last executing test programs: 8.326783435s ago: executing program 3 (id=70): setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000380), &(0x7f00000001c0), &(0x7f0000000180)="01", 0x1, 0xfffffffffffffffe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x1) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) 7.328733772s ago: executing program 0 (id=76): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x368, 0x258, 0x258, 0x368, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x40000, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x138, 0x1a0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@rateest={{0x68}, {'veth1_vlan\x00', 'veth0\x00', 0x24, 0x3, 0x8, 0x2, 0x39, 0x80000001, {0x8001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1c8, 0x0, {}, [@common=@srh1={{0x90}, {0xff, 0x6, 0x4, 0xf6, 0x8, @mcast1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0x80800000], [0xff, 0xffffff00, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 0x450, 0x18}}, @common=@icmp6={{0x28}, {0x0, "e1f6", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 7.135001354s ago: executing program 0 (id=77): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r0 = getpid() r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000914000/0x18000)=nil, &(0x7f0000001400)=[@text64={0x40, &(0x7f00000013c0)="c4c2e1bb0266b824008ed066ba430066b8a25e66ef8fc8a0a21fba440f20c03502000000440f22c0430f01df0fc7bb00000000f26440f4c4227d97d6400f01c8", 0x40}], 0x1, 0x25, &(0x7f0000001440), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/4014, 0xfae) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0xb, 0x1d8, 0x2a8, 0x2a8, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@private1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @local, [], [], 'pim6reg1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f00000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_usb_connect(0x3, 0x2d, &(0x7f0000001300)=ANY=[@ANYRESDEC=r5, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="474cd81f25a82943fb4833daf48385df50daef05a0fc8cd991f75998aaaf23417cf3c7b62b6b0a9b0fdaae7e3c37e415d75c3e6c70f3db21f142b6d01ea7aa5c84943f86e9bae99df11acc80a624b0897830b6fa95c85c5ecaca677ba07f17e72f5a90e1c0f1150a78d4aba2ff11fc1618fef9ebded36f06029f50ae18ebc70aa4b1112281b1b3a919ace29bb9fc07dd18ef43166e32b171"], 0x0) setresuid(0x0, 0xee00, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r9, &(0x7f00000012c0)=[{{&(0x7f00000010c0)=@isdn={0x22, 0xd5, 0xfe, 0x6, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001140)="444c56e44d45cc0d7e35c070117c429803785d5aabb9d5f45585ee2b5b89208fd02bf10ac8f51238a490529761165c31edaffc2aaa0d6ca69f0805beabf1cf6c712dc1eafc419495ab9e0d35c4bbb2baa510b977af9f8c84b82f713138e58f197316aa8edbc6bf31cea5c023e818c47dde36fc35bd7a4ae476685921b5d5ca95c4f440d98b506cc923a6e3457a219decb58549a67b44f245b163bee1dd0def75223c4b1022c5b5f33248c6f2e60844ee387b4327362a251171bc", 0xba}, {&(0x7f0000001200)="3d29effb0a1754108648b72d6da1442527714479f5b8a369bde6f8ebc6fcf813d0ac6d8f4702d87d93125d3d69e25a479f7af8296bd7d15fc8c9fdc782a4ae3d2992c5169596a1390cae79c17cb46ad712bb38710b2fc09a5ca9a260ae693f9bda065a65aea6a1eed705233306447af90eb349099e5fd43bdeb75c0b6b95665a720c30958c04637f9cc382e19e25d7142ba8303ab5229d289f1039ec9245", 0x9e}], 0x2}}], 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) 6.638463007s ago: executing program 3 (id=78): r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) write$binfmt_aout(r0, &(0x7f0000002e80)=ANY=[@ANYBLOB="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"/1785], 0x6fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRES8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES16=r8, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000100)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) write$FUSE_INTERRUPT(r11, &(0x7f00000001c0)={0x10, 0x0, r10}, 0x10) io_submit(r12, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r11, &(0x7f00000000c0)='!', 0xb7f40}]) 6.5772188s ago: executing program 1 (id=79): r0 = getpid() prlimit64(r0, 0x1, &(0x7f0000000000)={0x5, 0x6}, &(0x7f0000000040)) (async) prlimit64(r0, 0x1, &(0x7f0000000000)={0x5, 0x6}, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xc87a, 0x0, {r0}, {0xffffffffffffffff}, 0xfffffffffffffffe, 0xfffffffffffffffe}) getpriority(0x0, r1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000100)={0x1f, @none}, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000140)="fb8ec424add3d714") ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) (async) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000001c0)) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000200)={@hyper, 0x1}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000200)={@hyper, 0x1}) r4 = syz_open_procfs(r0, &(0x7f0000000240)='cgroup\x00') ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000280)={0x1000, "05f323dfabbf84aa7c6cec71690ac26ad86ccea0ff6e3155d13a48d723d0ac56", 0x3, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000002c0)) (async) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000002c0)) sched_setscheduler(r1, 0x3, &(0x7f0000000300)=0x8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/160, 0xa0, 0x1, &(0x7f0000000400)=""/144, 0x90}, &(0x7f0000000500)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/160, 0xa0, 0x1, &(0x7f0000000400)=""/144, 0x90}, &(0x7f0000000500)=0x40) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x9, '\x00', 0x0, r4, 0x2, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r6, &(0x7f00000005c0)="0cb1452d13394ae876601674ae50c7fdde6770b0bcc96f38fa8ae7c76c375f", &(0x7f0000000600)=@buf="43aedb49390fe1550f0cfbd2f414ccbc944eb9d4986a31f71ad89c077e3238358593b5afd492545698"}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r4, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0], 0x0, 0x57, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x3, 0x31, &(0x7f0000000740)=""/49, 0x41000, 0xd, '\x00', r7, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x3, 0x1, 0x3}, 0x10, r8, r4, 0x7, 0x0, &(0x7f0000000e00)=[{0x3, 0x3, 0x7, 0x6}, {0x3, 0x5, 0x0, 0x7}, {0x1, 0x5, 0xb, 0x2}, {0x2, 0x1, 0x9, 0x1}, {0x0, 0x3, 0x5, 0xd}, {0x3, 0x2, 0x7, 0xc}, {0x3, 0x3, 0x6, 0xd}], 0x10, 0x6, @void, @value}, 0x94) bind$nfc_llcp(r4, &(0x7f0000000f40)={0x27, 0x0, 0x1, 0x3, 0x0, 0x8, "0f0e50709f988344bfa10839c7fabcf501f9fd4ec13955c4ab534479fda52ec59a937afce7a695f7b6ffdcc477ee352de6affbcac24eb4f643f302916b83e4", 0x22}, 0x60) getresgid(&(0x7f0000000fc0)=0x0, &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) setresgid(r9, r10, r11) (async) setresgid(r9, r10, r11) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0xb927f000) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0xb927f000) write$tcp_mem(r4, &(0x7f0000001180)={0x81, 0x20, 0xffffffffffffffff, 0x20, 0xfffffffffffffffb}, 0x48) (async) write$tcp_mem(r4, &(0x7f0000001180)={0x81, 0x20, 0xffffffffffffffff, 0x20, 0xfffffffffffffffb}, 0x48) 6.522037748s ago: executing program 2 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e15200000000000000003400000008000300", @ANYRES32=r2, @ANYBLOB="140055"], 0x3c}}, 0x0) (fail_nth: 6) 6.359121922s ago: executing program 1 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = memfd_secret(0x80000) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x6, 0x10, 0x0, 0x3, 0x6, 0x400000, 0x380, 0x40, 0x8c, 0x80, 0x4, 0x38, 0x4, 0x4, 0x7, 0x8000}, [{0x5, 0x1, 0x8, 0xd4e, 0x3ff, 0x403, 0xacc4, 0xffffffffffffff7f}, {0x1, 0x80000000, 0xe, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0xfff}, {0x6474e551, 0x6, 0x9, 0x100000000, 0x8, 0x7, 0x2a9, 0x8000000000000001}, {0x0, 0x1, 0x9, 0x1ff, 0x2, 0x5, 0x4}], "abc158b38345b2e9a7cd91be22da38d93e419d5c0413499f40e789fa2638bc51146dfc45e5884c337377f5521802ba00f5f5bc716c5b41008b5169ac5aba4b515be00314fb0a01b157b01ef37dbe062bb134f4e56f859777e286a8f50709974bb369e62004cdf1aa979df175055c207aac8454f73701710187dd00ddf5fdb32c3cbe636d07fbc941a1c42ae887ae04be267655da01b370ca275b1cb0761226ff888d15b70c36c111c6fe5f035c0bb9e21aeb27a53855f63a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7d8) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x40000002) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) read$msr(0xffffffffffffffff, &(0x7f00000000c0)=""/80, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x18, 0x0) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000000), 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 6.133660945s ago: executing program 2 (id=82): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sched_setscheduler(r0, 0x5, &(0x7f0000000080)=0x2) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x81, 0x8, 0x1, 0x0, 