last executing test programs: 13m51.198011721s ago: executing program 1 (id=723): memfd_secret(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @empty, 0x400}, 0x1c) listen(0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x367, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) 13m48.607335834s ago: executing program 1 (id=727): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13m47.058078174s ago: executing program 1 (id=734): ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x3) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="f89a", 0x2}], 0x1}, 0x4000000) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000004c80)=@conn_svc_rsp={0x0, 0x0, 0xa, "670016d4", {0x3, 0x6, 0x0, 0x1, 0x9, 0x8, 0x6}}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/95) 13m43.987902986s ago: executing program 1 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0xfffffff0) 13m43.68584557s ago: executing program 1 (id=748): write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x63c, &(0x7f0000000240)={0x0, 0xf2cf, 0x80}, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x101000) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3c, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x6}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x28, 0x0, &(0x7f00000007c0)="e02742e8680d85ff9782762f86dd6cea8b94a42626f6aff90292fb7b0500ac5af69c7cb69c7ceaf0", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000001c0)=[{&(0x7f00000016c0)="3e96197aa01f8cefe5ef320687200a1bcbb42c89da31298448326c6b0048f1a395689ac2d0dd586b36d2971679206cfba8b52697c55a4ad804d73b1535e7a829294231d262078769f17bd839ed18dc5c3377757d0e24b65fa700bbc2e68109e57bcde0766cd6e42bf7215ab8ab407c1fc832804857d3a97b", 0x78}], 0x1) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8001, 0x0) pwritev(r6, &(0x7f0000001300)=[{&(0x7f0000001040)='4', 0x1}], 0x1, 0x0, 0x0) r7 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) 13m42.634153634s ago: executing program 1 (id=752): socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 13m42.375552096s ago: executing program 32 (id=752): socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 10m27.26592797s ago: executing program 5 (id=1441): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 10m26.21559276s ago: executing program 5 (id=1442): r0 = mq_open(&(0x7f0000000100)='\x00', 0x80, 0x10, &(0x7f0000000280)={0x100, 0x100, 0xfffffffffffffff9}) mq_notify(r0, &(0x7f0000000400)={0x0, 0x23, 0x1, @thr={&(0x7f00000004c0)="c3b609b61e3abf8edde9645d30e42e817b9ad397c07ed4379979bdc1ec7b259f73c57c5e89bd8592ee4262b8c5ec93d263c2e74d30ca56165e00b9374b8b82be6b33d9ef8550648de3513531604611993543fa9418bc26350c829e9e24e00b", &(0x7f0000000580)="5dfb65771461313e506b9cde7d1a410352b982edf90ca72c3b1f58047371976ca3f293f57d218646558636de588dd18b71ffa0e05558c0558e3565dfbf9fa842859bac3a6af1997d682ad3bb"}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x2041) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001700000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100fff50000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000001600010073797a3000000089a91a091abbec420d24001280200001800c000100636f756e74657200100002800c000240000000003318eff10800034000000110140000001000010000000000000000000084000a2ccd835f04c2f31d22cd778d9e5b984561922fa0d3fc9f294db3ccccbec64dae43f34a232bfe385f0a92890df4"], 0xb0}}, 0x8000) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/82, 0x52}], 0x1}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002180)=""/4096, 0x1000}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003840)=""/4096, 0x1000}], 0x1}}], 0x3, 0x400000cb, 0x0) 10m23.643049361s ago: executing program 5 (id=1447): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x3f8, 0xffffffff, 0x98, 0x2b0, 0x98, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@empty, [], @ipv6=@private0}, {@ipv6=@private1, [], @ipv6=@local}, {@ipv4=@dev, [], @ipv4=@private}, {@ipv4=@remote, [], @ipv4=@empty}], 0xb}}, @common=@icmp={{0x28}, {0x0, "e2fa"}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trusted 00000000000000000074 '], 0x32, 0xfffffffffffffffc) r1 = socket$inet(0x2, 0x3, 0xfffff801) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 10m22.326558125s ago: executing program 5 (id=1451): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x17b4, 0x30, 0x100, 0x0, 0x0, {}, [{0x17a0, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x100, 0x6, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'filter\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x29870492, 0x0, 0x8000, 0x571e}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x100, 0x7, 0xffffff81, 0x2}}]}, {0x97, 0x6, "240ccdd66bae098f252ff159b1473c717d0dc803742ff85bdbf3e4fd279bb8b19ce523f2073468f6b20bc07621a317a35718196acd74601c84abec5e20e91c5e9eb335dc4cd52bb4d44572c5228edbe80f807f22e39f439a63da6acb033ca09a21836076997e3f3f51ae9a94a8bf0a5c06e07bd1a03e677b2bf3c97bc186c290eb21a7a7a03c152641639fb663a5d610960c35"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xb0, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0xf801, 0x7, 0x9, 0x401}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x87, 0x0, 0x1, 0x24}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x3b, 0x6, "2b7cde83d916bcedf85bb11742f074225bd3520de00003a7840a734408b5bad1a48aa041a2012e8c2c475f0d31c79dc52886174e905c72"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ct={0x124, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "063c760acba31b00"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0xd0, 0x6, "eee186934c609fa082c3ba85be6a6b4828f13688112be8ab01e58825b0ccabcb129a7ce60c2a02a1918f8ee6765604c607d949a80a3837da2badfa4cda461d84328878c8d1ef806e84a96d98501b175198457733436310d26dfc3b3c9eef8a56e8ca3d48869998032f583c1810c05336c6b62c77b47208abc23f4c281082460bde6ad3798eb0e6f07e66cbcb045ecb9efb5e29e6edd22ab1542f1909bb2e60627487d75ba5c2b139153678e0d12deb577771ffd899e3a52053888c08213eb94bc9e63946330e568675c7280c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x1b4, 0xb, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x7, 0x8, 0x4}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x7, 0x3, 0x5}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x5, 0xfffffeff, 0x9}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x0, 0x2, 0x6}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x4, 0x8, 0x8000}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x8000, 0x0, 0xb, 0x6}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xb, 0x7, 0x1, 0x5}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0x3, 0x9}, 0x35}}]}, {0xa5, 0x6, "b83f60f97baf5a78e46489a1aba4a7875134bd5731bd5e49af2c700ada85bd50a4205c507de3327878ca9f18242a53b01954ab3af5acae27bd19344fe99225d81d219a1de1dfd4f076765efc464c8bb75ab6bd9398bd894a93fc92b618026e9e28c2150e49210840767dda49c296ea12064956c05a7503c6fa090545130deef681fd48951da1ccac3932b1c1a2a9a6c798a164eecafac47d010ffe7782f7d30157"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x134, 0x16, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x401}, @TCA_IPT_INDEX={0x8, 0x3, 0xc}]}, {0xf9, 0x6, "ae063b05fd3b65c8cb94c41e4ac926600efc6ef820711254e31892c4d4d1ec5e777845da413aa72ffb29af9232fefe531d3a386ea3a5a5d51775ed3e4cfea2427bb4d76d252f0adb5722a5fe64a6a0299cbb6b56a21e6cad4cc2cb43bc8b45a5df15217ae6fde2b6ec1b6aca50e0e280d2f5e61a61ce9b2a77191f326f25d215226dc1ad81eb8eec2f50f87dac3f4ea4548c25b80d22f45d5a035ff71b68f7002b41a254b4538444596170df9d619869ba4013e745bc25239074d927b89d11e24fdde1c842468324e4264277b017f742a9a04b8ef0aef7f0c62c974abb45c1b202139a60327512c89d1f17656815d5392a5dd51eba"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x1048, 0x6, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x10c, 0x1c, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "7aef4376911d572367cf55849e582f34"}]}, {0xcd, 0x6, "22452f30e8cd8d540261d69e75a8ea05346b256450ca15f3e17558c9c386fce20b1818b3eceb1e77c1299731a0a2852f6b4c1a739a8c6bc73cf3b12506e524dc7dc4df384545f3d945e3fd91036b578b2cc1eb25556718729d4a1de6f9a0a63c7d18aa9acbb037c6b92aeb3cf143fbd732388cd0d27d255d07f48930c3a503a5f8caad56446a484a61ebc16998bb8f7891941a0c1db2274a3614fcc465a4c994bbfc3150d80d2e7c57ca31aa79af63e53cfc239e6719436f94b9c4987799da3fb2f883cc8f1c1de237"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x17b4}, 0x1, 0x0, 0x0, 0x884}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback, 0xfffffffe}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000900040000008b1eb1956d137c6e0967152a245425d50700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2205080, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000000c0)={0xfffffe00, 0xad, 0x9, 0x5, 0x1, "af672a33c453d8adb3d6f800000000000016d1", 0x3, 0x7}) 10m17.805048524s ago: executing program 5 (id=1463): r0 = mq_open(&(0x7f0000000100)='\x00', 0x80, 0x10, &(0x7f0000000280)={0x100, 0x100, 0xfffffffffffffff9}) mq_notify(r0, &(0x7f0000000400)={0x0, 0x23, 0x1, @thr={&(0x7f00000004c0)="c3b609b61e3abf8edde9645d30e42e817b9ad397c07ed4379979bdc1ec7b259f73c57c5e89bd8592ee4262b8c5ec93d263c2e74d30ca56165e00b9374b8b82be6b33d9ef8550648de3513531604611993543fa9418bc26350c829e9e24e00b61c69ccfd1c370d1944ce30477eb3e4fb49a463af02f0980f61b0f3f703f452f9ab72f9f0385dd1f5aaf575cb7b40cd66792a1d1f6dcf57fb48ea38b2a622488a793799a2ca1980c5dde4b2068c500ddf5b8a2", &(0x7f0000000580)="5dfb65771461313e506b9cde7d1a410352b982edf90ca72c3b1f58047371976ca3f293f57d218646558636de588dd18b71ffa0e05558c0558e3565dfbf9fa842859bac3a6af1997d682ad3bb"}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x2041) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001700000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100fff50000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000001600010073797a3000000089a91a091abbec420d24001280200001800c000100636f756e74657200100002800c000240000000003318eff10800034000000110140000001000010000000000000000000084000a2ccd835f04c2f31d22cd778d9e5b984561922fa0d3fc9f294db3ccccbec64dae43f34a232bfe385f0a92890df4"], 0xb0}}, 0x8000) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000) 10m17.397928223s ago: executing program 5 (id=1466): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$video(&(0x7f00000001c0), 0x0, 0x12401) r2 = syz_io_uring_setup(0x1090, &(0x7f0000000340)={0x0, 0xf1bd, 0x400, 0x0, 0x400132a}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x7f, 0x1000, 0x80080}) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47ba, 0x233a, 0x0, 0x0, 0x41) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"}) r5 = dup(r0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 10m16.186433696s ago: executing program 33 (id=1466): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$video(&(0x7f00000001c0), 0x0, 0x12401) r2 = syz_io_uring_setup(0x1090, &(0x7f0000000340)={0x0, 0xf1bd, 0x400, 0x0, 0x400132a}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x7f, 0x1000, 0x80080}) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47ba, 0x233a, 0x0, 0x0, 0x41) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"}) r5 = dup(r0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3m36.73580513s ago: executing program 2 (id=2914): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x40, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x29, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad85233e2eb702840054f9e143ec6c09650dbe7a152"]}]}, 0x40}], 0x1}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 3m35.469984902s ago: executing program 2 (id=2916): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x400}) readv(r0, &(0x7f0000000040), 0x1) 3m34.905645282s ago: executing program 2 (id=2918): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41a}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x80000001) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getpgid(r4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup(r5) write$selinux_create(r6, &(0x7f0000000180)=@objname={'system_u:object_r:inetd_var_run_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x2, 0x20, './file0\x00'}, 0x70) 3m23.780194938s ago: executing program 2 (id=2922): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1c) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) 3m22.832049679s ago: executing program 2 (id=2956): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) write$sndseq(r1, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002880)=@filter={'filter\x00', 0x2, 0x4, 0x24a8, 0xffffffff, 0x2300, 0x0, 0x2230, 0xfeffffff, 0xffffffff, 0x23d8, 0x23d8, 0x23d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x2108, 0x2230, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup/syz1\x00', 0x8, {0x5}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup/syz0\x00', 0x40, {0x9}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5d6, 'system_u:object_r:scsi_generic_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth1_to_bridge\x00', 'veth0_to_bridge\x00', {}, {0xff}}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x1, 0x2}, {0x3, 0x4, 0x2}, 0x8, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2508) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) 3m19.357367679s ago: executing program 2 (id=2966): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000800000000000000010000000000000a00000000da00"/82], 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0082086a2e690ee9e654e1df00"/39], 0x48) modify_ldt$write2(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x76, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "2431d0edd9b36cb714a2f7671eacf04be3b08353e3a3641776f5687556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a30056eff784b46ddab72b1b803000000000000008dfe2500"}, 0xd8) listen(r2, 0x8602) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x890b, &(0x7f0000001480)={{0x0, 0x100000000040002, 0x9, 0xfffffffffffffffd, 0x0, 0x2000000000003, 0x0, 0x2, 0x9, 0x121, 0x9, 0x5, 0x6, 0x5, 0x100000000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="09000000010001", 0x7) r7 = fcntl$dupfd(r5, 0x0, r5) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000000), 0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000180)={0x10000000}) 3m18.640346134s ago: executing program 34 (id=2966): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000800000000000000010000000000000a00000000da00"/82], 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0082086a2e690ee9e654e1df00"/39], 0x48) modify_ldt$write2(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x76, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "2431d0edd9b36cb714a2f7671eacf04be3b08353e3a3641776f5687556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a30056eff784b46ddab72b1b803000000000000008dfe2500"}, 0xd8) listen(r2, 0x8602) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x890b, &(0x7f0000001480)={{0x0, 0x100000000040002, 0x9, 0xfffffffffffffffd, 0x0, 0x2000000000003, 0x0, 0x2, 0x9, 0x121, 0x9, 0x5, 0x6, 0x5, 0x100000000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="09000000010001", 0x7) r7 = fcntl$dupfd(r5, 0x0, r5) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000000), 0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000180)={0x10000000}) 1m10.697710294s ago: executing program 0 (id=3346): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x48801, 0x0) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000180)='.\x00') r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x4d, 0x4) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x12) write$binfmt_misc(r2, &(0x7f0000000300), 0x6) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x2, 0x73) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x80800) dup3(r5, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, 0x4000804}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000000)=0x4) 1m9.441670343s ago: executing program 0 (id=3350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/sysvipc/msg\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0xee01, r5) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = gettid() getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000100)=0x99) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000340)={r9, r10, r11}, 0xc) getresuid(&(0x7f0000002b80), &(0x7f0000002bc0)=0x0, &(0x7f0000002c00)) socket(0x2, 0x80805, 0x0) r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), &(0x7f0000000280)=0x0) sendmmsg$unix(r2, &(0x7f0000004200)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002500), 0x0, &(0x7f00000025c0)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r3]}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r1, 0xffffffffffffffff, r2, r2]}}], 0x48, 0x40100b5}}, {{&(0x7f0000002640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002a00)="4c2a5a87f872b8600a73c8843610a7875048414b2fc5b9341bc5b753eb57c99681d4b6c992c5678a362aaff4c3d8c9cf7aa6e037624c902c0294dbfb379183204aa43149446b69fde2605a9e323e3834d9f5acfe467da685ac39e1984c4a714d232b0e938d05cd300e81a1ae1505a5970fed74a7ee3ab92a112996b1f4b29a2880c66244cfa5383310dee9556f29776651d1e4171527", 0x96}, {&(0x7f0000002ac0)="e70e8927035998a3b3d33ce499c55f66aa2f96961cc2ccde66790bf6f304a3130ea8ee1261a70f68cbe49026341525a1947a095266d2695b80943e0e2c9e579ddc877bb7f204877f42f7c9ab5675a12cee068de53f71273b96901fa29f5fe2a7d6ee2b349b75b2da02ad1e067a104ec6cea2c3bafb4a8170b2f3a960bce9adee9d9f1d770db02ce630ff5211c17c82b1b6", 0x91}], 0x2, &(0x7f0000002ec0)=[@rights={{0x2c, 0x1, 0x1, [r1, r2, r1, r3, r1, r2, r1]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, r5}}}, @cred={{0x1c, 0x1, 0x2, {r13, r12, r18}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, r11}}}, @cred={{0x1c, 0x1, 0x2, {r0, r12}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x2c, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}], 0x148, 0x800}}, {{&(0x7f0000003040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003240)=[{&(0x7f00000030c0)="3aeb4bc0a1682c16041485b19945821cd1ec6a03560d4b863871aa21d74b453d385a21ed39ee59f60b0497e55f78de10705ad2f0f563efcf6750d3f56abc3bfa91385aa0dcf51f144ba0e547e05e99c2d6b2e667862cb25551caf7036f471f635b37701f301dbc3755462449e3cd6a06b58c2aa6239136ef6dfec5d781b34cb4e8e0c0668c20977705ef01575ac5352d2681aee135d4eb9da349186b35a43562595442beda602219c6951314cc135312b2a6379193335d963e265e7e40c6", 0xbe}, {&(0x7f0000003180)="2e2f6ce981709a27fa65c577a7fcb3e20ecc26fe690e786a7eb0b17a6c08b6c858ee19c93c6981ec631f1a60cb26036ed4f4e16da50b813efea782eb98b24a7677b912fd1b70be2bb904e7d011ab5e92f84879246ffefb51d04dedabe3f4371c5e972b9f3d21daa8e2758082e1bc587057df77acdbd53a1bc7f2fbd76a5ee77a1af443b907c939db63db9624ae69e8316f856b480ceac37616789dd68d0d8f0c1504fd4a5d3c2f1104f47482adaa8f264e20a8", 0xb3}], 0x2, &(0x7f0000004140)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r18}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r17}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r16}}}, @cred={{0x1c, 0x1, 