dev_trap_report_work+0x2af/0xd20 [ 250.176087][ C0] process_one_work+0xa0e/0x1980 [ 250.181043][ C0] worker_thread+0x5ef/0xe50 [ 250.185620][ C0] kthread+0x370/0x450 [ 250.189673][ C0] ret_from_fork+0x72b/0xd50 [ 250.194246][ C0] ret_from_fork_asm+0x1a/0x30 [ 250.198996][ C0] [ 250.201306][ C0] Freed by task 3409: [ 250.205265][ C0] kasan_save_stack+0x30/0x50 [ 250.209930][ C0] kasan_save_track+0x14/0x30 [ 250.214599][ C0] kasan_save_free_info+0x3b/0x70 [ 250.219610][ C0] __kasan_slab_free+0x5f/0x80 [ 250.224365][ C0] kfree+0x223/0x6c0 [ 250.228245][ C0] skb_free_head+0xb9/0x160 [ 250.232740][ C0] skb_release_data+0x6c5/0x8e0 [ 250.237567][ C0] consume_skb+0xc4/0x110 [ 250.241876][ C0] nsim_dev_trap_report_work+0x8de/0xd20 [ 250.247491][ C0] process_one_work+0xa0e/0x1980 [ 250.252426][ C0] worker_thread+0x5ef/0xe50 [ 250.257004][ C0] kthread+0x370/0x450 [ 250.261060][ C0] ret_from_fork+0x72b/0xd50 [ 250.265644][ C0] ret_from_fork_asm+0x1a/0x30 [ 250.270398][ C0] [ 250.272713][ C0] The buggy address belongs to the object at ffff888035c0e000 [ 250.272713][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 250.286777][ C0] The buggy address is located 4095 bytes to the right of [ 250.286777][ C0] allocated 4096-byte region [ffff888035c0e000, ffff888035c0f000) [ 250.301772][ C0] [ 250.304078][ C0] The buggy address belongs to the physical page: [ 250.310467][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35c08 [ 250.319221][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 250.327697][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 250.335234][ C0] page_type: f5(slab) [ 250.339200][ C0] raw: 00fff00000000040 ffff88813fe35140 dead000000000100 dead000000000122 [ 250.347769][ C0] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 250.356333][ C0] head: 00fff00000000040 ffff88813fe35140 dead000000000100 dead000000000122 [ 250.364985][ C0] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 250.373635][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 250.382286][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 250.390935][ C0] page dumped because: kasan: bad access detected [ 250.397327][ C0] page_owner tracks the page as allocated [ 250.403028][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5047, tgid 5047 (udevd), ts 22870429497, free_ts 22849474315 [ 250.422976][ C0] post_alloc_hook+0x153/0x170 [ 250.427740][ C0] get_page_from_freelist+0x11a6/0x33b0 [ 250.433274][ C0] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 250.439163][ C0] new_slab+0xa6/0x6c0 [ 250.443218][ C0] refill_objects+0x277/0x420 [ 250.447882][ C0] __pcs_replace_empty_main+0x375/0x650 [ 250.453413][ C0] __kmalloc_cache_noprof+0x493/0x6f0 [ 250.458772][ C0] tomoyo_find_next_domain+0xc6e/0x2010 [ 250.464297][ C0] tomoyo_bprm_check_security+0x12d/0x1d0 [ 250.470006][ C0] security_bprm_check+0x87/0x1e0 [ 250.475008][ C0] bprm_execve+0x845/0x1740 [ 250.479491][ C0] do_execveat_common.isra.0+0x4a5/0x580 [ 250.485104][ C0] __x64_sys_execve+0x93/0xd0 [ 250.489772][ C0] do_syscall_64+0x10b/0xf80 [ 250.494352][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.500223][ C0] page last free pid 4987 tgid 4987 stack trace: [ 250.506523][ C0] __free_frozen_pages+0x747/0x1040 [ 250.511704][ C0] qlist_free_all+0x47/0xf0 [ 250.516192][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 250.521634][ C0] __kasan_slab_alloc+0x69/0x90 [ 250.526463][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 250.531907][ C0] vm_area_dup+0x27/0x8e0 [ 250.536221][ C0] dup_mmap+0x6f6/0x2180 [ 250.540446][ C0] copy_process+0x6c78/0x7ed0 [ 250.545098][ C0] kernel_clone+0x12e/0x9c0 [ 250.549576][ C0] __do_sys_clone+0xd9/0x120 [ 250.554149][ C0] do_syscall_64+0x10b/0xf80 [ 250.558721][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.564592][ C0] [ 250.566896][ C0] Memory state around the buggy address: [ 250.572516][ C0] ffff888035c0fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 250.580555][ C0] ffff888035c0ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 250.588598][ C0] >ffff888035c0ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 250.596676][ C0] ^ [ 250.604628][ C0] ffff888035c10000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 250.612681][ C0] ffff888035c10080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 250.620728][ C0] ================================================================== [ 250.628766][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 250.635963][ C0] CPU: 0 UID: 0 PID: 7983 Comm: syz.0.507 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.646704][ C0] Tainted: [L]=SOFTLOCKUP [ 250.651007][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.661041][ C0] Call Trace: [ 250.664300][ C0] [ 250.667123][ C0] dump_stack_lvl+0x100/0x190 [ 250.671789][ C0] vpanic+0x552/0x970 [ 250.675753][ C0] ? __pfx_vpanic+0x10/0x10 [ 250.680237][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 250.685244][ C0] ? mcp2221_raw_event+0x103c/0x10a0 [ 250.690525][ C0] panic+0xd1/0xe0 [ 250.694227][ C0] ? __pfx_panic+0x10/0x10 [ 250.698624][ C0] ? end_report.part.0+0x23/0x90 [ 250.703549][ C0] ? rcu_is_watching+0x12/0xc0 [ 250.708314][ C0] ? end_report.part.0+0x23/0x90 [ 250.713240][ C0] check_panic_on_warn.cold+0x19/0x34 [ 250.718638][ C0] end_report.part.0+0x3a/0x90 [ 250.723389][ C0] kasan_report.cold+0xe/0x18 [ 250.728053][ C0] ? mcp2221_raw_event+0x103c/0x10a0 [ 250.733330][ C0] mcp2221_raw_event+0x103c/0x10a0 [ 250.738436][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 250.744230][ C0] __hid_input_report.constprop.0+0x314/0x460 [ 250.750293][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 250.755741][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 250.761302][ C0] hid_irq_in+0x52e/0x6b0 [ 250.765614][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 250.770983][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 250.776210][ C0] dummy_timer+0xda1/0x36c0 [ 250.780740][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 250.786537][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 250.791475][ C0] ? rcu_is_watching+0x12/0xc0 [ 250.796232][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 250.802038][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 250.806975][ C0] __hrtimer_run_queues+0x470/0xa00 [ 250.812187][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 250.817363][ C0] handle_softirqs+0x1ea/0xa00 [ 250.822315][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 250.827602][ C0] ? _raw_spin_unlock+0x28/0x50 [ 250.832458][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 250.838107][ C0] __irq_exit_rcu+0x162/0x210 [ 250.842777][ C0] irq_exit_rcu+0x9/0x30 [ 250.847008][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 250.852632][ C0] [ 250.855546][ C0] [ 250.858475][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.864437][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x64/0x70 [ 250.870573][ C0] Code: 82 b0 16 00 00 83 f8 02 75 e6 48 8b 8a b8 16 00 00 8b 92 b4 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 cd 48 89 01 48 89 34 c1 d7 03 85 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 250.890162][ C0] RSP: 0018:ffffc90003c0f958 EFLAGS: 00000287 [ 250.896225][ C0] RAX: 00000000000008bb RBX: ffffffff90611e70 RCX: ffffc900100db000 [ 250.904177][ C0] RDX: 0000000000080000 RSI: ffffffff8218d49d RDI: ffffffff8e40f470 [ 250.912138][ C0] RBP: 00007f0de859ca6b R08: 0000000000000001 R09: 0000000000000000 [ 250.920264][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 00007f0de859ca6b [ 250.928222][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802e54ca00 [ 250.936176][ C0] ? bpf_ksym_find+0x7d/0x1c0 [ 250.940846][ C0] bpf_ksym_find+0x7d/0x1c0 [ 250.945337][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.951472][ C0] is_bpf_text_address+0x58/0x1a0 [ 250.956494][ C0] kernel_text_address+0x8d/0x100 [ 250.961516][ C0] __kernel_text_address+0xd/0x30 [ 250.966575][ C0] unwind_get_return_address+0x59/0xa0 [ 250.972037][ C0] arch_stack_walk+0xa6/0xf0 [ 250.976623][ C0] ? raw_ioctl+0x265/0x2b80 [ 250.981110][ C0] stack_trace_save+0x8e/0xc0 [ 250.985767][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 250.991122][ C0] ? __lock_acquire+0x4a5/0x2630 [ 250.996043][ C0] ? do_raw_spin_lock+0x128/0x260 [ 251.001056][ C0] kasan_save_stack+0x30/0x50 [ 251.005712][ C0] ? kasan_save_stack+0x30/0x50 [ 251.010541][ C0] ? kasan_save_track+0x14/0x30 [ 251.015380][ C0] ? kasan_save_free_info+0x3b/0x70 [ 251.020562][ C0] ? __kasan_slab_free+0x5f/0x80 [ 251.025495][ C0] ? kfree+0x223/0x6c0 [ 251.029570][ C0] ? raw_ioctl+0x265/0x2b80 [ 251.034068][ C0] ? __x64_sys_ioctl+0x18e/0x210 [ 251.038998][ C0] ? do_syscall_64+0x10b/0xf80 [ 251.043761][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.049822][ C0] kasan_save_track+0x14/0x30 [ 251.054483][ C0] kasan_save_free_info+0x3b/0x70 [ 251.059502][ C0] __kasan_slab_free+0x5f/0x80 [ 251.064244][ C0] ? raw_ioctl+0x1d0/0x2b80 [ 251.068741][ C0] kfree+0x223/0x6c0 [ 251.072625][ C0] raw_ioctl+0x265/0x2b80 [ 251.076942][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 251.081689][ C0] ? selinux_file_ioctl+0xb6/0x290 [ 251.086788][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 251.091535][ C0] __x64_sys_ioctl+0x18e/0x210 [ 251.096283][ C0] do_syscall_64+0x10b/0xf80 [ 251.100863][ C0] ? clear_bhb_loop+0x40/0x90 [ 251.105529][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.111425][ C0] RIP: 0033:0x7f0de859ca6b [ 251.115820][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 251.135410][ C0] RSP: 002b:00007f0de939bf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.143806][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f0de859ca6b [ 251.151760][ C0] RDX: 00007f0de939bfe0 RSI: 0000000040085507 RDI: 0000000000000005 [ 251.159712][ C0] RBP: 0000000000000005 R08: 00007f0de8940320 R09: 0000000000000000 [ 251.167661][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 0000200000000080 [ 251.175623][ C0] R13: 0000000000000000 R14: 00007f0de8816090 R15: 00007ffcb6d80318 [ 251.183577][ C0] [ 251.187015][ C0] Kernel Offset: disabled [ 251.191333][ C0] Rebooting in 86400 seconds..