0xd}) r3 = add_key$keyring(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="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", 0x1000, r3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001200)={0x5, 0x0, [{0x186, 0x0, 0x9}, {0x383, 0x0, 0x3}, {0xad6, 0x0, 0x4}, {0xb59, 0x0, 0x2}, {0xb32, 0x0, 0x5}]}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000001280)=0x8, 0x4) r5 = syz_open_dev$video(&(0x7f00000012c0), 0x0, 0x2000) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000001300)={0x0, @motion_det}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)=@deltaction={0xbc, 0x31, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6730}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000001540)={0x9, "587885ef9d669e8f10797975984447ce1e0c7d15b99623e44150cb216d0a9a19", 0x1, 0x1000, 0xfffff6f0, 0x2, 0x2, 0x2, 0x4d, 0x8d}) lchown(&(0x7f00000015c0)='./file0\x00', r1, r2) openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x40000, 0x83) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000001640)={0x73622a85, 0x5, 0x2}) fcntl$getownex(r4, 0x10, &(0x7f0000001680)={0x0, 0x0}) sched_setscheduler(r8, 0x5, &(0x7f00000016c0)=0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001700)={'vxcan1\x00'}) request_key(&(0x7f0000001740)='pkcs7_test\x00', &(0x7f0000001780)={'syz', 0x2}, &(0x7f00000017c0)='\x00', r3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000001a80)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x5ccedabdd936c0c}, 0xc, &(0x7f0000001a40)={&(0x7f0000001880)={0x1ac, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2e8, 0x78}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_PMK={0x36, 0xfe, "62d73978cba7f8ef619701820b18feee7c26af9e0a20d83050d777c5ea7a63573f9182c07344ac87ea2e6a8b2dcae8f8c589"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8914}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2224}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x6}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "25643fde0073630d"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x12}]}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x14000040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001ac0)='sit0\x00', 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080000}, 0x4000) 5.973289761s ago: executing program 1 (id=83): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0xfe}]}, 0x10) openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x800, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) timerfd_gettime(0xffffffffffffffff, 0x0) connect$inet6(r1, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) getpid() syz_open_pts(0xffffffffffffffff, 0x141601) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000400)='./file0/../file0\x00', 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 5.327277565s ago: executing program 4 (id=84): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x49) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x4000, @fd_index=0x8, 0x0, 0x9, 0x6, 0x10, 0x0, {0x1}}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.020987292s ago: executing program 2 (id=85): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000200)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cae130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2dca696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") capset(&(0x7f0000000080)={0x0, r0}, &(0x7f0000000040)={0x200000, 0x200000, 0x100ec, 0x4000000, 0x0, 0xfffffffe}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 4.97089042s ago: executing program 4 (id=86): mount$tmpfs(0x2c, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpol=interleave=statc:']) 4.966605832s ago: executing program 1 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="bb6b1d70304e30b183c7acf886cc33aa84d96622db3c7650b1615d1aee1ccc43ef65ac6fc15e0104000000000000caaae8935f50f0d66cebda8485bcca9c20aa5a9d714bfba1eabc545c82ce80c6d7aea03d687e55179d6cbc8b6db1975a8015b7982e8158c9b2e49f", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x4000880) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000002c0)) r6 = io_uring_setup(0x1a70, &(0x7f0000001a00)={0x0, 0x21b5, 0x0, 0x10000}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500130600fe8000000000000000000000000000bbfe8000000600000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000f72e"], 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000037c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000047c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000855bdbfa8fb5067b943a7154e43383b24d00000000d00000009500"/49], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @remote, 0x100}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 4.828408445s ago: executing program 4 (id=88): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) userfaultfd(0xc01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 4.827532227s ago: executing program 2 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0x81, 0x5, 0x7}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x6f23, 0xa, 0x2, 0xc}, &(0x7f0000000080)=0x14) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f00000000c0)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 4.743091492s ago: executing program 3 (id=90): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0486c000000000000109022400010000000009040000010300000009"], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000200)=0x8) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="0200"], 0x10}}, 0x20002854) (async, rerun: 64) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) r2 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000740)='asymmetric\x00', &(0x7f0000000780)=@secondary) (async) keyctl$link(0x8, r2, r2) (async, rerun: 64) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="a0b581e462d1b3c9f1fb249208e1ca2b9add11cce80200884963291a240bf714459500505edf67357dcb28c03974d43f13c65b6841d4c97e354cc4d77aef7917badd9f0c65746b8fc724368c2b909ba9a7cbc3646324baaccde6094c421f6caf893a4c5fd267b91c8802d1c3b8797cbd82c461a82cdabdd0872de41c4030d1ee1c83f61d5904c34a12b87bc714fad922c7a492adb0ac7d6c93ab2cae1b533a1ac83b87f6671fc40dbd3a39eeaa22171ee6c148545a60946814a4f8a7865a6185db57d00e46f76a2003ed", 0xca, 0x0) (async, rerun: 64) sync() ioperm(0x0, 0x35a, 0x80000001) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) (rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') (async) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/142, 0x9a, 0x200000000008) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 4.015725898s ago: executing program 0 (id=91): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpol=interleave=statc:']) (fail_nth: 5) 3.395143248s ago: executing program 1 (id=92): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 3.037493078s ago: executing program 3 (id=93): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x1002, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xcbff9000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000b80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x101, 0x3}, @fda={0x66646185, 0xa, 0x1, 0x35}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xda03, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc02c5341, &(0x7f00000000c0)) 3.036840944s ago: executing program 0 (id=94): r0 = socket(0x2a, 0x2, 0x5) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0x0, 0xffe0}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x488c4) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @remote}]}}]}, 0x3c}}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.005175616s ago: executing program 1 (id=95): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192ea0845050c800a0301020301090000000000000000090400000079e60100"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xe2e1d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='rxrpc_rx_done\x00', 0xffffffffffffffff, 0x0, 0x2c6}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000001c0)) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001a80)={0x48, 0x0, &(0x7f0000001900)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)="cdfaa404"}) listen(r4, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x2000, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) accept4$unix(r4, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x6, 0xb, 0x10, 0x9477}, {0xc, 0xff, 0x38, 0x5}, {0x7, 0x0, 0xb, 0x800}, {0xfffe, 0xc, 0x1, 0x100}, {0x5, 0xf, 0x4}]}) 2.90264446s ago: executing program 0 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f00000000c0)={0x81, 0x5, 0x7}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x6f23, 0xa, 0x2, 