0x2, {r9, r15}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0, 0x20000000}}], 0x3, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r19 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r19, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 1m8.425433277s ago: executing program 0 (id=3357): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0xd) 48.741233034s ago: executing program 0 (id=3357): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0xd) 23.124325491s ago: executing program 0 (id=3357): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0xd) 11.591699775s ago: executing program 6 (id=3520): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a002800002001"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rmdir(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ppoll(&(0x7f00000005c0)=[{r7, 0x2743}], 0x1, 0x0, 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e) fanotify_mark(r6, 0x400, 0x48000019, r1, &(0x7f0000000280)='./file0\x00') preadv(r1, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/76, 0x4c}, {&(0x7f0000000e00)=""/6, 0x6}], 0x2, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 10.657529484s ago: executing program 7 (id=3523): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x4, 0xc, 0x201d, 0x8, 0x9, 0x2, 0x6dfd500da6727a8c, 0x6}}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000140)=[{&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/227, 0xe3}], 0x2, &(0x7f0000000840)=[{0x60, 0x0, 0x0, ""/80}, {0xa0, 0x0, 0x0, ""/144}], 0x100, 0x2000}, 0x38, 0x12160) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xffffffffffffff93, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.90753933s ago: executing program 6 (id=3524): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x3b, 0x1, @tid=r0}, &(0x7f0000000680)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f000001a240)=0x9, 0x4) socket$kcm(0xa, 0x2, 0x73) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f000001a280)='afs_dir_check_failed\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x1, 0x0, &(0x7f0000000000)=0x700) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0xfffffffffffffffb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) preadv2(r3, &(0x7f0000000600)=[{&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f000001a380)=""/4096, 0x1000}], 0x5, 0x1, 0x800, 0x14) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 8.151617238s ago: executing program 7 (id=3527): r0 = mq_open(&(0x7f0000000100)='\x00', 0x80, 0x10, &(0x7f0000000280)={0x100, 0x100, 0xfffffffffffffff9}) mq_notify(r0, &(0x7f0000000400)={0x0, 0x23, 0x1, @thr={&(0x7f00000004c0)="c3b609b61e3abf8edde9645d30e42e817b9ad397c07ed4379979bdc1ec7b259f73c57c5e89bd8592ee4262b8c5ec93d263c2e74d30ca56165e00b9374b8b82be6b33d9ef8550648de3513531604611993543fa9418bc26350c829e9e24e00b61c69ccfd1c370d1944ce30477eb3e4fb49a463af02f0980f61b0f3f703f452f9ab72f9f0385dd1f5aaf575cb7b40cd66792a1d1f6dcf57fb48ea38b2a622488a793799a2ca1980c5dde4b2068c500ddf5b8a2d7c323a896ff9109865fcb", &(0x7f0000000580)="5dfb65771461313e506b9cde7d1a410352b982edf90ca72c3b1f58047371976ca3f293f57d21"}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x2041) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001700000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100fff50000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000001600010073797a3000000089a91a091abbec420d24001280200001800c000100636f756e74657200100002800c000240000000003318eff10800034000000110140000001000010000000000000000000084000a2ccd835f04c2f31d22cd778d9e5b984561922fa0d3fc9f294db3ccccbec64dae43f34a232bfe385f0a92890df4"], 0xb0}}, 0x8000) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/82, 0x52}], 0x1}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002180)=""/4096, 0x1000}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003840)=""/4096, 0x1000}], 0x1}}], 0x3, 0x400000cb, 0x0) 7.93778055s ago: executing program 6 (id=3528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x143b01) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 7.762816766s ago: executing program 4 (id=3529): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f00000001c0)=0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r1 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2de}) epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400004, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x134}, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r3, 0x8184c, 0x0, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$int_in(r5, 0x5452, &(0x7f0000000340)=0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000012c0)=ANY=[@ANYBLOB="88d61fc8f3d33ac37485dab789c9df3322378efd87631c61cffb124446feba80048cd6e92a9597ec113612cbfde92773d0bf01001b8a992349d88ae739a3288727e0dafdcd96467b343d02ab42f0cc64646191e01b98710e6fffcb94482719d996b34ecb671ef4cd5026f142e12ebeb8674ff9a7d1323409d3a99240dbf645d2ceb98a2aa852ea3563fe767793b9655ade1367d315f0a50fe20f0daac855cb9e5f8cf9fb9b79828dc3576c134a17ab141d08e6180fd0fb46c16390e89f6b1b9aa9113010b38ec9c7fd53e07de7751d7705", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000400)={0xa}) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 7.358403531s ago: executing program 7 (id=3531): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e4a0d0302"], 0x4d) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r7}) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5", @ANYRESHEX, @ANYRES8, @ANYRES32], 0x0) 6.622056893s ago: executing program 6 (id=3532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() syz_io_uring_setup(0x819, &(0x7f0000000000)={0x0, 0x8fac, 0x800, 0x3, 0x2ec}, &(0x7f0000000080), &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r9, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x8084) ioctl$FS_IOC_GETVERSION(r8, 0xc0105b08, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000040"]) 6.541885757s ago: executing program 4 (id=3533): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000300)={{0x6f, 0x10}, 'port0\x00', 0x2, 0x0, 0x8001, 0x4, 0xbe, 0x8, 0xa7, 0x0, 0x1, 0x3d}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x470bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20000880) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f000033d000/0x2000)=nil, 0x2000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r9, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r10, 0x0) 5.516542492s ago: executing program 4 (id=3534): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a002800002001"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rmdir(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ppoll(&(0x7f00000005c0)=[{r7, 0x2743}], 0x1, 0x0, 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e) fanotify_mark(r6, 0x400, 0x48000019, r1, &(0x7f0000000280)='./file0\x00') preadv(r1, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/76, 0x4c}, {&(0x7f0000000e00)=""/6, 0x6}], 0x2, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 5.209498349s ago: executing program 3 (id=3535): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="105caa4f016844391de19c2de0531f1aebe8c93299e3f38c", @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r0, &(0x7f0000000880)="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", &(0x7f0000000000)=""/22, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x0, 0x5e, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000280), 0x8, 0x809b, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000080)={r8, 0xae0}, 0x8) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syncfs(0xffffffffffffffff) 4.484214127s ago: executing program 4 (id=3536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f00000000c0)={0x0, 0x5, 0x2}) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x2, 0x2, r4}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x70bd2c, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x6}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet6(0xa, 0x3, 0x26) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.222009263s ago: executing program 7 (id=3537): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x74, 0x10, 0x400, 0x2000, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x40000001}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x5}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.066388829s ago: executing program 3 (id=3538): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) truncate(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) mount$9p_xen(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x4004, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x10001, r4}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r6, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000240)={0x1}) 3.720295695s ago: executing program 7 (id=3539): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x200480c0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3.243965124s ago: executing program 3 (id=3540): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x36) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xff, 0x0) socket$inet(0x2, 0x1, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000140)={0xe100, 0x32314d54, 0x140, 0xb4}) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 3.1057983s ago: executing program 6 (id=3541): r0 = mq_open(&(0x7f0000000100)='\x00', 0x80, 0x10, &(0x7f0000000280)={0x100, 0x100, 0xfffffffffffffff9}) mq_notify(r0, &(0x7f0000000400)={0x0, 0x23, 0x1, @thr={&(0x7f00000004c0)="c3b609b61e3abf8edde9645d30e42e817b9ad397c07ed4379979bdc1ec7b259f73c57c5e89bd8592ee4262b8c5ec93d263c2e74d30ca56165e00b9374b8b82be6b33d9ef8550648de3513531604611993543fa9418bc26350c829e9e24e00b61c69ccfd1c370d1944ce30477eb3e4fb49a463af02f0980f61b0f3f703f452f9ab72f9f0385dd1f5aaf575cb7b40cd66792a1d1f6dcf57fb48ea38b2a622488a793799a2ca1980c5dde4b2068c500ddf5b8a2d7c323a896ff9109865fcb", &(0x7f0000000580)="5dfb65771461313e506b9cde7d1a410352b982edf90ca72c3b1f58047371976ca3f293f57d21"}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x2041) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001700000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100fff50000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000001600010073797a3000000089a91a091abbec420d24001280200001800c000100636f756e74657200100002800c000240000000003318eff10800034000000110140000001000010000000000000000000084000a2ccd835f04c2f31d22cd778d9e5b984561922fa0d3fc9f294db3ccccbec64dae43f34a232bfe385f0a92890df4"], 0xb0}}, 0x8000) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/82, 0x52}], 0x1}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002180)=""/4096, 0x1000}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003840)=""/4096, 0x1000}], 0x1}}], 0x3, 0x400000cb, 0x0) 2.480556263s ago: executing program 7 (id=3542): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) vmsplice(r0, &(0x7f0000001540), 0x0, 0xa) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001940)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001440)={0x7, 0x8000, 0x8, 0x0, 0x6, 0xae, 0x7, 0xd6b8, 0x0}, &(0x7f0000001840)=0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000001880)=@assoc_id=r3, &(0x7f00000018c0)=0x4) sched_setscheduler(r1, 0x2, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000001700)={0x1e, "a57298445b4caaaa2a6cdb174b74fc9e84fb3945d16e30da4e0b3ad14cee059b44aaeea5b47e1f0a3ef5e6c5d8f55483334e4fdc7d0452ad76b098e1f6cf484b69d80d79c2e5ce5e0c00000000000017cee76eb18822f74ca43cd07aae9ff535e879f8fd278bfa524bfb516b0047c69c3ca37969658ad2fa66a3d330e422db28"}) syz_open_procfs(r1, &(0x7f00000016c0)='numa_maps\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x2, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7f8, 0x1, 0x7ffffd, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x80200, 0x43, 0x10}, 0x18) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 2.309059587s ago: executing program 3 (id=3543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) kexec_load(0x2, 0x0, 0x0, 0x2) r1 = gettid() mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0xb7ad7000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000340)='./file0\x00', 0x80fd, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040), 0x4) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x3966, 0x6, 0x8000, 0x4, r5, r6, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x14}}, 0x4000000) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x400901, 0x0) write$tcp_congestion(r9, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r9, r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1.909931344s ago: executing program 6 (id=3544): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='/dev/cpu/#/msr\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, r0}}, 0x18) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x40009c0e, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x80000013) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0xfd, 0x9, 0xa5, 0x41, 0x1, 0x8, 0x4, 0x0, 0x3, 0x40000000}, {0x4, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x4, 0x6, 0xff, 0x85, 0x2, 0x4}, {0x3fe, 0x9, 0xfe, 0x6, 0x0, 0xf0, 0xb3, 0x0, 0xff, 0x0, 0x80, 0xf5, 0xa}], 0x5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.303802586s ago: executing program 3 (id=3545): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) truncate(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x1, 0x7fffffff, 0x0, 0xf7, 0xb, 0x80000000000000, 0x800, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) mount$9p_xen(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x4004, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x10001, r4}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r6, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000240)={0x1}) 1.230030611s ago: executing program 4 (id=3546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) unshare(0x46000200) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x24}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f000001a140)='net/ip6_tables_targets\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000019080)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000019140)={{r3}, r5, 0x4, @unused=[0x8000000000000001, 0x8000, 0x1, 0x7], @name="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"}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x88) fcntl$lock(r3, 0x5, &(0x7f00000190c0)={0x1, 0xed6855cf615f64c0, 0x8, 0xbd, r6}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 331.02954ms ago: executing program 3 (id=3547): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a002800002001"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rmdir(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003000000"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ppoll(&(0x7f00000005c0)=[{r8, 0x2743}], 0x1, 0x0, 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e) fanotify_mark(r7, 0x400, 0x48000019, r1, &(0x7f0000000280)='./file0\x00') preadv(r1, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/76, 0x4c}, {&(0x7f0000000e00)=""/6, 0x6}], 0x2, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 38.257276ms ago: executing program 0 (id=3357): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0xd) 0s ago: executing program 4 (id=3548): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r0, &(0x7f0000000480)="cc", 0x1, 0x4004, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff011, 0x0) kernel console output (not intermixed with test programs): ol pipe specified [ 1016.417675][ T5819] hub 1-1:250.228: bad descriptor, ignoring hub [ 1016.426972][ T5819] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1016.440869][T18942] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1016.516010][T18943] openvswitch: netlink: Message has 3 unknown bytes. [ 1016.522940][T18943] openvswitch: netlink: Actions may not be safe on all matching packets [ 1016.691930][ T5819] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 106 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1016.771539][ T5819] usb 1-1: USB disconnect, device number 106 [ 1016.787948][ T5819] usblp0: removed [ 1017.348026][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 1017.348304][ T30] audit: type=1400 audit(2134284688.240:1379): avc: denied { unmount } for pid=16917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1017.409102][ T30] audit: type=1400 audit(2134284688.280:1380): avc: denied { mount } for pid=18953 comm="syz.7.3298" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1017.430927][ C1] vkms_vblank_simulate: vblank timer overrun [ 1017.481813][ T30] audit: type=1400 audit(2134284688.350:1381): avc: denied { read write } for pid=18953 comm="syz.7.3298" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1017.518505][ T30] audit: type=1400 audit(2134284688.350:1382): avc: denied { open } for pid=18953 comm="syz.7.3298" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1017.544500][ T30] audit: type=1400 audit(2134284688.350:1383): avc: denied { map } for pid=18953 comm="syz.7.3298" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1017.568381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1017.685837][T18965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3301'. [ 1017.695490][T18965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3301'. [ 1018.572248][ T30] audit: type=1400 audit(2134284688.350:1384): avc: denied { execute } for pid=18953 comm="syz.7.3298" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1018.607015][ T30] audit: type=1400 audit(2134284688.480:1385): avc: denied { append } for pid=18959 comm="syz.3.3299" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1018.873200][ T30] audit: type=1400 audit(2134284688.520:1386): avc: denied { write } for pid=18959 comm="syz.3.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1018.933465][ T30] audit: type=1400 audit(2134284688.540:1387): avc: denied { mounton } for pid=18959 comm="syz.3.3299" path="/proc/404/task" dev="proc" ino=75862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1018.978550][ T30] audit: type=1400 audit(2134284689.870:1388): avc: denied { unmount } for pid=17694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1019.056955][T18977] netlink: 'syz.7.3304': attribute type 1 has an invalid length. [ 1019.066299][T18977] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3304'. [ 1019.165544][T18981] netlink: 'syz.4.3303': attribute type 2 has an invalid length. [ 1019.173480][T18981] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.3303'. [ 1019.889518][T18991] netlink: 'syz.0.3307': attribute type 1 has an invalid length. [ 1019.897366][T18991] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3307'. [ 1020.483267][T18995] vivid-002: disconnect [ 1020.541645][T18998] openvswitch: netlink: Message has 3 unknown bytes. [ 1020.548472][T18998] openvswitch: netlink: Actions may not be safe on all matching packets [ 1020.654243][T18997] loop6: detected capacity change from 0 to 524287999 [ 1020.693764][T18997] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.716082][T18997] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.735742][T18997] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1020.755356][T18997] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1021.136114][T19007] netlink: 'syz.3.3311': attribute type 1 has an invalid length. [ 1021.144130][T19007] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3311'. [ 1022.162711][T19022] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1022.169256][T19022] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1022.183344][T19022] vhci_hcd vhci_hcd.0: Device attached [ 1022.408425][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1022.408441][ T30] audit: type=1400 audit(2134284693.300:1402): avc: denied { create } for pid=19029 comm="syz.4.