0xc}, &(0x7f0000000080)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 2.470735348s ago: executing program 2 (id=97): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xe200) ioctl$FIBMAP(r5, 0x1, 0xfffffffffffffffd) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000001dc0), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$VIDIOC_DBG_G_REGISTER(r7, 0xc0385650, &(0x7f0000000240)={{0x0, @name="f1e218d8a04a971532c9d104bb1fadb000ebeccf286f244b5f0a3b80650c4c11"}, 0x8, 0x6, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/103], 0xfc}}, 0x0) 2.341554258s ago: executing program 4 (id=98): socket(0x1e, 0xa, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0xfffffffd, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'vlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000aaaaaa0308004500001c000000002002907800000000ac1414221100907800000003ee04d3bfa7280b10951c5eb5b60770aadf1153d86f56b695d58d000047687b3ea0c3d6eccc"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = accept$netrom(0xffffffffffffffff, 0x0, 0x0) setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000100)=0x9, 0x4) 1.239370599s ago: executing program 2 (id=99): syz_usb_connect(0x2, 0x3d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="b9", 0x1}], 0x1) 1.194033723s ago: executing program 3 (id=100): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2a, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}}, 0x108) 761.716534ms ago: executing program 4 (id=101): r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @empty, 0x0, 0x5, [@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, @multicast2, @empty, @multicast1]}, 0x24) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @empty, 0x0, 0x5, [@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, @multicast2, @empty, @multicast1]}, 0x24) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) (async) r2 = syz_open_dev$vbi(0x0, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x0, 0x48, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000040)=0x124c, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000040)=0x124c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000700)={{'\x00', 0x1}, {0x9}, 0x100, 0x0, 0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)="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", 0x1d9, 0x0, &(0x7f0000000500)={0x2, 0xd0, {0x0, 0xc, 0xa7, "627705ba06700cc547dc20665bc141f8d49bfddd1e77578ba9a27c8532075b1963c5d174a7ddf4e27d5eaa60261d2ea9b840f13933562f3d4477178420f4afcd490c6cb5b36d65dfbc9285c01d71a3818dd17982ca57159ac118398fba11c7a3c6930202a0a9edd919e3fbcbc3eb201072dcfca5f834b8aae4de5d9c6e0a39663f226080b61cc4b2de65473b3a034637dca4294e410047c36092b961837f7c92c92dbffcaf281c", 0x1c, "cfba2a17611f6792d577eaaa599171eaa622fe9224ff3c1c497dbf6b"}, 0xf7, "e39ceb5366ac7afcccd578011acd6de2be37284071487f90d09cab4a0bc86948dff397caf0157f56a3095b41784376e58e4ef9dad737eafb9f8b8b7cdf5cb34920659ffef00303a990f046c29737a05adf5e59c1d80e73c3b49ed3069e421c9fd79103bf1f2334079bac063a70b0643e5550caf0edf397fdb4855e656cc67c09c04611a6cd0d5d184ac6a457eb1e8791a227032a4e5a4145e42163609ab9173c5b407acd24fae0d652d112d4db84a7fe26662575f374f1d1e525202572a84ae2fd2c7c9b1f09df60801e13fad8b57ac0bc9bc10cd47c75c0cb6b53559b9fd84790932c15a54d7e5b018692c5645fbe6c1a3080e7a7509b"}, 0x1d3}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 753.175508ms ago: executing program 3 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) iopl(0x3) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffb, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x40044583, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4(r4, &(0x7f0000000140)=@generic, &(0x7f0000000040)=0x80, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r3) socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) chroot(&(0x7f0000000000)='./bus\x00') open$dir(&(0x7f0000000040)='./bus\x00', 0x602080, 0x188) 707.106923ms ago: executing program 0 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000ff0000000a000100"], 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c", 0xc8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde570", 0x1e}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225", 0x45}, {&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509fe41aa0e8892c95ccad3e0435071aff78177e946cf231de4f389b695c5f49", 0xef}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0xc0, 0xed, 0xfe, 0x40, 0x6f8, 0x1, 0xb4f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x69, 0x10, 0x8, [{{0x9, 0x4, 0x2c, 0x3, 0x2, 0x4d, 0xac, 0xc5, 0x9, [], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x6, 0x2, 0xcc}}, {{0x9, 0x5, 0xd, 0x1c, 0x40, 0x80, 0x4, 0x3}}]}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x14, &(0x7f0000000040)=0xfffffffd, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4001, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0x1, 0x9, 0x5, 0x47425247, [0xffff, 0x2c96f99], [0xffff0000, 0x3]}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000001740)=""/4075, 0xfeb) semget$private(0x0, 0x3, 0x4) r6 = dup2(r1, r1) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000280)={0x3, 0x1, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5", 0x44495658}) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="d2ced8af15000000028e8389818c07028608838a030e0203078e028181"]) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, './cgroup/../file0\x00'}}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000005200)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x55e272c1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0xc0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 51.887532][ T29] audit: type=1400 audit(1731614006.539:88): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.890658][ T5812] cgroup: Unknown subsys name 'net' [ 51.910286][ T29] audit: type=1400 audit(1731614006.539:89): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.937683][ T29] audit: type=1400 audit(1731614006.569:90): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.082540][ T5812] cgroup: Unknown subsys name 'cpuset' [ 52.089855][ T5812] cgroup: Unknown subsys name 'rlimit' [ 52.215348][ T29] audit: type=1400 audit(1731614006.869:91): avc: denied { setattr } for pid=5812 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.245469][ T29] audit: type=1400 audit(1731614006.869:92): avc: denied { create } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.267014][ T29] audit: type=1400 audit(1731614006.869:93): avc: denied { write } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.291084][ T29] audit: type=1400 audit(1731614006.869:94): avc: denied { read } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.301084][ T5814] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.312141][ T29] audit: type=1400 audit(1731614006.869:95): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 52.344980][ T29] audit: type=1400 audit(1731614006.869:96): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 52.370681][ T29] audit: type=1400 audit(1731614006.929:97): avc: denied { read } for pid=5494 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 53.170985][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.823612][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.837343][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.845340][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.852907][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.861578][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.864813][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.887290][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.897092][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.904748][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.912787][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.913067][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.920829][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.931339][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.935130][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.948748][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.950161][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.956191][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.969165][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.977096][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.985587][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.988815][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 56.988828][ T29] audit: type=1400 audit(1731614011.629:107): avc: denied { read } for pid=5826 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.993121][ T5145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.000310][ T29] audit: type=1400 audit(1731614011.629:108): avc: denied { open } for pid=5826 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.020139][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.050503][ T29] audit: type=1400 audit(1731614011.629:109): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.059205][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.085401][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.090895][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.093374][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.101856][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.116653][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.116866][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.131334][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.295516][ T29] audit: type=1400 audit(1731614011.949:110): avc: denied { module_request } for pid=5826 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 57.344233][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 57.410527][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 57.475246][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.483282][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.491163][ T5826] bridge_slave_0: entered allmulticast mode [ 57.497569][ T5826] bridge_slave_0: entered promiscuous mode [ 57.506398][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.513499][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.520849][ T5826] bridge_slave_1: entered allmulticast mode [ 57.527182][ T5826] bridge_slave_1: entered promiscuous mode [ 57.549628][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 57.573478][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.592342][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 57.602531][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.625096][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.632311][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.639409][ T5822] bridge_slave_0: entered allmulticast mode [ 57.646049][ T5822] bridge_slave_0: entered promiscuous mode [ 57.654701][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 57.676013][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.683415][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.691066][ T5822] bridge_slave_1: entered allmulticast mode [ 57.697399][ T5822] bridge_slave_1: entered promiscuous mode [ 57.715121][ T5826] team0: Port device team_slave_0 added [ 57.722518][ T5826] team0: Port device team_slave_1 added [ 57.757744][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.776041][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.783603][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.809655][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.826780][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.846545][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.853606][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.880296][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.908084][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.915219][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.922406][ T5830] bridge_slave_0: entered allmulticast mode [ 57.928756][ T5830] bridge_slave_0: entered promiscuous mode [ 57.938555][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.945796][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.953059][ T5837] bridge_slave_0: entered allmulticast mode [ 57.959436][ T5837] bridge_slave_0: entered promiscuous mode [ 57.967577][ T5822] team0: Port device team_slave_0 added [ 57.982957][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.990160][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.997268][ T5830] bridge_slave_1: entered allmulticast mode [ 58.004052][ T5830] bridge_slave_1: entered promiscuous mode [ 58.016019][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.023188][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.030628][ T5837] bridge_slave_1: entered allmulticast mode [ 58.036970][ T5837] bridge_slave_1: entered promiscuous mode [ 58.044615][ T5822] team0: Port device team_slave_1 added [ 58.079468][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.086705][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.094390][ T5834] bridge_slave_0: entered allmulticast mode [ 58.101103][ T5834] bridge_slave_0: entered promiscuous mode [ 58.107987][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.115290][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.122643][ T5834] bridge_slave_1: entered allmulticast mode [ 58.128965][ T5834] bridge_slave_1: entered promiscuous mode [ 58.140310][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.155690][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.162768][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.188938][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.207558][ T5826] hsr_slave_0: entered promiscuous mode [ 58.213785][ T5826] hsr_slave_1: entered promiscuous mode [ 58.227763][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.244416][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.254000][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.261420][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.287402][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.311904][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.329474][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.348181][ T5830] team0: Port device team_slave_0 added [ 58.367835][ T5837] team0: Port device team_slave_0 added [ 58.374829][ T5837] team0: Port device team_slave_1 added [ 58.384089][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.396102][ T5830] team0: Port device team_slave_1 added [ 58.437012][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.444293][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.470691][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.489120][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.496190][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.522149][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.537701][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.544946][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.570916][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.586405][ T5834] team0: Port device team_slave_0 added [ 58.597405][ T5834] team0: Port device team_slave_1 added [ 58.604108][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.611175][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.637263][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.649967][ T5822] hsr_slave_0: entered promiscuous mode [ 58.656051][ T5822] hsr_slave_1: entered promiscuous mode [ 58.662209][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.670066][ T5822] Cannot create hsr debugfs directory [ 58.707928][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.715106][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.741961][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.754154][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.761287][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.787256][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.804485][ T5837] hsr_slave_0: entered promiscuous mode [ 58.813544][ T5837] hsr_slave_1: entered promiscuous mode [ 58.819918][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.827487][ T5837] Cannot create hsr debugfs directory [ 58.855563][ T5834] hsr_slave_0: entered promiscuous mode [ 58.861987][ T5834] hsr_slave_1: entered promiscuous mode [ 58.868005][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.875710][ T5834] Cannot create hsr debugfs directory [ 58.943268][ T5830] hsr_slave_0: entered promiscuous mode [ 58.949304][ T5830] hsr_slave_1: entered promiscuous mode [ 58.955588][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.963944][ T5830] Cannot create hsr debugfs directory [ 59.040521][ T5832] Bluetooth: hci1: command tx timeout [ 59.095988][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.108677][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.119083][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.125978][ T5832] Bluetooth: hci0: command tx timeout [ 59.130456][ T5828] Bluetooth: hci2: command tx timeout [ 59.139777][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.175730][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.200102][ T5828] Bluetooth: hci3: command tx timeout [ 59.200121][ T5832] Bluetooth: hci4: command tx timeout [ 