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1022.498561][ T30] audit: type=1400 audit(2134284693.330:1403): avc: denied { write } for pid=19029 comm="syz.4.3317" path="socket:[75315]" dev="sockfs" ino=75315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1022.523980][T18993] vivid-002: reconnect [ 1022.579532][ T10] usb 40-1: SetAddress Request (2) to port 0 [ 1022.599205][ T10] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1022.712358][ T30] audit: type=1400 audit(2134284693.610:1404): avc: denied { map } for pid=19033 comm="syz.0.3318" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1022.785446][T19036] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3316'. [ 1022.794579][ T30] audit: type=1400 audit(2134284693.640:1405): avc: denied { call } for pid=19033 comm="syz.0.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1023.035847][T19023] vhci_hcd: connection reset by peer [ 1023.109134][ T66] vhci_hcd: stop threads [ 1023.265027][ T30] audit: type=1400 audit(2134284694.150:1406): avc: denied { bind } for pid=19040 comm="syz.4.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1023.266793][ T66] vhci_hcd: release socket [ 1023.328686][ T66] vhci_hcd: disconnect device [ 1024.222779][T19046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3319'. [ 1024.370843][ T5921] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1024.465787][T19057] tmpfs: Bad value for 'mpol' [ 1024.466512][ T30] audit: type=1400 audit(2134284695.360:1407): avc: denied { append } for pid=19056 comm="syz.7.3325" name="mouse0" dev="devtmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1024.521520][T19063] vivid-001: disconnect [ 1024.526046][ T30] audit: type=1400 audit(2134284695.360:1408): avc: denied { open } for pid=19056 comm="syz.7.3325" path="/dev/input/mouse0" dev="devtmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1024.550206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1024.559909][ T5862] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1024.569160][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 1024.584788][ T5921] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 1024.593483][ T5921] usb 5-1: config 0 has no interface number 0 [ 1024.599733][ T30] audit: type=1400 audit(2134284695.360:1409): avc: denied { mounton } for pid=19056 comm="syz.7.3325" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1024.643427][T19065] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3329'. [ 1024.654695][ T5921] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01e6, bcdDevice=32.48 [ 1024.655718][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3329'. [ 1024.669007][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.689017][ T5921] usb 5-1: Product: syz [ 1024.693342][ T5921] usb 5-1: Manufacturer: syz [ 1024.697964][ T5921] usb 5-1: SerialNumber: syz [ 1024.731195][ T5921] usb 5-1: config 0 descriptor?? [ 1024.733127][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 1024.737893][ T5921] ftdi_sio 5-1:0.129: FTDI USB Serial Device converter detected [ 1024.742605][ T5862] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1024.761370][ T5921] ftdi_sio ttyUSB0: unknown device type: 0x3248 [ 1024.789066][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1024.799574][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1024.809789][ T5862] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.825038][ T5862] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1024.838311][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.057413][ T5862] usb 1-1: GET_CAPABILITIES returned 0 [ 1025.064021][ T5862] usbtmc 1-1:16.0: can't read capabilities [ 1025.192564][ T30] audit: type=1326 audit(2134284696.090:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19077 comm="syz.6.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958c58e969 code=0x7ffc0000 [ 1025.216054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.237740][ T30] audit: type=1326 audit(2134284696.090:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19077 comm="syz.6.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958c58e969 code=0x7ffc0000 [ 1025.293100][T17059] usb 1-1: USB disconnect, device number 107 [ 1025.362522][T19083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1025.377412][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 1025.625417][T19061] vivid-001: reconnect [ 1026.002496][T19090] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1026.009048][T19090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.023875][T19090] vhci_hcd vhci_hcd.0: Device attached [ 1026.392054][ T5862] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1026.400116][T17059] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1026.582895][ T5862] usb 1-1: config 0 has no interfaces? [ 1026.588563][ T5862] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1026.600804][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.610941][ T5862] usb 1-1: config 0 descriptor?? [ 1026.793533][ T5921] usb 5-1: USB disconnect, device number 121 [ 1026.983089][T19091] usb 33-1: recv xbuf, 0 [ 1027.053024][ T7997] vhci_hcd: stop threads [ 1027.116664][ T7997] vhci_hcd: release socket [ 1027.187134][ T5921] ftdi_sio 5-1:0.129: device disconnected [ 1027.332808][T17059] usb 33-1: device descriptor read/64, error -71 [ 1027.347434][ T7997] vhci_hcd: disconnect device [ 1028.024996][ T10] usb 40-1: device descriptor read/8, error -110 [ 1028.099917][T17059] vhci_hcd: vhci_device speed not set [ 1028.218786][T19119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3340'. [ 1028.270549][T19113] sysfs: cannot create duplicate filename '/class/ieee80211/!寿' [ 1028.338584][T19113] CPU: 1 UID: 0 PID: 19113 Comm: syz.7.3341 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1028.338613][T19113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1028.338623][T19113] Call Trace: [ 1028.338629][T19113] [ 1028.338636][T19113] dump_stack_lvl+0x16c/0x1f0 [ 1028.338663][T19113] sysfs_warn_dup+0x7f/0xa0 [ 1028.338695][T19113] sysfs_do_create_link_sd+0x124/0x140 [ 1028.338723][T19113] sysfs_create_link+0x61/0xc0 [ 1028.338751][T19113] device_add+0x62c/0x1a70 [ 1028.338776][T19113] ? __pfx_device_add+0x10/0x10 [ 1028.338794][T19113] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 1028.338814][T19113] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1028.338844][T19113] wiphy_register+0x1c9c/0x2850 [ 1028.338880][T19113] ? __pfx_wiphy_register+0x10/0x10 [ 1028.338914][T19113] ? ieee80211_register_hw+0x240c/0x4020 [ 1028.338943][T19113] ieee80211_register_hw+0x2432/0x4020 [ 1028.338975][T19113] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1028.339003][T19113] ? find_held_lock+0x2b/0x80 [ 1028.339024][T19113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1028.339050][T19113] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1028.339065][T19113] ? __hrtimer_setup+0x176/0x280 [ 1028.339082][T19113] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1028.339118][T19113] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1028.339139][T19113] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1028.339163][T19113] ? __asan_memcpy+0x3c/0x60 [ 1028.339200][T19113] hwsim_new_radio_nl+0xb51/0x12c0 [ 1028.339228][T19113] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1028.339262][T19113] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1028.339287][T19113] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1028.339315][T19113] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1028.339337][T19113] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1028.339366][T19113] ? bpf_lsm_capable+0x9/0x10 [ 1028.339389][T19113] ? security_capable+0x7e/0x260 [ 1028.339408][T19113] ? ns_capable+0xd7/0x110 [ 1028.339430][T19113] genl_rcv_msg+0x55c/0x800 [ 1028.339453][T19113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1028.339476][T19113] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1028.339500][T19113] ? __lock_acquire+0xaa4/0x1ba0 [ 1028.339531][T19113] netlink_rcv_skb+0x16a/0x440 [ 1028.339549][T19113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1028.339572][T19113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1028.339604][T19113] ? __pfx_down_read+0x10/0x10 [ 1028.339625][T19113] ? netlink_deliver_tap+0x1ae/0xd30 [ 1028.339645][T19113] genl_rcv+0x28/0x40 [ 1028.339661][T19113] netlink_unicast+0x53a/0x7f0 [ 1028.339679][T19113] ? __pfx_netlink_unicast+0x10/0x10 [ 1028.339701][T19113] netlink_sendmsg+0x8d1/0xdd0 [ 1028.339720][T19113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1028.339744][T19113] ____sys_sendmsg+0xa95/0xc70 [ 1028.339763][T19113] ? copy_msghdr_from_user+0x10a/0x160 [ 1028.339777][T19113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1028.339799][T19113] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1028.339820][T19113] ___sys_sendmsg+0x134/0x1d0 [ 1028.339835][T19113] ? __pfx____sys_sendmsg+0x10/0x10 [ 1028.339876][T19113] __sys_sendmsg+0x16d/0x220 [ 1028.339890][T19113] ? __pfx___sys_sendmsg+0x10/0x10 [ 1028.339902][T19113] ? __x64_sys_futex+0x1e0/0x4c0 [ 1028.339929][T19113] ? rcu_is_watching+0x12/0xc0 [ 1028.339952][T19113] do_syscall_64+0xcd/0x260 [ 1028.339972][T19113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.339987][T19113] RIP: 0033:0x7fd95b78e969 [ 1028.339999][T19113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.340013][T19113] RSP: 002b:00007fd9595f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1028.340028][T19113] RAX: ffffffffffffffda RBX: 00007fd95b9b5fa0 RCX: 00007fd95b78e969 [ 1028.340038][T19113] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1028.340047][T19113] RBP: 00007fd95b810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1028.340057][T19113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.340065][T19113] R13: 0000000000000000 R14: 00007fd95b9b5fa0 R15: 00007ffdb8c50d18 [ 1028.340085][T19113] [ 1028.734357][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.759607][ T10] usb usb40-port1: attempt power cycle [ 1029.144104][ T5862] usb 1-1: string descriptor 0 read error: -71 [ 1029.574409][ T5862] usb 1-1: USB disconnect, device number 108 [ 1029.616371][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1029.616387][ T30] audit: type=1400 audit(2134284700.510:1470): avc: denied { mount } for pid=19128 comm="syz.6.3345" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1029.821590][ T10] usb usb40-port1: unable to enumerate USB device [ 1030.498743][ T30] audit: type=1400 audit(2134284701.390:1471): avc: denied { unmount } for pid=11809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1030.777409][ T30] audit: type=1400 audit(2134284701.670:1472): avc: denied { setopt } for pid=19148 comm="syz.3.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1030.837044][T19150] openvswitch: netlink: Message has 3 unknown bytes. [ 1030.844127][T19150] openvswitch: netlink: Actions may not be safe on all matching packets [ 1031.273133][ T30] audit: type=1400 audit(2134284702.170:1473): avc: denied { read } for pid=19152 comm="syz.7.3352" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1031.296746][ T30] audit: type=1400 audit(2134284702.170:1474): avc: denied { open } for pid=19152 comm="syz.7.3352" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1031.343702][ T30] audit: type=1400 audit(2134284702.240:1475): avc: denied { ioctl } for pid=19154 comm="syz.4.3355" path="socket:[76418]" dev="sockfs" ino=76418 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1031.374077][ T30] audit: type=1400 audit(2134284702.270:1476): avc: denied { read } for pid=19154 comm="syz.4.3355" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1031.584974][T19163] FAULT_INJECTION: forcing a failure. [ 1031.584974][T19163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.598693][T19163] CPU: 0 UID: 0 PID: 19163 Comm: syz.6.3358 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1031.598717][T19163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1031.598728][T19163] Call Trace: [ 1031.598734][T19163] [ 1031.598740][T19163] dump_stack_lvl+0x16c/0x1f0 [ 1031.598766][T19163] should_fail_ex+0x512/0x640 [ 1031.598791][T19163] _copy_from_user+0x2e/0xd0 [ 1031.598814][T19163] move_addr_to_kernel+0x65/0x170 [ 1031.598838][T19163] __sys_bind+0x11b/0x260 [ 1031.598860][T19163] ? __pfx___sys_bind+0x10/0x10 [ 1031.598879][T19163] ? __fget_files+0x20e/0x3c0 [ 1031.598914][T19163] ? __pfx_ksys_write+0x10/0x10 [ 1031.598937][T19163] ? rcu_is_watching+0x12/0xc0 [ 1031.598961][T19163] __x64_sys_bind+0x72/0xb0 [ 1031.598986][T19163] ? lockdep_hardirqs_on+0x7c/0x110 [ 1031.599005][T19163] do_syscall_64+0xcd/0x260 [ 1031.599027][T19163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.599044][T19163] RIP: 0033:0x7f958c58e969 [ 1031.599058][T19163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.599074][T19163] RSP: 002b:00007f958d377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1031.599090][T19163] RAX: ffffffffffffffda RBX: 00007f958c7b5fa0 RCX: 00007f958c58e969 [ 1031.599101][T19163] RDX: 000000000000000d RSI: 0000200000000340 RDI: 0000000000000003 [ 1031.599111][T19163] RBP: 00007f958d377090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.599120][T19163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.599130][T19163] R13: 0000000000000000 R14: 00007f958c7b5fa0 R15: 00007ffef86549b8 [ 1031.599154][T19163] [ 1031.855354][T19165] netlink: 'syz.3.3354': attribute type 1 has an invalid length. [ 1031.863255][T19165] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3354'. [ 1033.028330][ T30] audit: type=1400 audit(2134284703.920:1477): avc: denied { ioctl } for pid=19177 comm="syz-executor" path="socket:[76454]" dev="sockfs" ino=76454 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1033.062846][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1033.072031][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1033.081595][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1033.090302][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1033.098561][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1033.159102][ T30] audit: type=1400 audit(2134284704.030:1478): avc: denied { mounton } for pid=19177 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1033.177221][T19177] lo speed is unknown, defaulting to 1000 [ 1033.180687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.873422][T19177] chnl_net:caif_netlink_parms(): no params data found [ 1033.877093][T19192] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1034.943174][T19177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.956099][ T30] audit: type=1400 audit(2134284705.850:1479): avc: denied { view } for pid=19185 comm="syz.3.3364" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1034.956593][T19177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.410231][ T5814] Bluetooth: hci0: command tx timeout [ 1035.419409][ T30] audit: type=1400 audit(2134284705.950:1480): avc: denied { append } for pid=19202 comm="syz.7.3368" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1035.542621][T19177] bridge_slave_0: entered allmulticast mode [ 1035.677845][ T30] audit: type=1400 audit(2134284705.960:1481): avc: denied { open } for pid=19202 comm="syz.7.3368" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1035.752729][T19177] bridge_slave_0: entered promiscuous mode [ 1035.781773][ T30] audit: type=1400 audit(2134284706.410:1482): avc: denied { write } for pid=19202 comm="syz.7.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1035.901485][T19177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.917130][T19177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.933801][ T30] audit: type=1400 audit(2134284706.450:1483): avc: denied { ioctl } for pid=19202 comm="syz.7.3368" path="/dev/sg0" dev="devtmpfs" ino=755 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1035.960181][T19177] bridge_slave_1: entered allmulticast mode [ 1035.968103][T19177] bridge_slave_1: entered promiscuous mode [ 1036.052470][ T30] audit: type=1400 audit(2134284706.600:1484): avc: denied { create } for pid=19185 comm="syz.3.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1036.073669][ T30] audit: type=1400 audit(2134284706.630:1485): avc: denied { ioctl } for pid=19185 comm="syz.3.3364" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1036.094007][ T5814] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 1036.156205][T19211] openvswitch: netlink: Message has 3 unknown bytes. [ 1036.163681][T19211] openvswitch: netlink: Actions may not be safe on all matching packets [ 1036.537349][T19177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.564502][T19177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.586710][ T30] audit: type=1400 audit(2134284707.480:1486): avc: denied { create } for pid=19212 comm="syz.7.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1036.745377][ T5860] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1036.758055][ T30] audit: type=1400 audit(2134284707.480:1487): avc: denied { bind } for pid=19212 comm="syz.7.