59.213397][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.222491][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.231335][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.266567][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.292255][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.300999][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.309369][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.357383][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.369679][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.380902][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.389388][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.413453][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.420485][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.435984][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.461431][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.472691][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.480167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.506558][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.513631][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.523290][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.530368][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.548848][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.558057][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.567265][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.577288][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.587207][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.594314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.678765][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.703335][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.742658][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.750181][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.767609][ T29] audit: type=1400 audit(1731614014.419:111): avc: denied { sys_module } for pid=5822 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.768525][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.795809][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.934061][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.961603][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.978953][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.004250][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.017419][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.050209][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.057316][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.096202][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.103377][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.138699][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.155865][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.167421][ T5822] veth0_vlan: entered promiscuous mode [ 60.188999][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.196143][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.227189][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.234281][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.251950][ T5822] veth1_vlan: entered promiscuous mode [ 60.298939][ T5834] veth0_vlan: entered promiscuous mode [ 60.331049][ T5834] veth1_vlan: entered promiscuous mode [ 60.337304][ T5826] veth0_vlan: entered promiscuous mode [ 60.355613][ T5826] veth1_vlan: entered promiscuous mode [ 60.378736][ T5822] veth0_macvtap: entered promiscuous mode [ 60.404534][ T5822] veth1_macvtap: entered promiscuous mode [ 60.445050][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.461330][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.476124][ T5834] veth0_macvtap: entered promiscuous mode [ 60.494807][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.506396][ T5834] veth1_macvtap: entered promiscuous mode [ 60.518902][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.528844][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.537677][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.546712][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.583881][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.595172][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.607253][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.621895][ T5826] veth0_macvtap: entered promiscuous mode [ 60.631566][ T5826] veth1_macvtap: entered promiscuous mode [ 60.640875][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.651847][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.662649][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.688387][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.697306][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.706136][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.715104][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.727382][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.756453][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.767849][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.778117][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.788719][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.799274][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.809415][ T5830] veth0_vlan: entered promiscuous mode [ 60.845266][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.856923][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.864426][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.865309][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.875138][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.893336][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.903959][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.915952][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.928242][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.936986][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.946103][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.972499][ T5830] veth1_vlan: entered promiscuous mode [ 61.002161][ T3876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.013221][ T3876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.026382][ T5837] veth0_vlan: entered promiscuous mode [ 61.039380][ T3876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.043236][ T5837] veth1_vlan: entered promiscuous mode [ 61.054050][ T3876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.057840][ T5830] veth0_macvtap: entered promiscuous mode [ 61.082336][ T29] audit: type=1400 audit(1731614015.739:112): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.OWVB9B/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.098530][ T5837] veth0_macvtap: entered promiscuous mode [ 61.111040][ T29] audit: type=1400 audit(1731614015.739:113): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.132605][ T5830] veth1_macvtap: entered promiscuous mode [ 61.140081][ T5828] Bluetooth: hci1: command tx timeout [ 61.146230][ T29] audit: type=1400 audit(1731614015.739:114): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.OWVB9B/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.172068][ T29] audit: type=1400 audit(1731614015.739:115): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.194388][ T29] audit: type=1400 audit(1731614015.739:116): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.OWVB9B/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.214607][ T5837] veth1_macvtap: entered promiscuous mode [ 61.221802][ T5828] Bluetooth: hci0: command tx timeout [ 61.230159][ T5832] Bluetooth: hci2: command tx timeout [ 61.244764][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.264906][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.275697][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.286072][ T5832] Bluetooth: hci4: command tx timeout [ 61.290985][ T5832] Bluetooth: hci3: command tx timeout [ 