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1036.786129][T19177] team0: Port device team_slave_0 added [ 1036.942394][T19177] team0: Port device team_slave_1 added [ 1037.236441][T19220] FAULT_INJECTION: forcing a failure. [ 1037.236441][T19220] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.249270][T19220] CPU: 1 UID: 0 PID: 19220 Comm: syz.3.3373 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1037.249293][T19220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1037.249304][T19220] Call Trace: [ 1037.249315][T19220] [ 1037.249321][T19220] dump_stack_lvl+0x16c/0x1f0 [ 1037.249347][T19220] should_fail_ex+0x512/0x640 [ 1037.249368][T19220] ? fs_reclaim_acquire+0xae/0x150 [ 1037.249392][T19220] ? tomoyo_encode2+0x100/0x3e0 [ 1037.249413][T19220] should_failslab+0xc2/0x120 [ 1037.249431][T19220] __kmalloc_noprof+0xd2/0x510 [ 1037.249455][T19220] ? d_absolute_path+0x136/0x1a0 [ 1037.249479][T19220] tomoyo_encode2+0x100/0x3e0 [ 1037.249505][T19220] tomoyo_encode+0x29/0x50 [ 1037.249527][T19220] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1037.249555][T19220] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1037.249577][T19220] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1037.249625][T19220] ? do_raw_spin_lock+0x12c/0x2b0 [ 1037.249651][T19220] tomoyo_file_open+0x6b/0x90 [ 1037.249668][T19220] security_file_open+0x84/0x1e0 [ 1037.249693][T19220] do_dentry_open+0x596/0x1c10 [ 1037.249727][T19220] vfs_open+0x82/0x3f0 [ 1037.249749][T19220] path_openat+0x1e5e/0x2d40 [ 1037.249785][T19220] ? __pfx_path_openat+0x10/0x10 [ 1037.249816][T19220] do_filp_open+0x20b/0x470 [ 1037.249841][T19220] ? __pfx_do_filp_open+0x10/0x10 [ 1037.249885][T19220] ? alloc_fd+0x471/0x7d0 [ 1037.249918][T19220] do_sys_openat2+0x11b/0x1d0 [ 1037.249937][T19220] ? __pfx_do_sys_openat2+0x10/0x10 [ 1037.249959][T19220] ? __fget_files+0x20e/0x3c0 [ 1037.249989][T19220] __x64_sys_openat+0x174/0x210 [ 1037.250008][T19220] ? __pfx___x64_sys_openat+0x10/0x10 [ 1037.250026][T19220] ? ksys_write+0x1b9/0x240 [ 1037.250049][T19220] ? rcu_is_watching+0x12/0xc0 [ 1037.250076][T19220] do_syscall_64+0xcd/0x260 [ 1037.250100][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.250117][T19220] RIP: 0033:0x7f506c98e969 [ 1037.250131][T19220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.250146][T19220] RSP: 002b:00007f506d77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1037.250163][T19220] RAX: ffffffffffffffda RBX: 00007f506cbb6080 RCX: 00007f506c98e969 [ 1037.250174][T19220] RDX: 00000000000a2000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1037.250185][T19220] RBP: 00007f506d77f090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.250195][T19220] R10: 00000000000000a3 R11: 0000000000000246 R12: 0000000000000001 [ 1037.250205][T19220] R13: 0000000000000000 R14: 00007f506cbb6080 R15: 00007fff6d0ca908 [ 1037.250229][T19220] [ 1037.250296][T19220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1037.462370][ T5814] Bluetooth: hci0: command tx timeout [ 1037.479035][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 1037.583870][T19177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1037.599194][T19177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.656296][ T5860] usb 5-1: config 2 has an invalid interface number: 254 but max is 2 [ 1037.675964][ T5860] usb 5-1: config 2 has an invalid interface number: 3 but max is 2 [ 1037.686955][ T5860] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1037.695840][ T5860] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.706106][ T5860] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 3 [ 1037.715286][ T5860] usb 5-1: config 2 has no interface number 0 [ 1037.721535][ T5860] usb 5-1: config 2 has no interface number 1 [ 1037.727689][ T5860] usb 5-1: config 2 interface 254 altsetting 2 endpoint 0x8 has invalid maxpacket 1096, setting to 64 [ 1037.791050][ T5860] usb 5-1: config 2 interface 254 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1037.795245][T19177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1037.814599][T19177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.821793][T19177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.845608][ T5860] usb 5-1: config 2 interface 254 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1037.849561][T19177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.142608][ T5860] usb 5-1: config 2 interface 254 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1038.189856][ T5860] usb 5-1: config 2 interface 254 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1038.259914][ T5860] usb 5-1: config 2 interface 254 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1038.293181][T19177] hsr_slave_0: entered promiscuous mode [ 1038.295985][ T5860] usb 5-1: config 2 interface 254 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1038.299820][T19177] hsr_slave_1: entered promiscuous mode [ 1038.315722][T19177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1038.324205][T19177] Cannot create hsr debugfs directory [ 1038.356185][ T5860] usb 5-1: config 2 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1038.386916][ T5860] usb 5-1: config 2 interface 254 has no altsetting 0 [ 1038.423871][ T5860] usb 5-1: config 2 interface 3 has no altsetting 0 [ 1038.448528][ T5860] usb 5-1: New USB device found, idVendor=148f, idProduct=5372, bcdDevice=83.a7 [ 1038.483322][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.505592][ T5860] usb 5-1: Product: syz [ 1038.510432][ T5860] usb 5-1: Manufacturer: syz [ 1038.515191][ T5860] usb 5-1: SerialNumber: syz [ 1038.754689][T19177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.068387][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3377'. [ 1039.079435][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3377'. [ 1039.307665][ T7995] bridge_slave_1: left allmulticast mode [ 1039.344235][ T7995] bridge_slave_1: left promiscuous mode [ 1039.496817][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.699089][ T53] Bluetooth: hci0: command tx timeout [ 1039.798599][ T7995] bridge_slave_0: left promiscuous mode [ 1039.859078][ T5819] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1040.000438][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.332158][ T5860] usb 5-1: can't set config #2, error -71 [ 1040.340477][ T5860] usb 5-1: USB disconnect, device number 122 [ 1040.435184][ T30] audit: type=1400 audit(2134284711.330:1488): avc: denied { listen } for pid=19249 comm="syz.6.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1040.458946][ T30] audit: type=1400 audit(2134284711.330:1489): avc: denied { ioctl } for pid=19249 comm="syz.6.3381" path="socket:[76738]" dev="sockfs" ino=76738 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1040.511460][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1040.521778][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 102, changing to 7 [ 1040.532804][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 24624, setting to 1024 [ 1040.548797][ T5819] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1040.557986][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.566418][ T5819] usb 4-1: Product: syz [ 1040.570791][ T5819] usb 4-1: Manufacturer: syz [ 1040.575623][ T5819] usb 4-1: SerialNumber: syz [ 1040.590068][ T30] audit: type=1400 audit(2134284711.490:1490): avc: denied { getopt } for pid=19249 comm="syz.6.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1040.594282][ T5819] usb 4-1: config 0 descriptor?? [ 1040.632823][ T5819] usb 4-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 66 [ 1040.672147][ T5860] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1040.721975][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 1040.736420][ T7995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.747788][ T7995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.758022][ T7995] bond0 (unregistering): (slave team0): Releasing backup interface [ 1040.766598][ T7995] bond0 (unregistering): Released all slaves [ 1040.778346][ T7995] bond1 (unregistering): Released all slaves [ 1040.806877][T19177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.876706][ T5860] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1040.893905][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.906884][ T7995] : left promiscuous mode [ 1040.910346][ T5860] usb 5-1: Product: syz [ 1040.925850][ T5860] usb 5-1: Manufacturer: syz [ 1040.931858][ T5860] usb 5-1: SerialNumber: syz [ 1040.947009][ T5860] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1040.948714][ T30] audit: type=1400 audit(2134284711.840:1491): avc: denied { firmware_load } for pid=17721 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1040.964847][T17721] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1041.031403][T19177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.051066][ T30] audit: type=1326 audit(2134284711.950:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19257 comm="syz.6.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958c58e969 code=0x7ffc0000 [ 1041.076181][ T7995] tipc: Disabling bearer [ 1041.093561][ T7995] tipc: Left network mode [ 1041.113595][ T30] audit: type=1326 audit(2134284711.950:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19257 comm="syz.6.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958c58e969 code=0x7ffc0000 [ 1041.149194][ T30] audit: type=1326 audit(2134284711.970:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19257 comm="syz.6.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f958c58e969 code=0x7ffc0000 [ 1041.176455][ T30] audit: type=1326 audit(2134284711.970:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19257 comm="syz.6.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958c58e969 code=0x7ffc0000 [ 1041.216779][ T30] audit: type=1326 audit(2134284711.970:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19257 comm="syz.6.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958c58e969 code=0x7ffc0000 [ 1041.246136][T19177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.259648][ T7995] IPVS: stopping backup sync thread 14361 ... [ 1041.261946][ T30] audit: type=1326 audit(2134284711.980:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19257 comm="syz.6.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f958c58e969 code=0x7ffc0000 [ 1041.626758][T19264] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3385'. [ 1041.640082][ T7995] hsr_slave_0: left promiscuous mode [ 1041.653148][ T7995] hsr_slave_1: left promiscuous mode [ 1041.671655][ T7995] batman_adv: batadv0: Interface deactivated: dummy0 [ 1041.688085][ T7995] batman_adv: batadv0: Removing interface: dummy0 [ 1041.704050][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.719853][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.732201][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.739938][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.839067][ T5814] Bluetooth: hci0: command tx timeout [ 1041.921964][ T7995] veth1_macvtap: left promiscuous mode [ 1041.927593][ T7995] veth0_macvtap: left promiscuous mode [ 1041.936926][ T7995] veth1_vlan: left promiscuous mode [ 1041.943019][ T7995] veth0_vlan: left promiscuous mode [ 1042.189095][ T5862] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1042.493699][T17721] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1042.500975][T17721] ath9k_htc: Failed to initialize the device [ 1042.535105][T17721] usb 5-1: ath9k_htc: USB layer deinitialized [ 1042.599473][ T5819] usb 4-1: USB disconnect, device number 60 [ 1042.690452][ T5862] usb 8-1: Using ep0 maxpacket: 8 [ 1042.703645][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.714832][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.732592][ T5862] usb 8-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1042.757418][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.791050][T17059] usb 5-1: USB disconnect, device number 123 [ 1042.812061][ T5862] usb 8-1: config 0 descriptor?? [ 1043.458925][ T5862] usbhid 8-1:0.0: can't add hid device: -71 [ 1043.468596][ T5862] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1043.486598][ T5862] usb 8-1: USB disconnect, device number 6 [ 1043.509058][T17059] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1043.719207][T17059] usb 5-1: Using ep0 maxpacket: 32 [ 1043.733262][T17059] usb 5-1: config 2 has an invalid interface number: 254 but max is 2 [ 1043.743523][T17059] usb 5-1: config 2 has an invalid interface number: 3 but max is 2 [ 1043.751641][T17059] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1043.767423][T17059] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.814701][ T7995] team0 (unregistering): Port device team_slave_1 removed [ 1043.815070][T17059] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 3 [ 1043.844754][T19284] 9pnet_fd: Insufficient options for proto=fd [ 1043.865066][T17059] usb 5-1: config 2 has no interface number 0 [ 1043.874319][T17059] usb 5-1: config 2 has no interface number 1 [ 1043.878343][T19284] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3392'. [ 1043.916998][T17059] usb 5-1: config 2 interface 254 altsetting 2 endpoint 0x8 has invalid maxpacket 1096, setting to 64 [ 1043.945319][T17059] usb 5-1: config 2 interface 254 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1044.102189][T17059] usb 5-1: config 2 interface 254 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1044.116322][T17059] usb 5-1: config 2 interface 254 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1044.161668][T17059] usb 5-1: config 2 interface 254 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1044.185333][ T7995] team0 (unregistering): Port device team_slave_0 removed [ 1044.210167][T17059] usb 5-1: config 2 interface 254 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1044.237498][T17059] usb 5-1: config 2 interface 254 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1044.379501][T17059] usb 5-1: config 2 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1044.393666][T17059] usb 5-1: config 2 interface 254 has no altsetting 0 [ 1044.401915][T17059] usb 5-1: config 2 interface 3 has no altsetting 0 [ 1044.412131][T17059] usb 5-1: New USB device found, idVendor=148f, idProduct=5372, bcdDevice=83.a7 [ 1044.434937][T17059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.459057][T17059] usb 5-1: Product: syz [ 1044.463245][T17059] usb 5-1: Manufacturer: syz [ 1044.477313][T17059] usb 5-1: SerialNumber: syz [ 1044.692740][ T5819] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1044.830324][T19177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1044.841939][T19177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1045.322254][ T5819] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1045.335632][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.368241][ T5819] usb 8-1: Product: syz [ 1045.376659][ T5819] usb 8-1: Manufacturer: syz [ 1045.386505][ T5819] usb 8-1: SerialNumber: syz [ 1045.402158][ T5819] usb 8-1: config 0 descriptor?? [ 1045.409944][ T5819] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1045.442910][T19177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1045.458708][T19177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1045.613554][T19177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.661274][T19177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.693521][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.700717][ T7997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.748084][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.755341][ T7995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.779200][ T30] kauditd_printk_skb: 347 callbacks suppressed [ 1045.779232][ T30] audit: type=1400 audit(2134284716.670:1845): avc: denied { audit_read } for pid=19303 comm="syz.3.3398" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1046.084283][T19177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.154985][T19312] FAULT_INJECTION: forcing a failure. [ 1046.154985][T19312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.168433][T19312] CPU: 1 UID: 0 PID: 19312 Comm: syz.3.3399 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1046.168457][T19312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1046.168468][T19312] Call Trace: [ 1046.168474][T19312] [ 1046.168481][T19312] dump_stack_lvl+0x16c/0x1f0 [ 1046.168507][T19312] should_fail_ex+0x512/0x640 [ 1046.168532][T19312] strncpy_from_user+0x3b/0x2e0 [ 1046.168555][T19312] getname_flags.part.0+0x8f/0x550 [ 1046.168581][T19312] getname_flags+0x93/0xf0 [ 1046.168605][T19312] user_path_at+0x24/0x60 [ 1046.168629][T19312] __x64_sys_mount+0x1fc/0x310 [ 1046.168649][T19312] ? __pfx___x64_sys_mount+0x10/0x10 [ 1046.168665][T19312] ? rcu_is_watching+0x12/0xc0 [ 1046.168691][T19312] do_syscall_64+0xcd/0x260 [ 1046.168715][T19312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.168733][T19312] RIP: 0033:0x7f506c98e969 [ 1046.168746][T19312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.168763][T19312] RSP: 002b:00007f506d75e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1046.168780][T19312] RAX: ffffffffffffffda RBX: 00007f506cbb6160 RCX: 00007f506c98e969 [ 1046.168792][T19312] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 1046.168804][T19312] RBP: 00007f506d75e090 R08: 0000200000000500 R09: 0000000000000000 [ 1046.168815][T19312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.168826][T19312] R13: 0000000000000000 R14: 00007f506cbb6160 R15: 00007fff6d0ca908 [ 1046.168850][T19312] [ 1046.325343][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.383170][T19177] veth0_vlan: entered promiscuous mode [ 1046.394443][T19177] veth1_vlan: entered promiscuous mode [ 1046.422388][T19177] veth0_macvtap: entered promiscuous mode [ 1046.431326][T19177] veth1_macvtap: entered promiscuous mode [ 1046.451617][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.517131][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.530191][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.541142][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.550936][T17059] usb 5-1: USB disconnect, device number 124 [ 1046.557535][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.578187][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.588263][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.599130][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.609152][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.619834][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.636607][T19177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.661860][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.677075][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.694715][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.705812][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.728503][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.741818][T19316] kvm: kvm [19315]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1046.808909][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.819415][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.830047][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.840166][T19177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.850928][T19177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.870185][T19177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.978948][T19321] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1047.076667][T19177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.145300][T19177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.203568][T19177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.243345][T19177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.501159][ T5862] usb 8-1: USB disconnect, device number 7 [ 1047.899125][ T30] audit: type=1400 audit(2134284718.540:1846): avc: denied { read } for pid=19324 comm="syz.4.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1047.924628][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.027103][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.086343][T19314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3400'. [ 1048.266341][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.298418][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.401282][T19340] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1048.488833][T19341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3407'. [ 1048.496087][ T30] audit: type=1400 audit(2134284719.360:1847): avc: denied { mounton } for pid=19177 comm="syz-executor" path="/root/syzkaller.eCWifi/syz-tmp" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1048.518401][T19341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3407'. [ 1048.535391][ T30] audit: type=1400 audit(2134284719.370:1848): avc: denied { mounton } for pid=19177 comm="syz-executor" path="/root/syzkaller.eCWifi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1048.609668][T11657] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1048.645818][ T30] audit: type=1400 audit(2134284719.370:1849): avc: denied { mounton } for pid=19177 comm="syz-executor" path="/root/syzkaller.eCWifi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=77616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1048.816637][ T30] audit: type=1400 audit(2134284719.450:1850): avc: denied { mounton } for pid=19177 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1048.840237][ T30] audit: type=1400 audit(2134284719.450:1851): avc: denied { mount } for pid=19177 comm="syz-executor" name="/" dev="gadgetfs" ino=6795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1048.862737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.869730][ T30] audit: type=1400 audit(2134284719.450:1852): avc: denied { mounton } for pid=19177 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1048.912040][T11657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1048.948148][T11657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.959942][T11657] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1048.969325][T11657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.983051][T11657] usb 4-1: config 0 descriptor?? [ 1049.055786][ T30] audit: type=1400 audit(2134284719.950:1853): avc: denied { bind } for pid=19345 comm="syz.4.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1049.074890][T19346] nfs: Bad value for 'source' [ 1049.084448][ T30] audit: type=1400 audit(2134284719.980:1854): avc: denied { name_bind } for pid=19345 comm="syz.4.3410" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1049.369094][ T5819] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1049.463693][T11657] hid-thrustmaster 0003:044F:B65D.0022: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1049.489159][T11657] hid-thrustmaster 0003:044F:B65D.0022: Wrong number of endpoints? [ 1049.519184][ T5819] usb 8-1: Using ep0 maxpacket: 32 [ 1049.533843][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.545138][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.555416][ T5819] usb 8-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1049.564823][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.579948][ T5819] usb 8-1: config 0 descriptor?? [ 1049.704692][T19334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.732955][T19334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.900560][ C0] hid-thrustmaster 0003:044F:B65D.0022: URB to get model id failed with error -71 [ 1049.900925][ T5921] usb 4-1: USB disconnect, device number 61 [ 1051.216636][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.250635][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1051.250649][ T30] audit: type=1400 audit(2134284722.150:1856): avc: denied { watch watch_reads } for pid=19359 comm="syz.3.3414" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1051.284877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1051.291889][ T30] audit: type=1400 audit(2134284722.170:1857): avc: denied { execute_no_trans } for pid=19359 comm="syz.3.3414" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1051.320031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1051.500641][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.578654][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.685746][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.906728][T19371] openvswitch: netlink: Message has 3 unknown bytes. [ 1051.913992][T19371] openvswitch: netlink: Actions may not be safe on all matching packets [ 1052.130007][T19373] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 1052.137855][T19373] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3416'. [ 1052.737403][ T5819] usb 8-1: string descriptor 0 read error: -71 [ 1052.816686][ T5819] usbhid 8-1:0.0: can't add hid device: -71 [ 1052.823957][ T30] audit: type=1400 audit(2134284723.720:1858): avc: denied { ioctl } for pid=19375 comm="syz.4.3418" path="socket:[78554]" dev="sockfs" ino=78554 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1052.828363][ T36] bridge_slave_1: left allmulticast mode [ 1052.848682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1052.849250][ T5819] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1052.876414][T19377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.941355][T19382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3417'. [ 1052.952686][ T5819] usb 8-1: USB disconnect, device number 8 [ 1053.268068][ T36] bridge_slave_1: left promiscuous mode [ 1053.278340][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.399733][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1053.409888][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1053.420465][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1053.432615][ T36] bridge_slave_0: left allmulticast mode [ 1053.438269][ T36] bridge_slave_0: left promiscuous mode [ 1053.448771][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.456420][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1053.465577][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1053.682113][T19397] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3421'. [ 1054.002860][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.009563][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.095594][T19399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3423'. [ 1054.981421][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.043733][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.062859][ T36] bond0 (unregistering): Released all slaves [ 1055.396603][T19418] openvswitch: netlink: Message has 3 unknown bytes. [ 1055.403686][T19418] openvswitch: netlink: Actions may not be safe on all matching packets [ 1055.421072][ T5819] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1055.626982][ T30] audit: type=1400 audit(2134284726.520:1859): avc: denied { relabelfrom } for pid=19389 comm="syz.6.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1055.646907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1055.679925][ T30] audit: type=1400 audit(2134284726.550:1860): avc: denied { relabelto } for pid=19389 comm="syz.6.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1055.691659][ T5814] Bluetooth: hci0: command tx timeout [ 1055.736392][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1055.751642][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 102, changing to 7 [ 1055.761904][ T30] audit: type=1400 audit(2134284726.650:1861): avc: denied { ioctl } for pid=19419 comm="syz.7.3429" path="socket:[78665]" dev="sockfs" ino=78665 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1055.763351][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 24624, setting to 1024 [ 1055.804894][ T5819] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1055.814106][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.822277][ T5819] usb 4-1: Product: syz [ 1055.827837][ T5819] usb 4-1: Manufacturer: syz [ 1055.832943][ T5819] usb 4-1: SerialNumber: syz [ 1055.840177][ T5819] usb 4-1: config 0 descriptor?? [ 1055.851908][ T5819] usb 4-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 66 [ 1055.863812][T19387] lo speed is unknown, defaulting to 1000 [ 1056.078877][ T36] hsr_slave_0: left promiscuous mode [ 1056.137067][ T36] hsr_slave_1: left promiscuous mode [ 1056.487258][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.516837][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.545792][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.564225][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.679296][ T36] veth1_macvtap: left promiscuous mode [ 1056.701413][ T36] veth0_macvtap: left promiscuous mode [ 1056.722009][ T36] veth1_vlan: left promiscuous mode [ 1056.837503][ T36] veth0_vlan: left promiscuous mode [ 1057.515440][ T30] audit: type=1400 audit(2134284728.410:1862): avc: denied { ioctl } for pid=19439 comm="syz.6.3434" path="/dev/input/event3" dev="devtmpfs" ino=999 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1057.858290][ T5814] Bluetooth: hci0: command tx timeout [ 1058.079614][ T5819] usb 4-1: USB disconnect, device number 62 [ 1058.267966][T19449] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3436'. [ 1058.674436][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1058.714164][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1058.923203][T19451] FAULT_INJECTION: forcing a failure. [ 1058.923203][T19451] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.938050][T19451] CPU: 0 UID: 0 PID: 19451 Comm: syz.3.3437 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1058.938067][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1058.938074][T19451] Call Trace: [ 1058.938078][T19451] [ 1058.938083][T19451] dump_stack_lvl+0x16c/0x1f0 [ 1058.938101][T19451] should_fail_ex+0x512/0x640 [ 1058.938118][T19451] should_failslab+0xc2/0x120 [ 1058.938130][T19451] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1058.938149][T19451] ? skb_clone+0x190/0x3f0 [ 1058.938161][T19451] skb_clone+0x190/0x3f0 [ 1058.938172][T19451] netlink_deliver_tap+0xabd/0xd30 [ 1058.938187][T19451] netlink_unicast+0x5df/0x7f0 [ 1058.938201][T19451] ? __pfx_netlink_unicast+0x10/0x10 [ 1058.938216][T19451] netlink_sendmsg+0x8d1/0xdd0 [ 1058.938230][T19451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.938247][T19451] ____sys_sendmsg+0xa95/0xc70 [ 1058.938262][T19451] ? copy_msghdr_from_user+0x10a/0x160 [ 1058.938273][T19451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1058.938292][T19451] ___sys_sendmsg+0x134/0x1d0 [ 1058.938305][T19451] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.938344][T19451] __sys_sendmsg+0x16d/0x220 [ 1058.938356][T19451] ? __pfx___sys_sendmsg+0x10/0x10 [ 1058.938375][T19451] do_syscall_64+0xcd/0x260 [ 1058.938390][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.938402][T19451] RIP: 0033:0x7f506c98e969 [ 1058.938411][T19451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.938422][T19451] RSP: 002b:00007f506d7a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.938432][T19451] RAX: ffffffffffffffda RBX: 00007f506cbb5fa0 RCX: 00007f506c98e969 [ 1058.938439][T19451] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1058.938446][T19451] RBP: 00007f506d7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.938452][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.938459][T19451] R13: 0000000000000000 R14: 00007f506cbb5fa0 R15: 00007fff6d0ca908 [ 1058.938472][T19451] [ 1060.013026][T19458] FAULT_INJECTION: forcing a failure. [ 1060.013026][T19458] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.103544][ T5814] Bluetooth: hci0: command tx timeout [ 1060.169248][T19458] CPU: 0 UID: 0 PID: 19458 Comm: syz.7.3439 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1060.169274][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1060.169284][T19458] Call Trace: [ 1060.169291][T19458] [ 1060.169298][T19458] dump_stack_lvl+0x16c/0x1f0 [ 1060.169324][T19458] should_fail_ex+0x512/0x640 [ 1060.169349][T19458] should_failslab+0xc2/0x120 [ 1060.169368][T19458] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1060.169395][T19458] ? skb_clone+0x190/0x3f0 [ 1060.169415][T19458] skb_clone+0x190/0x3f0 [ 1060.169433][T19458] netlink_deliver_tap+0xabd/0xd30 [ 1060.169458][T19458] netlink_unicast+0x5df/0x7f0 [ 1060.169480][T19458] ? __pfx_netlink_unicast+0x10/0x10 [ 1060.169506][T19458] netlink_sendmsg+0x8d1/0xdd0 [ 1060.169529][T19458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.169558][T19458] ____sys_sendmsg+0xa95/0xc70 [ 1060.169580][T19458] ? copy_msghdr_from_user+0x10a/0x160 [ 1060.169596][T19458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1060.169629][T19458] ___sys_sendmsg+0x134/0x1d0 [ 1060.169646][T19458] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.169693][T19458] __sys_sendmsg+0x16d/0x220 [ 1060.169710][T19458] ? __pfx___sys_sendmsg+0x10/0x10 [ 1060.169734][T19458] ? rcu_is_watching+0x12/0xc0 [ 1060.169761][T19458] do_syscall_64+0xcd/0x260 [ 1060.169784][T19458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.169801][T19458] RIP: 0033:0x7fd95b78e969 [ 1060.169816][T19458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.169830][T19458] RSP: 002b:00007fd9595f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.169847][T19458] RAX: ffffffffffffffda RBX: 00007fd95b9b5fa0 RCX: 00007fd95b78e969 [ 1060.169858][T19458] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1060.169868][T19458] RBP: 00007fd9595f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.169878][T19458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.169888][T19458] R13: 0000000000000000 R14: 00007fd95b9b5fa0 R15: 00007ffdb8c50d18 [ 1060.169919][T19458] [ 1060.169947][T19458] netlink: 'syz.7.3439': attribute type 13 has an invalid length. [ 1060.256564][T19387] chnl_net:caif_netlink_parms(): no params data found [ 1060.281041][T19467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1060.428699][T19458] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3439'. [ 1060.455680][T19458] syz_tun: refused to change device tx_queue_len [ 1060.469201][T19458] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1060.518355][T19469] openvswitch: netlink: Message has 3 unknown bytes. [ 1060.525477][T19469] openvswitch: netlink: Actions may not be safe on all matching packets [ 1061.139124][T19387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.205178][T19387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.274247][T19387] bridge_slave_0: entered allmulticast mode [ 1061.615186][ T30] audit: type=1400 audit(2134284732.160:1863): avc: denied { bind } for pid=19476 comm="syz.4.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1061.835442][T19387] bridge_slave_0: entered promiscuous mode [ 1062.811755][T19387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.819018][ T5814] Bluetooth: hci0: command tx timeout [ 1062.873760][T19387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.883156][T19387] bridge_slave_1: entered allmulticast mode [ 1062.917179][T19387] bridge_slave_1: entered promiscuous mode [ 1063.184900][T19491] netlink: 'syz.3.3447': attribute type 1 has an invalid length. [ 1063.192763][T19491] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3447'. [ 1063.577244][T19387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.763827][T19387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.911115][T19387] team0: Port device team_slave_0 added [ 1064.212341][T19387] team0: Port device team_slave_1 added [ 1064.387408][ T30] audit: type=1400 audit(2134284735.280:1864): avc: denied { setopt } for pid=19507 comm="syz.3.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1064.431830][T19387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.209122][T19514] omfs: Invalid superblock (0) [ 1065.529008][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.569173][T19387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.571988][ T30] audit: type=1400 audit(2134284735.560:1865): avc: denied { write } for pid=19507 comm="syz.3.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1065.872580][ T30] audit: type=1400 audit(2134284735.580:1866): avc: denied { read } for pid=19507 comm="syz.3.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1065.978227][T19387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.986334][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.013693][T19387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.525090][ T30] audit: type=1400 audit(2134284737.420:1867): avc: denied { getopt } for pid=19522 comm="syz.3.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1066.562480][T19387] hsr_slave_0: entered promiscuous mode [ 1066.570143][T19387] hsr_slave_1: entered promiscuous mode [ 1066.576422][T19387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1066.584114][T19387] Cannot create hsr debugfs directory [ 1066.596325][ T30] audit: type=1400 audit(2134284737.490:1868): avc: denied { connect } for pid=19528 comm="syz.6.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1066.631289][ T30] audit: type=1400 audit(2134284737.520:1869): avc: denied { name_connect } for pid=19528 comm="syz.6.3448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1066.664223][ T30] audit: type=1400 audit(2134284737.520:1870): avc: denied { name_connect } for pid=19528 comm="syz.6.3448" dest=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1066.690699][ T30] audit: type=1400 audit(2134284737.520:1871): avc: denied { shutdown } for pid=19528 comm="syz.6.3448" lport=43763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1066.711467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1066.756354][ T5819] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1066.837672][T19536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1066.887327][T19536] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1066.943996][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 1066.959423][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.982966][ T5819] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1066.997532][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.028022][ T5819] usb 5-1: config 0 descriptor?? [ 1067.271705][ T30] audit: type=1400 audit(2134284738.160:1872): avc: denied { write } for pid=19538 comm="syz.7.