61.301179][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.311829][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.321939][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.333026][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.345233][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.355115][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.366391][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.376493][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.387105][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.397194][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.407627][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.418363][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.435383][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.443494][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.468234][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.485582][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.495017][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.510058][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.545752][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.560871][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.574841][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.585590][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.596225][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.606881][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.617131][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.627997][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.642609][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.652048][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.666559][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.677958][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.686861][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.697015][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.708625][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.718524][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.729622][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.739461][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.750580][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.761777][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.778389][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.791223][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.800186][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.808890][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.886591][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.906885][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.030109][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 62.036304][ T29] audit: type=1400 audit(1731614016.679:142): avc: denied { write } for pid=5916 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.537502][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.567546][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.607627][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.628673][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.657853][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.668919][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.674943][ T5928] ======================================================= [ 62.674943][ T5928] WARNING: The mand mount option has been deprecated and [ 62.674943][ T5928] and is ignored by this kernel. Remove the mand [ 62.674943][ T5928] option from the mount to silence this warning. [ 62.674943][ T5928] ======================================================= [ 62.678520][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.726261][ T29] audit: type=1400 audit(1731614017.329:143): avc: denied { create } for pid=5927 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.747612][ T29] audit: type=1400 audit(1731614017.329:144): avc: denied { read write } for pid=5927 comm="syz.4.5" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.774040][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.809469][ T29] audit: type=1400 audit(1731614017.329:145): avc: denied { open } for pid=5927 comm="syz.4.5" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.848249][ T29] audit: type=1400 audit(1731614017.329:146): avc: denied { mounton } for pid=5927 comm="syz.4.5" path="/0/file1" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.886207][ T5934] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 62.927409][ T29] audit: type=1400 audit(1731614017.449:147): avc: denied { create } for pid=5929 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.928597][ T5936] 9pnet_fd: p9_fd_create_tcp (5936): problem connecting socket to 127.0.0.1 [ 62.947326][ T5934] overlayfs: missing 'lowerdir' [ 62.962558][ T29] audit: type=1400 audit(1731614017.449:148): avc: denied { create } for pid=5927 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.000951][ T29] audit: type=1400 audit(1731614017.459:149): avc: denied { connect } for pid=5929 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.020653][ T29] audit: type=1400 audit(1731614017.459:150): avc: denied { sqpoll } for pid=5929 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.048244][ T29] audit: type=1400 audit(1731614017.459:151): avc: denied { map } for pid=5929 comm="syz.1.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.170061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.179936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 63.189843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 63.210430][ T5832] Bluetooth: hci1: command tx timeout [ 63.294459][ T5832] Bluetooth: hci0: command tx timeout [ 63.301209][ T5832] Bluetooth: hci2: command tx timeout [ 63.379547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 63.389857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.450080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.481682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.529889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.584369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 63.621752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.757013][ T5832] Bluetooth: hci3: command tx timeout [ 63.762732][ T5832] Bluetooth: hci4: command tx timeout [ 64.322618][ T5958] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.036279][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.209978][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 65.229466][ T9] usb 4-1: config 0 has no interfaces? [ 65.276797][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 65.288109][ T5828] Bluetooth: hci1: command tx timeout [ 65.316455][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.359957][ T5828] Bluetooth: hci2: command tx timeout [ 65.370438][ T5828] Bluetooth: hci0: command tx timeout [ 65.437552][ T9] usb 4-1: Product: syz [ 65.471583][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.720378][ T9] usb 4-1: Manufacturer: syz [ 65.725187][ T9] usb 4-1: SerialNumber: syz [ 65.842488][ T5828] Bluetooth: hci4: command tx timeout [ 65.842502][ T5832] Bluetooth: hci3: command tx timeout [ 66.109988][ T5978] FAULT_INJECTION: forcing a failure. [ 66.109988][ T5978] name failslab, interval 1, probability 0, space 0, times 1 [ 66.124369][ T9] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 66.136639][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.1.16 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 66.147166][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 66.157243][ T5978] Call Trace: [ 66.160526][ T5978] [ 66.163463][ T5978] dump_stack_lvl+0x16c/0x1f0 [ 66.168155][ T5978] should_fail_ex+0x497/0x5b0 [ 66.172815][ T5978] ? fs_reclaim_acquire+0xae/0x150 [ 66.177915][ T5978] should_failslab+0xc2/0x120 [ 66.182573][ T5978] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 66.187996][ T5978] ? sk_prot_alloc+0x60/0x2a0 [ 66.192654][ T5978] sk_prot_alloc+0x60/0x2a0 [ 66.197138][ T5978] sk_alloc+0x36/0xb90 [ 66.201204][ T5978] __vsock_create.constprop.0+0x3c/0xba0 [ 66.206845][ T5978] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.212754][ T5978] vsock_create+0x139/0x4d0 [ 66.217268][ T5978] __sock_create+0x32e/0x840 [ 66.221866][ T5978] __sys_socketpair+0x1d9/0x5a0 [ 66.226692][ T5978] ? __pfx___sys_socketpair+0x10/0x10 [ 66.232047][ T5978] ? fput+0x30/0x390 [ 66.235918][ T5978] ? __pfx_ksys_write+0x10/0x10 [ 66.240744][ T5978] __x64_sys_socketpair+0x96/0x100 [ 66.245839][ T5978] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.251022][ T5978] do_syscall_64+0xcd/0x250 [ 66.255511][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.261383][ T5978] RIP: 0033:0x7f829217e719 [ 66.265783][ T5978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.285383][ T5978] RSP: 002b:00007f8292f5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 66.293769][ T5978] RAX: ffffffffffffffda RBX: 00007f8292336058 RCX: 00007f829217e719 [ 66.301730][ T5978] RDX: 0000000000000000 RSI: 0020000000000001 RDI: 0000000000000028 [ 66.309675][ T5978] RBP: 00007f8292f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.317618][ T5978] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 66.325568][ T5978] R13: 0000000000000001 R14: 00007f8292336058 R15: 00007ffca787f618 [ 66.333521][ T5978] [ 66.493779][ T5987] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20'. [ 66.584936][ T9] apple-mfi-fastcharge 4-1: USB disconnect, device number 2 [ 66.630224][ T5875] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 66.633501][ T5990] Zero length message leads to an empty skb [ 66.702436][ T5993] capability: warning: `syz.1.22' uses deprecated v2 capabilities in a way that may be insecure [ 66.805196][ T5875] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 66.820000][ T5875] usb 1-1: config 0 has no interface number 0 [ 66.827936][ T5994] mmap: syz.1.23 (5994): VmData 37859328 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 66.830569][ T5875] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 66.869863][ T5875] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 66.900066][ T5875] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 66.929857][ T5875] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 66.966177][ T5875] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 66.989867][ T5875] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 67.019916][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.042259][ T5875] usb 1-1: config 0 descriptor?? [ 67.048135][ T5981] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 67.070770][ T5875] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 67.204844][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 67.204858][ T29] audit: type=1400 audit(1731614021.859:204): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.301032][ T5999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.305846][ T29] audit: type=1400 audit(1731614021.959:205): avc: denied { setopt } for pid=6000 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.346857][ T6001] xt_time: unknown flags 0x4 [ 67.360757][ T29] audit: type=1400 audit(1731614021.989:206): avc: denied { write } for pid=6000 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.377424][ T5998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.389507][ T29] audit: type=1400 audit(1731614022.009:207): avc: denied { create } for pid=6000 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.453713][ T29] audit: type=1400 audit(1731614022.019:208): avc: denied { setopt } for pid=5998 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.615227][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.633715][ T29] audit: type=1400 audit(1731614022.039:209): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.460385][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.613847][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 68.825561][ T29] audit: type=1400 audit(1731614023.479:210): avc: denied { map } for pid=6020 comm="syz.4.31" path="socket:[8577]" dev="sockfs" ino=8577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.850141][ T29] audit: type=1400 audit(1731614023.479:211): avc: denied { read } for pid=6020 comm="syz.4.31" path="socket:[8577]" dev="sockfs" ino=8577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.900097][ T29] audit: type=1400 audit(1731614023.559:212): avc: denied { listen } for pid=6017 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.249315][ T5878] usb 1-1: USB disconnect, device number 2 [ 70.273361][ T5878] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 70.469904][ T29] audit: type=1400 audit(1731614023.569:213): avc: denied { watch } for pid=6017 comm="syz.1.30" path="/proc/37" dev="proc" ino=7973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 70.579156][ T6010] hsr_slave_1 (unregistering): left promiscuous mode [ 70.729552][ T6036] tun0: tun_chr_ioctl cmd 1074812117 [ 70.965701][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.972496][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.980303][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.039933][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.071964][ T5878] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.139880][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 71.153300][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 71.176069][ T9] usb 3-1: config 0 has no interface number 0 [ 71.186475][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.210934][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 71.229911][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 71.234635][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.246240][ T25] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 71.259995][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.270444][ T9] usb 3-1: config 0 descriptor?? [ 71.278927][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.301139][ T25] usb 4-1: config 0 descriptor?? [ 71.306833][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.308148][ T9] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 71.318904][ T5878] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.341556][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.367262][ T5878] usb 1-1: config 0 descriptor?? [ 71.555696][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 71.640178][ T6036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.35'. [ 71.672815][ T6036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.35'. [ 71.705804][ T6036] vlan2: entered allmulticast mode [ 71.714208][ T6036] bond0: entered allmulticast mode [ 71.720838][ T6036] bond_slave_0: entered allmulticast mode [ 71.728943][ T6036] bond_slave_1: entered allmulticast mode [ 71.794324][ T5932] usb 3-1: USB disconnect, device number 2 [ 72.430922][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 72.430936][ T29] audit: type=1400 audit(1731614027.089:244): avc: denied { connect } for pid=6053 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.474241][ T6054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.506945][ T6054] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 72.526218][ T29] audit: type=1400 audit(1731614027.159:245): avc: denied { relabelfrom } for pid=6053 comm="syz.2.39" name="UDPv6" dev="sockfs" ino=8793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 72.552181][ T29] audit: type=1400 audit(1731614027.199:246): avc: denied { relabelto } for pid=6053 comm="syz.2.39" name="UDPv6" dev="sockfs" ino=8793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:mount_exec_t:s0" [ 72.582340][ T5878] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 72.672109][ T5878] usb 1-1: USB disconnect, device number 3 [ 72.745740][ T29] audit: type=1400 audit(1731614027.399:247): avc: denied { connect } for pid=6058 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.773569][ T29] audit: type=1400 audit(1731614027.429:248): avc: denied { listen } for pid=6058 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.853401][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.857734][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 73.016398][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 73.020040][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 73.046982][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.047263][ T9] usb 5-1: config 0 has no interfaces? [ 73.047422][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 73.047700][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.064544][ T9] usb 5-1: config 0 descriptor?? [ 73.343389][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 73.365035][ T5932] usb 3-1: config index 0 descriptor too short (expected 56926, got 45) [ 73.384956][ T5932] usb 3-1: config 123 has too many interfaces: 203, using maximum allowed: 32 [ 73.402568][ T5932] usb 3-1: config 123 has an invalid descriptor of length 176, skipping remainder of the config [ 73.419740][ T29] audit: type=1400 audit(1731614028.079:249): avc: denied { read } for pid=6066 comm="syz.1.44" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.455609][ T5932] usb 3-1: config 123 has 0 interfaces, different from the descriptor's value: 203 [ 73.465926][ T5932] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.467079][ T6067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.483267][ T29] audit: type=1400 audit(1731614028.079:250): avc: denied { open } for pid=6066 comm="syz.1.44" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.524827][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.544149][ T29] audit: type=1400 audit(1731614028.109:251): avc: denied { ioctl } for pid=6066 comm="syz.1.44" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.577389][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 73.586518][ T29] audit: type=1400 audit(1731614028.109:252): avc: denied { set_context_mgr } for pid=6066 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.611314][ T6056] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 73.636863][ T29] audit: type=1326 