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1067.296088][ T30] audit: type=1400 audit(2134284738.170:1873): avc: denied { nlmsg_write } for pid=19538 comm="syz.7.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1067.495540][ T5819] belkin 0003:050D:3201.0023: unknown main item tag 0x0 [ 1067.502731][ T5819] belkin 0003:050D:3201.0023: unknown main item tag 0x0 [ 1067.516800][ T5819] belkin 0003:050D:3201.0023: item fetching failed at offset 2/5 [ 1067.532337][ T5819] belkin 0003:050D:3201.0023: parse failed [ 1067.538204][ T5819] belkin 0003:050D:3201.0023: probe with driver belkin failed with error -22 [ 1067.614566][T19547] netlink: 'syz.7.3460': attribute type 1 has an invalid length. [ 1067.622479][T19547] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.3460'. [ 1067.969339][ T5819] usb 5-1: USB disconnect, device number 125 [ 1068.228871][T19550] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1068.448642][T19387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1068.460049][T19387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1068.471595][T19387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1068.487599][T19387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1068.514113][T19554] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1068.531272][T19553] IPVS: stopping master sync thread 19554 ... [ 1068.710126][T19561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1068.990947][T19563] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1069.178266][T19387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.232794][T19387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.271213][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.278349][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.314224][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.321334][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.549151][ T5860] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1070.045044][T19387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.083101][ T30] audit: type=1400 audit(2134284740.980:1874): avc: denied { write } for pid=19578 comm="syz.6.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1070.110395][ T5860] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1070.112898][ T30] audit: type=1400 audit(2134284740.980:1875): avc: denied { nlmsg_read } for pid=19578 comm="syz.6.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1070.140206][T19387] veth0_vlan: entered promiscuous mode [ 1070.165469][T19387] veth1_vlan: entered promiscuous mode [ 1070.197594][T19387] veth0_macvtap: entered promiscuous mode [ 1070.217710][T19387] veth1_macvtap: entered promiscuous mode [ 1070.223255][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.245405][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.255336][ T5860] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 129 [ 1070.272592][ T5860] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1070.283670][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.287656][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.293755][ T5860] usb 5-1: config 0 descriptor?? [ 1070.305994][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.538323][ T30] audit: type=1400 audit(2134284741.400:1876): avc: denied { create } for pid=19570 comm="syz.7.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1070.558097][ T30] audit: type=1400 audit(2134284741.400:1877): avc: denied { bind } for pid=19570 comm="syz.7.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1070.577694][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.588220][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.853650][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1070.938488][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1070.985466][ T30] audit: type=1400 audit(2134284741.400:1878): avc: denied { node_bind } for pid=19570 comm="syz.7.3468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1071.005616][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.016110][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.018834][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1071.027703][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.044050][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.051714][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1071.053856][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.066822][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1071.071368][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.078535][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1071.090046][T19387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.132594][T19582] ALSA: mixer_oss: invalid index 40000 [ 1071.153383][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.165670][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.176174][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.187623][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.197994][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.212894][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.234770][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1071.254539][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.259010][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1071.279675][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1071.286787][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1071.295577][ T30] audit: type=1400 audit(2134284742.170:1879): avc: denied { read write } for pid=19564 comm="syz.4.3466" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1071.309019][ T5860] hid-led 0003:1294:1320.0024: unknown main item tag 0x0 [ 1071.325614][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.348852][ T5860] hid-led 0003:1294:1320.0024: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 1071.362215][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.377355][ T30] audit: type=1400 audit(2134284742.180:1880): avc: denied { open } for pid=19564 comm="syz.4.3466" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1071.393152][ T5860] hid-led 0003:1294:1320.0024: Riso Kagaku Webmail Notifier initialized [ 1071.413656][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.434206][T19387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.442378][ T30] audit: type=1400 audit(2134284742.210:1881): avc: denied { ioctl } for pid=19564 comm="syz.4.3466" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1071.485782][T19387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.516310][T19387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.553593][T19387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.658206][T19387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.768518][T19602] netlink: 'syz.6.3474': attribute type 11 has an invalid length. [ 1071.776440][T19602] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3474'. [ 1071.785524][T19602] FAULT_INJECTION: forcing a failure. [ 1071.785524][T19602] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.798167][T19602] CPU: 0 UID: 0 PID: 19602 Comm: syz.6.3474 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1071.798191][T19602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1071.798201][T19602] Call Trace: [ 1071.798208][T19602] [ 1071.798215][T19602] dump_stack_lvl+0x16c/0x1f0 [ 1071.798241][T19602] should_fail_ex+0x512/0x640 [ 1071.798262][T19602] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1071.798283][T19602] should_failslab+0xc2/0x120 [ 1071.798301][T19602] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1071.798319][T19602] ? __nla_validate_parse+0x600/0x2880 [ 1071.798344][T19602] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1071.798371][T19602] kstrndup+0x6d/0x160 [ 1071.798398][T19602] hwsim_new_radio_nl+0xa0e/0x12c0 [ 1071.798424][T19602] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1071.798455][T19602] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1071.798480][T19602] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1071.798509][T19602] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1071.798534][T19602] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1071.798566][T19602] ? bpf_lsm_capable+0x9/0x10 [ 1071.798590][T19602] ? security_capable+0x7e/0x260 [ 1071.798611][T19602] ? ns_capable+0xd7/0x110 [ 1071.798635][T19602] genl_rcv_msg+0x55c/0x800 [ 1071.798660][T19602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1071.798683][T19602] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1071.798706][T19602] ? irqentry_exit+0x3b/0x90 [ 1071.798726][T19602] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.798753][T19602] netlink_rcv_skb+0x16a/0x440 [ 1071.798772][T19602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1071.798795][T19602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1071.798830][T19602] ? __pfx_down_read+0x10/0x10 [ 1071.798854][T19602] ? netlink_deliver_tap+0x1ae/0xd30 [ 1071.798878][T19602] genl_rcv+0x28/0x40 [ 1071.798896][T19602] netlink_unicast+0x53a/0x7f0 [ 1071.798920][T19602] ? __pfx_netlink_unicast+0x10/0x10 [ 1071.798948][T19602] netlink_sendmsg+0x8d1/0xdd0 [ 1071.798974][T19602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.799003][T19602] ____sys_sendmsg+0xa95/0xc70 [ 1071.799026][T19602] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.799046][T19602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1071.799080][T19602] ___sys_sendmsg+0x134/0x1d0 [ 1071.799099][T19602] ? __pfx____sys_sendmsg+0x10/0x10 [ 1071.799150][T19602] __sys_sendmsg+0x16d/0x220 [ 1071.799168][T19602] ? __pfx___sys_sendmsg+0x10/0x10 [ 1071.799202][T19602] do_syscall_64+0xcd/0x260 [ 1071.799225][T19602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.799243][T19602] RIP: 0033:0x7f958c58e969 [ 1071.799257][T19602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.799273][T19602] RSP: 002b:00007f958d335038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.799290][T19602] RAX: ffffffffffffffda RBX: 00007f958c7b6160 RCX: 00007f958c58e969 [ 1071.799300][T19602] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1071.799311][T19602] RBP: 00007f958d335090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.799321][T19602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.799331][T19602] R13: 0000000000000000 R14: 00007f958c7b6160 R15: 00007ffef86549b8 [ 1071.799355][T19602] [ 1071.942522][T19601] netlink: 'syz.7.3473': attribute type 1 has an invalid length. [ 1072.126129][T19601] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.3473'. [ 1072.205878][T19603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3472'. [ 1072.323047][T19511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.350957][T19511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.375381][T19511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.384237][T19511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.401800][T19605] FAULT_INJECTION: forcing a failure. [ 1072.401800][T19605] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.418616][T19605] CPU: 1 UID: 0 PID: 19605 Comm: syz.7.3475 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1072.418641][T19605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1072.418651][T19605] Call Trace: [ 1072.418663][T19605] [ 1072.418670][T19605] dump_stack_lvl+0x16c/0x1f0 [ 1072.418696][T19605] should_fail_ex+0x512/0x640 [ 1072.418717][T19605] ? fs_reclaim_acquire+0xae/0x150 [ 1072.418741][T19605] ? tomoyo_init_log+0x1385/0x2140 [ 1072.418762][T19605] should_failslab+0xc2/0x120 [ 1072.418780][T19605] __kmalloc_noprof+0xd2/0x510 [ 1072.418813][T19605] tomoyo_init_log+0x1385/0x2140 [ 1072.418850][T19605] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1072.418873][T19605] ? tomoyo_profile+0x47/0x60 [ 1072.418898][T19605] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 1072.418922][T19605] tomoyo_supervisor+0x302/0x13b0 [ 1072.418952][T19605] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1072.418992][T19605] ? rcu_is_watching+0x12/0xc0 [ 1072.419019][T19605] ? tomoyo_check_acl+0x1f7/0x410 [ 1072.419041][T19605] tomoyo_unix_entry+0x49c/0x650 [ 1072.419065][T19605] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 1072.419106][T19605] tomoyo_socket_bind_permission+0x305/0x350 [ 1072.419132][T19605] ? __pfx_tomoyo_socket_bind_permission+0x10/0x10 [ 1072.419154][T19605] ? __might_fault+0xe3/0x190 [ 1072.419168][T19605] ? __might_fault+0xe3/0x190 [ 1072.419192][T19605] security_socket_bind+0x9b/0x240 [ 1072.419211][T19605] __sys_bind+0x13e/0x260 [ 1072.419234][T19605] ? __pfx___sys_bind+0x10/0x10 [ 1072.419255][T19605] ? __fget_files+0x20e/0x3c0 [ 1072.419291][T19605] ? __pfx_ksys_write+0x10/0x10 [ 1072.419315][T19605] ? rcu_is_watching+0x12/0xc0 [ 1072.419339][T19605] __x64_sys_bind+0x72/0xb0 [ 1072.419360][T19605] ? lockdep_hardirqs_on+0x7c/0x110 [ 1072.419381][T19605] do_syscall_64+0xcd/0x260 [ 1072.419404][T19605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.419421][T19605] RIP: 0033:0x7fd95b78e969 [ 1072.419436][T19605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.419453][T19605] RSP: 002b:00007fd9595f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1072.419470][T19605] RAX: ffffffffffffffda RBX: 00007fd95b9b5fa0 RCX: 00007fd95b78e969 [ 1072.419482][T19605] RDX: 000000000000006e RSI: 0000200000000c40 RDI: 0000000000000006 [ 1072.419493][T19605] RBP: 00007fd9595f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.419503][T19605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.419513][T19605] R13: 0000000000000000 R14: 00007fd95b9b5fa0 R15: 00007ffdb8c50d18 [ 1072.419538][T19605] [ 1072.672702][ C1] vkms_vblank_simulate: vblank timer overrun [ 1072.770199][T17721] usb 5-1: USB disconnect, device number 126 [ 1072.822802][T19516] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1072.836513][T19516] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1072.844969][T19516] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1073.355759][ T30] audit: type=1400 audit(2134284744.250:1882): avc: denied { ioctl } for pid=19616 comm="syz.6.3480" path="socket:[80468]" dev="sockfs" ino=80468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1073.399205][ T30] audit: type=1400 audit(2134284744.290:1883): avc: denied { write } for pid=19616 comm="syz.6.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1074.381480][T19625] lo speed is unknown, defaulting to 1000 [ 1074.644778][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b78d800: rx timeout, send abort [ 1074.656760][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b78d800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1074.969090][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1074.983200][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1075.020659][T19633] delete_channel: no stack [ 1075.027364][T19633] 9pnet_fd: Insufficient options for proto=fd [ 1076.372274][T19644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3485'. [ 1076.588134][T19650] openvswitch: netlink: Message has 3 unknown bytes. [ 1076.595029][T19650] openvswitch: netlink: Actions may not be safe on all matching packets [ 1077.184142][T19511] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.264080][T19655] netlink: 'syz.7.3488': attribute type 2 has an invalid length. [ 1077.299038][T19655] netlink: 1184 bytes leftover after parsing attributes in process `syz.7.3488'. [ 1077.571421][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1077.571435][ T30] audit: type=1400 audit(2134284748.470:1886): avc: denied { bind } for pid=19657 comm="syz.6.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1077.638192][T19511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.660999][T19659] FAULT_INJECTION: forcing a failure. [ 1077.660999][T19659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.676164][T19659] CPU: 1 UID: 0 PID: 19659 Comm: syz.6.3489 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1077.676187][T19659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1077.676196][T19659] Call Trace: [ 1077.676202][T19659] [ 1077.676210][T19659] dump_stack_lvl+0x16c/0x1f0 [ 1077.676236][T19659] should_fail_ex+0x512/0x640 [ 1077.676261][T19659] _copy_from_user+0x2e/0xd0 [ 1077.676285][T19659] memdup_user+0x6b/0xe0 [ 1077.676308][T19659] strndup_user+0x78/0xe0 [ 1077.676327][T19659] __x64_sys_mount+0x137/0x310 [ 1077.676346][T19659] ? __pfx___x64_sys_mount+0x10/0x10 [ 1077.676371][T19659] do_syscall_64+0xcd/0x260 [ 1077.676395][T19659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.676412][T19659] RIP: 0033:0x7f958c58e969 [ 1077.676426][T19659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.676442][T19659] RSP: 002b:00007f958d356038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1077.676458][T19659] RAX: ffffffffffffffda RBX: 00007f958c7b6080 RCX: 00007f958c58e969 [ 1077.676469][T19659] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00002000000000c0 [ 1077.676480][T19659] RBP: 00007f958d356090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.676490][T19659] R10: 0000000002000010 R11: 0000000000000246 R12: 0000000000000001 [ 1077.676501][T19659] R13: 0000000000000001 R14: 00007f958c7b6080 R15: 00007ffef86549b8 [ 1077.676524][T19659] [ 1077.824978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.080441][T19245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1078.099093][T19245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1078.107597][T19666] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1078.107879][T19245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1078.116227][T19511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.122981][T19245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1078.143560][T19245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1079.215808][T19663] lo speed is unknown, defaulting to 1000 [ 1079.624614][T19511] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.259759][T19675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1080.350342][ T5814] Bluetooth: hci0: command tx timeout [ 1080.924284][T19680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.140486][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'. [ 1081.191593][T19680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.207665][T19702] tmpfs: Bad value for 'mpol' [ 1081.212475][T19680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.272969][T19680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.287079][T19680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.304841][T19680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.314752][T19680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.314984][T19704] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3501'. [ 1081.325241][T19680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.325284][T19680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.325299][T19680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.325317][T19680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.325330][T19680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.326123][T19511] bridge_slave_1: left allmulticast mode [ 1081.617807][T19711] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3502'. [ 1081.859071][T19511] bridge_slave_1: left promiscuous mode [ 1081.864945][T19511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.902794][T19511] bridge_slave_0: left allmulticast mode [ 1081.943338][T19511] bridge_slave_0: left promiscuous mode [ 1081.956314][T19511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.401729][T19718] overlayfs: failed to resolve './file1': -2 [ 1082.432410][ T5814] Bluetooth: hci0: command tx timeout [ 1083.145095][T19511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.156814][T19511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.170524][T19511] bond0 (unregistering): Released all slaves [ 1083.191683][T19705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.217568][T19705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.297158][T19705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.323628][T19705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.414377][ T30] audit: type=1400 audit(2134285267.301:1887): avc: denied { read } for pid=19726 comm="syz.6.3506" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1083.760233][T17721] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1083.903665][ T30] audit: type=1400 audit(2134285267.301:1888): avc: denied { open } for pid=19726 comm="syz.6.3506" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1084.077294][ T30] audit: type=1400 audit(2134285267.301:1889): avc: denied { ioctl } for pid=19726 comm="syz.6.3506" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1084.355850][T19736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.512434][ T5814] Bluetooth: hci0: command tx timeout [ 1084.579145][T19663] chnl_net:caif_netlink_parms(): no params data found [ 1084.636067][T17721] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1084.644349][T17721] usb 4-1: config 0 has no interface number 0 [ 1084.650554][T17721] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1084.681063][T17721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.705127][T17721] usb 4-1: config 0 descriptor?? [ 1084.713043][T17721] usb 4-1: selecting invalid altsetting 1 [ 1084.730835][T17721] dvb_ttusb_budget: ttusb_init_controller: error [ 1084.774381][T17721] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1084.928249][ T30] audit: type=1400 audit(2134285268.815:1890): avc: denied { append } for pid=19724 comm="syz.3.3507" name="i2c-1" dev="devtmpfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1084.951137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1084.959164][T17721] DVB: Unable to find symbol cx22700_attach() [ 1085.079574][T17721] DVB: Unable to find symbol tda10046_attach() [ 1085.089044][T17721] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1085.103589][T17721] usb 4-1: USB disconnect, device number 63 [ 1085.282934][T19511] hsr_slave_0: left promiscuous mode [ 1085.307209][T19511] hsr_slave_1: left promiscuous mode [ 1085.320126][T19511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.327585][T19511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.337077][T19511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.344767][T19511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.649106][T19511] veth1_macvtap: left promiscuous mode [ 1085.671508][ T5819] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1085.687713][T19511] veth0_macvtap: left promiscuous mode [ 1085.733376][T19511] veth1_vlan: left promiscuous mode [ 1085.751943][T19511] veth0_vlan: left promiscuous mode [ 1085.815263][ T30] audit: type=1400 audit(2134285269.698:1891): avc: denied { read write } for pid=19754 comm="syz.3.3513" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1085.838973][ C1] vkms_vblank_simulate: vblank timer overrun [ 1085.876694][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1085.894960][ T30] audit: type=1400 audit(2134285269.698:1892): avc: denied { open } for pid=19754 comm="syz.3.3513" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1085.911600][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 102, changing to 7 [ 1085.931946][ T30] audit: type=1400 audit(2134285269.728:1893): avc: denied { ioctl } for pid=19754 comm="syz.3.3513" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1085.945714][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 24624, setting to 1024 [ 1086.002827][ T5819] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1086.023883][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.031944][ T5819] usb 5-1: Product: syz [ 1086.041509][ T5819] usb 5-1: Manufacturer: syz [ 1086.046159][ T5819] usb 5-1: SerialNumber: syz [ 1086.088142][ T5819] usb 5-1: config 0 descriptor?? [ 1086.105161][ T5819] usb 5-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 66 [ 1086.449772][T19511] team0 (unregistering): Port device team_slave_1 removed [ 1086.493803][T19511] team0 (unregistering): Port device team_slave_0 removed [ 1086.582595][ T5814] Bluetooth: hci0: command tx timeout [ 1086.955782][T19766] batman_adv: batadv0: Adding interface: dummy0 [ 1086.965728][T19766] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.994975][T19766] batman_adv: batadv0: Interface activated: dummy0 [ 1087.042667][T19663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.055837][T19663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.064253][T19663] bridge_slave_0: entered allmulticast mode [ 1087.078930][T19663] bridge_slave_0: entered promiscuous mode [ 1087.089573][T19663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.100614][T19663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.107844][T19663] bridge_slave_1: entered allmulticast mode [ 1087.127389][T19663] bridge_slave_1: entered promiscuous mode [ 1087.192232][T19663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.204650][T19663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.276936][T19663] team0: Port device team_slave_0 added [ 1087.288760][T17059] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1087.297075][T19663] team0: Port device team_slave_1 added [ 1087.418812][T19663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.426937][T19663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.452895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1087.461560][T19663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.482180][T19663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.490160][T19663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.506570][T17059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1087.519808][T19663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.527133][T17059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.527170][T17059] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1087.611942][T19777] openvswitch: netlink: Message has 3 unknown bytes. [ 1087.618951][T19777] openvswitch: netlink: Actions may not be safe on all matching packets [ 1087.938149][T17059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.948173][T17059] usb 4-1: config 0 descriptor?? [ 1087.965467][T19663] hsr_slave_0: entered promiscuous mode [ 1087.971864][T19663] hsr_slave_1: entered promiscuous mode [ 1087.977886][T19663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1087.986764][T19663] Cannot create hsr debugfs directory [ 1088.421025][ T5819] usb 5-1: USB disconnect, device number 127 [ 1088.529870][T19786] netlink: 'syz.6.3520': attribute type 1 has an invalid length. [ 1088.537804][T19786] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.3520'. [ 1089.043526][T19511] dvmrp1 (unregistering): left allmulticast mode [ 1089.141632][ T30] audit: type=1400 audit(2134285272.993:1894): avc: denied { create } for pid=19780 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1089.162741][ T30] audit: type=1400 audit(2134285272.993:1895): avc: denied { bind } for pid=19780 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1089.182700][ T30] audit: type=1400 audit(2134285272.993:1896): avc: denied { listen } for pid=19780 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1089.462625][T19511] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 1089.510122][T19511] bridge2 (unregistering): left promiscuous mode [ 1090.092995][T19511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.151608][T19511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.181256][T19511] bond0 (unregistering): Released all slaves [ 1090.365293][T19511] bond1 (unregistering): Released all slaves [ 1090.530078][T19511] bond2 (unregistering): Released all slaves [ 1090.591186][T19511] bond3 (unregistering): Released all slaves [ 1090.741566][T19511] bond4 (unregistering): (slave vlan2): Releasing active interface [ 1090.750619][T19511] bond4 (unregistering): Released all slaves [ 1090.843894][T19511] bond5 (unregistering): Released all slaves [ 1090.898071][T17059] usbhid 4-1:0.0: can't add hid device: -71 [ 1090.910635][T17059] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1090.924261][T17059] usb 4-1: USB disconnect, device number 64 [ 1090.935764][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3523'. [ 1090.958300][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3523'. [ 1091.061643][ T30] audit: type=1400 audit(2134285274.869:1897): avc: denied { getopt } for pid=19797 comm="syz.6.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1091.671470][T19511] : left promiscuous mode [ 1091.751144][T19511] tipc: Disabling bearer [ 1091.784653][T19511] tipc: Left network mode [ 1092.019085][T19808] openvswitch: netlink: Message has 3 unknown bytes. [ 1092.025799][T19808] openvswitch: netlink: Actions may not be safe on all matching packets [ 1092.317546][T19815] vivid-001: disconnect [ 1093.034814][ T5819] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1093.237635][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1093.256994][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 102, changing to 7 [ 1093.275896][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 24624, setting to 1024 [ 1093.292891][ T5819] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1093.303628][ T30] audit: type=1400 audit(2134285277.134:1898): avc: denied { read write } for pid=19825 comm="syz.6.3532" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1093.308940][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.327153][ C1] vkms_vblank_simulate: vblank timer overrun [ 1093.353312][ T5819] usb 8-1: Product: syz [ 1093.361067][T19511] hsr_slave_0: left promiscuous mode [ 1093.370458][T19511] hsr_slave_1: left promiscuous mode [ 1093.380382][T19511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.388722][ T5819] usb 8-1: Manufacturer: syz [ 1093.393769][T19511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.401556][ T5819] usb 8-1: SerialNumber: syz [ 1093.413529][T19511] veth1_macvtap: left promiscuous mode [ 1093.419907][ T5819] usb 8-1: config 0 descriptor?? [ 1093.424963][T19511] veth0_macvtap: left promiscuous mode [ 1093.433355][ T5819] usb 8-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 66 [ 1093.443787][T19511] veth1_vlan: left promiscuous mode [ 1093.662896][T19814] vivid-001: reconnect [ 1093.900892][T19511] team0 (unregistering): Port device team_slave_1 removed [ 1093.939869][T19511] team0 (unregistering): Port device team_slave_0 removed [ 1094.517584][T19663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1094.531893][T19663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1094.542814][T19663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1094.558539][T19663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1094.727551][T19837] netlink: 'syz.4.3534': attribute type 1 has an invalid length. [ 1094.735394][T19837] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3534'. [ 1095.090587][T19511] IPVS: stop unused estimator thread 0... [ 1095.102770][T19663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.116125][ T30] audit: type=1400 audit(2134285278.931:1899): avc: denied { load_policy } for pid=19838 comm="syz.3.3535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1095.140661][T19839] SELinux: ebitmap: truncated map [ 1095.158108][T19663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.171218][T19839] SELinux: failed to load policy [ 1095.184888][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.192023][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.269599][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.276814][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.657839][T19845] netlink: 'syz.7.3537': attribute type 10 has an invalid length. [ 1095.712815][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1095.742035][ T5819] usb 8-1: USB disconnect, device number 9 [ 1095.746756][T19845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.755225][T19845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.788024][T19845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.795201][T19845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.802592][T19845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.809767][T19845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.831302][T19845] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1095.895885][ T10] usb 5-1: device descriptor read/64, error -71 [ 1095.971193][T19848] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1096.385911][T19663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.452818][T19663] veth0_vlan: entered promiscuous mode [ 1096.469867][T19663] veth1_vlan: entered promiscuous mode [ 1096.492827][T19663] veth0_macvtap: entered promiscuous mode [ 1096.502053][T19663] veth1_macvtap: entered promiscuous mode [ 1096.518910][T19663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.529657][T19663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.529728][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1096.552037][T19663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.564635][T19663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.577337][T19663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.604717][T19663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.614879][T19663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.625868][T19663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.643657][T19663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.699184][ T10] usb 5-1: device descriptor read/64, error -71 [ 1096.839159][ T10] usb usb5-port1: attempt power cycle [ 1097.073614][T19663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.084230][T19663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.095321][T19663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.159300][T19862] openvswitch: netlink: Message has 3 unknown bytes. [ 1097.166248][T19862] openvswitch: netlink: Actions may not be safe on all matching packets [ 1097.383595][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1097.405529][ T10] usb 5-1: device descriptor read/8, error -71 [ 1097.417741][T19663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.515507][T19663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.536997][ T30] audit: type=1400 audit(2134285281.336:1900): avc: denied { ioctl } for pid=19863 comm="syz.7.3542" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1097.541234][T19663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.581561][T19663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.687398][T19868] fuse: Unknown parameter '000000000000000000040xffffffffffffffff' [ 1097.705760][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1097.775198][ T10] usb 5-1: device descriptor read/8, error -71 [ 1097.826266][ T5819] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1097.838807][T19663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.934612][T19663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.964515][ T10] usb usb5-port1: unable to enumerate USB device [ 1098.044947][T19663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.096317][T19663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.140844][T19663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.193361][T19663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.234520][T19870] vivid-002: disconnect [ 1098.543254][T19504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.565395][T19504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.616223][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.651225][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.684689][T19873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1098.741675][ T5819] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1098.745178][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.784740][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.836486][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.918083][ T5819] usb 8-1: config 0 descriptor?? [ 1099.727187][T19886] netlink: 'syz.3.3547': attribute type 1 has an invalid length. [ 1099.735002][T19886] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3547'. [ 1099.747303][T19869] vivid-002: reconnect [ 1099.926779][T19518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.282449][T19518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.340180][T19518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.581779][T19518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.691170][ T30] audit: type=1400 audit(2134285284.456:1901): avc: denied { recv } for pid=1142 comm="kworker/u8:5" saddr=10.128.0.169 src=48668 daddr=10.128.0.127 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1100.719544][ T30] audit: type=1400 audit(2134285284.456:1902): avc: denied { read } for pid=5166 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1100.741530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1100.747961][ T30] audit: type=1400 audit(2134285284.456:1903): avc: denied { search } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.776557][ T5819] usbhid 8-1:0.0: can't add hid device: -71 [ 1100.782585][ T5819] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1100.829600][ T5819] usb 8-1: USB disconnect, device number 10 [ 1100.865297][ T30] audit: type=1400 audit(2134285284.456:1904): avc: denied { append } for pid=5166 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1100.943541][ T30] audit: type=1400 audit(2134285284.456:1905): avc: denied { open } for pid=5166 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1101.046529][ T30] audit: type=1400 audit(2134285284.456:1906): avc: denied { getattr } for pid=5166 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1101.181548][T19518] bridge_slave_1: left allmulticast mode [ 1101.207289][T19518] bridge_slave_1: left promiscuous mode [ 1101.213017][T19518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.288723][T19518] bridge_slave_0: left allmulticast mode [ 1101.294403][T19518] bridge_slave_0: left promiscuous mode [ 1101.326733][T19518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.599326][T19518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.609881][T19518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.619209][T19518] bond0 (unregistering): Released all slaves [ 1101.846850][T19518] hsr_slave_0: left promiscuous mode [ 1101.855600][T19518] hsr_slave_1: left promiscuous mode [ 1101.861464][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1101.868850][T19518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.880700][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1101.892747][T19518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.912747][T19518] veth1_macvtap: left promiscuous mode [ 1101.918266][T19518] veth0_macvtap: left promiscuous mode [ 1101.923894][T19518] veth1_vlan: left promiscuous mode [ 1101.930216][T19518] veth0_vlan: left promiscuous mode [ 1102.230582][T19518] team0 (unregistering): Port device team_slave_1 removed [ 1102.270782][T19518] team0 (unregistering): Port device team_slave_0 removed [ 1102.866288][T19518] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.963103][T19518] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.998186][T19518] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.058252][T19518] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.147176][T19518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.229632][T19518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.300802][T19518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.362807][T19518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.463578][T19518] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.474113][T19518] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.534756][T19518] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.545241][T19518] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.593155][T19518] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.603537][T19518] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.684029][T19518] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.694443][T19518] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.800695][T19518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.874872][T19518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.953531][T19518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.014467][T19518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.097191][T19518] bridge_slave_1: left allmulticast mode [ 1104.102829][T19518] bridge_slave_1: left promiscuous mode [ 1104.108552][T19518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.117127][T19518] bridge_slave_0: left allmulticast mode [ 1104.122744][T19518] bridge_slave_0: left promiscuous mode [ 1104.128414][T19518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.137113][T19518] bridge_slave_1: left allmulticast mode [ 1104.142729][T19518] bridge_slave_1: left promiscuous mode [ 1104.148634][T19518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.156788][T19518] bridge_slave_0: left allmulticast mode [ 1104.162414][T19518] bridge_slave_0: left promiscuous mode [ 1104.168183][T19518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.177165][T19518] bridge_slave_1: left promiscuous mode [ 1104.182773][T19518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.192173][T19518] bridge_slave_0: left allmulticast mode [ 1104.197863][T19518] bridge_slave_0: left promiscuous mode [ 1104.203455][T19518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.213642][T19518] bridge_slave_1: left allmulticast mode [ 1104.219576][T19518] bridge_slave_1: left promiscuous mode [ 1104.225297][T19518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.233417][T19518] bridge_slave_0: left allmulticast mode [ 1104.240033][T19518] bridge_slave_0: left promiscuous mode [ 1104.245971][T19518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.767895][T19518] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1105.169523][T19518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.180522][T19518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.189752][T19518] bond0 (unregistering): Released all slaves [ 1105.277808][T19518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.288692][T19518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.299139][T19518] bond0 (unregistering): Released all slaves [ 1105.394635][T19518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.404384][T19518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.415261][T19518] bond0 (unregistering): Released all slaves [ 1105.501675][T19518] bond1 (unregistering): Released all slaves [ 1105.586497][T19518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.596300][T19518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.605571][T19518] bond0 (unregistering): Released all slaves [ 1106.238245][T19518] hsr_slave_0: left promiscuous mode [ 1106.243882][T19518] hsr_slave_1: left promiscuous mode [ 1106.249692][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.257105][T19518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.264578][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.272759][T19518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.282232][T19518] hsr_slave_0: left promiscuous mode [ 1106.288379][T19518] hsr_slave_1: left promiscuous mode [ 1106.297818][T19518] hsr_slave_0: left promiscuous mode [ 1106.303417][T19518] hsr_slave_1: left promiscuous mode [ 1106.310001][T19518] batman_adv: batadv0: Interface deactivated: dummy0 [ 1106.316668][T19518] batman_adv: batadv0: Removing interface: dummy0 [ 1106.323537][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.330913][T19518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.338729][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.346089][T19518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.355870][T19518] hsr_slave_0: left promiscuous mode [ 1106.361515][T19518] hsr_slave_1: left promiscuous mode [ 1106.367137][T19518] batman_adv: batadv0: Interface deactivated: dummy0 [ 1106.373810][T19518] batman_adv: batadv0: Removing interface: dummy0 [ 1106.380624][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.388058][T19518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.395540][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.403265][T19518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.444590][T19518] veth1_macvtap: left promiscuous mode [ 1106.450399][T19518] veth0_macvtap: left promiscuous mode [ 1106.455912][T19518] veth1_vlan: left promiscuous mode [ 1106.461263][T19518] veth0_vlan: left promiscuous mode [ 1106.467232][T19518] veth1_macvtap: left promiscuous mode [ 1106.472743][T19518] veth0_macvtap: left promiscuous mode [ 1106.478390][T19518] veth1_vlan: left promiscuous mode [ 1106.483601][T19518] veth0_vlan: left promiscuous mode [ 1106.489912][T19518] veth1_vlan: left promiscuous mode [ 1106.495138][T19518] veth0_vlan: left promiscuous mode [ 1106.501102][T19518] veth1_macvtap: left promiscuous mode [ 1106.506558][T19518] veth0_macvtap: left promiscuous mode [ 1106.512158][T19518] veth1_vlan: left promiscuous mode [ 1106.517366][T19518] veth0_vlan: left promiscuous mode [ 1106.946276][T19518] team0 (unregistering): Port device team_slave_1 removed [ 1106.982658][T19518] team0 (unregistering): Port device team_slave_0 removed [ 1107.519256][T19518] team0 (unregistering): Port device team_slave_1 removed [ 1107.549777][T19518] team0 (unregistering): Port device team_slave_0 removed [ 1108.031706][T19518] team0 (unregistering): Port device team_slave_1 removed [ 1108.067351][T19518] team0 (unregistering): Port device team_slave_0 removed [ 1108.594553][T19518] team0 (unregistering): Port device team_slave_1 removed [ 1108.632871][T19518] team0 (unregistering): Port device team_slave_0 removed [ 1109.744491][T19518] IPVS: stop unused estimator thread 0... [ 1109.812022][T19518] bridge_slave_1: left allmulticast mode [ 1109.817782][T19518] bridge_slave_1: left promiscuous mode [ 1109.823403][T19518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.832223][T19518] bridge_slave_0: left promiscuous mode [ 1109.838139][T19518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.851020][T19518] ================================================================== [ 1109.859061][T19518] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 1109.866491][T19518] Read of size 8 at addr ffffffff9af97530 by task kworker/u8:20/19518 [ 1109.874606][T19518] [ 1109.876904][T19518] CPU: 1 UID: 0 PID: 19518 Comm: kworker/u8:20 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1109.876919][T19518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1109.876926][T19518] Workqueue: netns cleanup_net [ 1109.876941][T19518] Call Trace: [ 1109.876945][T19518] [ 1109.876953][T19518] dump_stack_lvl+0x116/0x1f0 [ 1109.876968][T19518] print_report+0xc3/0x670 [ 1109.876979][T19518] ? __virt_addr_valid+0x5e/0x590 [ 1109.876994][T19518] ? __phys_addr+0xc6/0x150 [ 1109.877009][T19518] ? fib6_ifdown+0x7f5/0x8f0 [ 1109.877018][T19518] kasan_report+0xe0/0x110 [ 1109.877028][T19518] ? fib6_ifdown+0x7f5/0x8f0 [ 1109.877039][T19518] fib6_ifdown+0x7f5/0x8f0 [ 1109.877048][T19518] ? __lock_acquire+0x5ca/0x1ba0 [ 1109.877065][T19518] ? __pfx_fib6_ifdown+0x10/0x10 [ 1109.877075][T19518] fib6_clean_node+0x2a4/0x5b0 [ 1109.877085][T19518] ? __pfx_fib6_clean_node+0x10/0x10 [ 1109.877097][T19518] fib6_walk_continue+0x44f/0x8d0 [ 1109.877114][T19518] fib6_walk+0x182/0x370 [ 1109.877129][T19518] ? __pfx_fib6_ifdown+0x10/0x10 [ 1109.877138][T19518] fib6_clean_tree+0xd4/0x110 [ 1109.877153][T19518] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1109.877168][T19518] ? __lock_acquire+0xaa4/0x1ba0 [ 1109.877185][T19518] ? __pfx_fib6_clean_node+0x10/0x10 [ 1109.877194][T19518] ? __pfx_fib6_ifdown+0x10/0x10 [ 1109.877205][T19518] ? __pfx_fib6_ifdown+0x10/0x10 [ 1109.877215][T19518] __fib6_clean_all+0x107/0x2d0 [ 1109.877232][T19518] rt6_disable_ip+0x2ec/0x990 [ 1109.877245][T19518] ? __mutex_trylock_common+0xe9/0x250 [ 1109.877262][T19518] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1109.877279][T19518] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1109.877293][T19518] ? rcu_is_watching+0x12/0xc0 [ 1109.877306][T19518] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 1109.877318][T19518] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1109.877333][T19518] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1109.877346][T19518] addrconf_notify+0x220/0x19e0 [ 1109.877358][T19518] ? ip6mr_device_event+0x1bc/0x230 [ 1109.877372][T19518] notifier_call_chain+0xb9/0x410 [ 1109.877387][T19518] ? __pfx_addrconf_notify+0x10/0x10 [ 1109.877400][T19518] call_netdevice_notifiers_info+0xbe/0x140 [ 1109.877415][T19518] dev_close_many+0x319/0x630 [ 1109.877428][T19518] ? __pfx_dev_close_many+0x10/0x10 [ 1109.877443][T19518] unregister_netdevice_many_notify+0x578/0x26f0 [ 1109.877455][T19518] ? __lock_acquire+0x5ca/0x1ba0 [ 1109.877472][T19518] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1109.877485][T19518] ? unregister_netdevice_queue+0x22e/0x3f0 [ 1109.877496][T19518] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1109.877508][T19518] ? find_held_lock+0x2b/0x80 [ 1109.877520][T19518] ? bond_net_exit_batch_rtnl+0x138/0x430 [ 1109.877533][T19518] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 1109.877544][T19518] ? mutex_is_locked+0x17/0x60 [ 1109.877560][T19518] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 1109.877571][T19518] cleanup_net+0x596/0xb30 [ 1109.877583][T19518] ? __pfx_cleanup_net+0x10/0x10 [ 1109.877596][T19518] ? rcu_is_watching+0x12/0xc0 [ 1109.877609][T19518] process_one_work+0x9cc/0x1b70 [ 1109.877622][T19518] ? __pfx_cleanup_net+0x10/0x10 [ 1109.877634][T19518] ? __pfx_process_one_work+0x10/0x10 [ 1109.877646][T19518] ? assign_work+0x1a0/0x250 [ 1109.877657][T19518] worker_thread+0x6c8/0xf10 [ 1109.877670][T19518] ? __pfx_worker_thread+0x10/0x10 [ 1109.877681][T19518] kthread+0x3c2/0x780 [ 1109.877690][T19518] ? __pfx_kthread+0x10/0x10 [ 1109.877699][T19518] ? __pfx_kthread+0x10/0x10 [ 1109.877708][T19518] ? __pfx_kthread+0x10/0x10 [ 1109.877717][T19518] ? __pfx_kthread+0x10/0x10 [ 1109.877726][T19518] ? rcu_is_watching+0x12/0xc0 [ 1109.877738][T19518] ? __pfx_kthread+0x10/0x10 [ 1109.877747][T19518] ret_from_fork+0x45/0x80 [ 1109.877757][T19518] ? __pfx_kthread+0x10/0x10 [ 1109.877766][T19518] ret_from_fork_asm+0x1a/0x30 [ 1109.877785][T19518] [ 1109.877789][T19518] [ 1110.245258][T19518] The buggy address belongs to the variable: [ 1110.251206][T19518] __key.0+0x30/0x40 [ 1110.255087][T19518] [ 1110.257386][T19518] The buggy address belongs to the physical page: [ 1110.263767][T19518] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af97 [ 1110.272502][T19518] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1110.280373][T19518] raw: 00fff00000002000 ffffea00006be5c8 ffffea00006be5c8 0000000000000000 [ 1110.288930][T19518] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1110.297487][T19518] page dumped because: kasan: bad access detected [ 1110.303879][T19518] page_owner info is not present (never set?) [ 1110.309913][T19518] [ 1110.312211][T19518] Memory state around the buggy address: [ 1110.317812][T19518] ffffffff9af97400: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1110.325848][T19518] ffffffff9af97480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1110.333882][T19518] >ffffffff9af97500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1110.341915][T19518] ^ [ 1110.347520][T19518] ffffffff9af97580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 [ 1110.355553][T19518] ffffffff9af97600: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 1110.363587][T19518] ================================================================== [ 1110.371650][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.377639][T19518] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1110.384818][T19518] CPU: 1 UID: 0 PID: 19518 Comm: kworker/u8:20 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 1110.397116][T19518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1110.407151][T19518] Workqueue: netns cleanup_net [ 1110.411900][T19518] Call Trace: [ 1110.415157][T19518] [ 1110.418068][T19518] dump_stack_lvl+0x3d/0x1f0 [ 1110.422641][T19518] panic+0x71c/0x800 [ 1110.426519][T19518] ? __pfx_panic+0x10/0x10 [ 1110.430920][T19518] ? mark_held_locks+0x49/0x80 [ 1110.435675][T19518] ? fib6_ifdown+0x7f5/0x8f0 [ 1110.440244][T19518] ? check_panic_on_warn+0x1f/0xb0 [ 1110.445338][T19518] ? fib6_ifdown+0x7f5/0x8f0 [ 1110.449903][T19518] check_panic_on_warn+0xab/0xb0 [ 1110.454826][T19518] end_report+0x107/0x170 [ 1110.459132][T19518] kasan_report+0xee/0x110 [ 1110.463525][T19518] ? fib6_ifdown+0x7f5/0x8f0 [ 1110.468091][T19518] fib6_ifdown+0x7f5/0x8f0 [ 1110.472485][T19518] ? __lock_acquire+0x5ca/0x1ba0 [ 1110.477405][T19518] ? __pfx_fib6_ifdown+0x10/0x10 [ 1110.482318][T19518] fib6_clean_node+0x2a4/0x5b0 [ 1110.487077][T19518] ? __pfx_fib6_clean_node+0x10/0x10 [ 1110.492353][T19518] fib6_walk_continue+0x44f/0x8d0 [ 1110.497365][T19518] fib6_walk+0x182/0x370 [ 1110.501595][T19518] ? __pfx_fib6_ifdown+0x10/0x10 [ 1110.506513][T19518] fib6_clean_tree+0xd4/0x110 [ 1110.511178][T19518] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1110.516448][T19518] ? __lock_acquire+0xaa4/0x1ba0 [ 1110.521374][T19518] ? __pfx_fib6_clean_node+0x10/0x10 [ 1110.526640][T19518] ? __pfx_fib6_ifdown+0x10/0x10 [ 1110.531562][T19518] ? __pfx_fib6_ifdown+0x10/0x10 [ 1110.536479][T19518] __fib6_clean_all+0x107/0x2d0 [ 1110.541320][T19518] rt6_disable_ip+0x2ec/0x990 [ 1110.545979][T19518] ? __mutex_trylock_common+0xe9/0x250 [ 1110.551422][T19518] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1110.557301][T19518] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1110.562483][T19518] ? rcu_is_watching+0x12/0xc0 [ 1110.567229][T19518] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 1110.572666][T19518] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1110.578287][T19518] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1110.584160][T19518] addrconf_notify+0x220/0x19e0 [ 1110.588992][T19518] ? ip6mr_device_event+0x1bc/0x230 [ 1110.594173][T19518] notifier_call_chain+0xb9/0x410 [ 1110.599181][T19518] ? __pfx_addrconf_notify+0x10/0x10 [ 1110.604447][T19518] call_netdevice_notifiers_info+0xbe/0x140 [ 1110.610325][T19518] dev_close_many+0x319/0x630 [ 1110.614986][T19518] ? __pfx_dev_close_many+0x10/0x10 [ 1110.620168][T19518] unregister_netdevice_many_notify+0x578/0x26f0 [ 1110.626478][T19518] ? __lock_acquire+0x5ca/0x1ba0 [ 1110.631403][T19518] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1110.638144][T19518] ? unregister_netdevice_queue+0x22e/0x3f0 [ 1110.644016][T19518] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1110.650235][T19518] ? find_held_lock+0x2b/0x80 [ 1110.654892][T19518] ? bond_net_exit_batch_rtnl+0x138/0x430 [ 1110.660593][T19518] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 1110.666896][T19518] ? mutex_is_locked+0x17/0x60 [ 1110.671645][T19518] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 1110.677620][T19518] cleanup_net+0x596/0xb30 [ 1110.682029][T19518] ? __pfx_cleanup_net+0x10/0x10 [ 1110.686954][T19518] ? rcu_is_watching+0x12/0xc0 [ 1110.691707][T19518] process_one_work+0x9cc/0x1b70 [ 1110.696647][T19518] ? __pfx_cleanup_net+0x10/0x10 [ 1110.701577][T19518] ? __pfx_process_one_work+0x10/0x10 [ 1110.706937][T19518] ? assign_work+0x1a0/0x250 [ 1110.711510][T19518] worker_thread+0x6c8/0xf10 [ 1110.716090][T19518] ? __pfx_worker_thread+0x10/0x10 [ 1110.721185][T19518] kthread+0x3c2/0x780 [ 1110.725235][T19518] ? __pfx_kthread+0x10/0x10 [ 1110.729805][T19518] ? __pfx_kthread+0x10/0x10 [ 1110.734377][T19518] ? __pfx_kthread+0x10/0x10 [ 1110.738944][T19518] ? __pfx_kthread+0x10/0x10 [ 1110.743511][T19518] ? rcu_is_watching+0x12/0xc0 [ 1110.748254][T19518] ? __pfx_kthread+0x10/0x10 [ 1110.752822][T19518] ret_from_fork+0x45/0x80 [ 1110.757217][T19518] ? __pfx_kthread+0x10/0x10 [ 1110.761783][T19518] ret_from_fork_asm+0x1a/0x30 [ 1110.766534][T19518] [ 1110.769722][T19518] Kernel Offset: disabled [ 1110.774020][T19518] Rebooting in 86400 seconds..