audit(1731614028.109:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.0.45" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa12d37e719 code=0x0 [ 73.662505][ T5875] usb 5-1: USB disconnect, device number 2 [ 73.765362][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 73.778149][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 73.796851][ T5932] usb 3-1: string descriptor 0 read error: -71 [ 73.812789][ T5932] usb 3-1: USB disconnect, device number 3 [ 73.829076][ T25] usb 4-1: USB disconnect, device number 3 [ 73.871586][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.070626][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 74.084630][ T5878] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 74.506286][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.563812][ T5878] usb 1-1: config 0 descriptor?? [ 76.006609][ T6093] netlink: 52 bytes leftover after parsing attributes in process `syz.4.51'. [ 76.090605][ T965] cfg80211: failed to load regulatory.db [ 76.548824][ T5878] usbhid 1-1:0.0: can't add hid device: -71 [ 76.555218][ T5878] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 76.634209][ T5878] usb 1-1: USB disconnect, device number 4 [ 76.923677][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.081739][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.094340][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.105415][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.132149][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.148105][ T9] usb 3-1: config 0 descriptor?? [ 77.486502][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 77.486517][ T29] audit: type=1326 audit(1731614032.139:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545897e31b code=0x7ffc0000 [ 77.559925][ T29] audit: type=1326 audit(1731614032.209:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545897e31b code=0x7ffc0000 [ 77.609917][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.678553][ T29] audit: type=1326 audit(1731614032.329:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545897e31b code=0x7ffc0000 [ 77.867868][ T29] audit: type=1326 audit(1731614032.329:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545897e31b code=0x7ffc0000 [ 78.202401][ T29] audit: type=1326 audit(1731614032.859:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545897e31b code=0x7ffc0000 [ 78.241515][ T29] audit: type=1326 audit(1731614032.899:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545897e31b code=0x7ffc0000 [ 78.361677][ T29] audit: type=1400 audit(1731614033.009:282): avc: denied { create } for pid=6129 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.383673][ T6130] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.391435][ T9] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 78.402160][ T9] usb 3-1: USB disconnect, device number 4 [ 78.413918][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 78.417427][ T6130] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 78.424981][ T25] usb 5-1: config 9 has an invalid interface number: 62 but max is 0 [ 78.446979][ T29] audit: type=1400 audit(1731614033.009:283): avc: denied { write } for pid=6129 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.467312][ T25] usb 5-1: config 9 has no interface number 0 [ 78.473580][ T29] audit: type=1326 audit(1731614033.069:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545897e31b code=0x7ffc0000 [ 78.496820][ T29] audit: type=1326 audit(1731614033.069:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545897e31b code=0x7ffc0000 [ 78.556367][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=f5.0d [ 78.565727][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.574607][ T25] usb 5-1: Product: syz [ 78.578789][ T25] usb 5-1: Manufacturer: syz [ 78.584322][ T25] usb 5-1: SerialNumber: syz [ 78.596715][ T25] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 78.604855][ T25] gspca_stv06xx: st6422 sensor detected [ 78.685654][ T6135] infiniband syz1: set down [ 78.690280][ T6135] infiniband syz1: added ipvlan1 [ 78.723027][ T6135] RDS/IB: syz1: added [ 78.727337][ T6135] smc: adding ib device syz1 with port count 1 [ 78.733644][ T6135] smc: ib device syz1 port 1 has pnetid [ 78.940828][ T25] STV06xx 5-1:9.62: probe with driver STV06xx failed with error -71 [ 78.969617][ T25] usb 5-1: unknown interface protocol 0x8e, assuming v1 [ 78.984269][ T25] usb 5-1: cannot find UAC_HEADER [ 79.054647][ T25] snd-usb-audio 5-1:9.62: probe with driver snd-usb-audio failed with error -22 [ 79.080895][ T25] usb 5-1: USB disconnect, device number 3 [ 79.139604][ T6141] process 'syz.0.67' launched './file1' with NULL argv: empty string added [ 79.455130][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.62/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.632187][ T6149] futex_wake_op: syz.1.71 tries to shift op by 36; fix this program [ 79.889995][ T5878] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 80.189961][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 80.203217][ T5878] usb 3-1: config 0 has no interfaces? [ 80.209868][ T5878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.219966][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.359341][ T5878] usb 3-1: config 0 descriptor?? [ 80.695604][ T5932] usb 3-1: USB disconnect, device number 5 [ 81.130196][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.266978][ T9] usb 1-1: device descriptor read/64, error -71 [ 81.382985][ T6181] FAULT_INJECTION: forcing a failure. [ 81.382985][ T6181] name failslab, interval 1, probability 0, space 0, times 0 [ 81.396591][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.2.80 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 81.396617][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 81.396628][ T6181] Call Trace: [ 81.396633][ T6181] [ 81.396640][ T6181] dump_stack_lvl+0x16c/0x1f0 [ 81.396665][ T6181] should_fail_ex+0x497/0x5b0 [ 81.432790][ T6181] should_failslab+0xc2/0x120 [ 81.437476][ T6181] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 81.442875][ T6181] ? skb_clone+0x190/0x3f0 [ 81.447311][ T6181] skb_clone+0x190/0x3f0 [ 81.451574][ T6181] dev_queue_xmit_nit+0x38f/0xba0 [ 81.456634][ T6181] dev_hard_start_xmit+0x56/0x790 [ 81.461693][ T6181] ? __dev_queue_xmit+0x252/0x4350 [ 81.466826][ T6181] __dev_queue_xmit+0x7c7/0x4350 [ 81.471769][ T6181] ? __pfx___dev_queue_xmit+0x10/0x10 [ 81.477669][ T6181] ? __asan_memcpy+0x3c/0x60 [ 81.482246][ T6181] ? __asan_memcpy+0x3c/0x60 [ 81.486817][ T6181] ? __skb_clone+0x570/0x760 [ 81.491396][ T6181] netlink_deliver_tap+0xa7d/0xd90 [ 81.496505][ T6181] netlink_unicast+0x5e1/0x7f0 [ 81.501256][ T6181] ? __pfx_netlink_unicast+0x10/0x10 [ 81.506531][ T6181] netlink_sendmsg+0x8b8/0xd70 [ 81.511282][ T6181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.516555][ T6181] ____sys_sendmsg+0xaaf/0xc90 [ 81.521306][ T6181] ? copy_msghdr_from_user+0x10b/0x160 [ 81.526757][ T6181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.532033][ T6181] ? __pfx___lock_acquire+0x10/0x10 [ 81.537228][ T6181] ___sys_sendmsg+0x135/0x1e0 [ 81.541891][ T6181] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.547079][ T6181] ? lock_acquire+0x2f/0xb0 [ 81.551562][ T6181] ? __fget_files+0x40/0x3f0 [ 81.556153][ T6181] ? fdget+0x176/0x210 [ 81.560215][ T6181] __sys_sendmsg+0x117/0x1f0 [ 81.564790][ T6181] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.569885][ T6181] ? __fget_files+0x244/0x3f0 [ 81.574589][ T6181] do_syscall_64+0xcd/0x250 [ 81.579079][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.584962][ T6181] RIP: 0033:0x7f5785f7e719 [ 81.589362][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.608953][ T6181] RSP: 002b:00007f5786cf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.617439][ T6181] RAX: ffffffffffffffda RBX: 00007f5786135f80 RCX: 00007f5785f7e719 [ 81.625393][ T6181] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 81.633345][ T6181] RBP: 00007f5786cf8090 R08: 0000000000000000 R09: 0000000000000000 [ 81.641298][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.649251][ T6181] R13: 0000000000000000 R14: 00007f5786135f80 R15: 00007fffbbb94c38 [ 81.657213][ T6181] [ 81.670822][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 81.971274][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.087681][ T6194] fuse: Bad value for 'fd' [ 82.236496][ T6193] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.83'. [ 82.248398][ T9] usb 1-1: device descriptor read/64, error -71 [ 82.473481][ T9] usb usb1-port1: attempt power cycle [ 82.907915][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 82.940444][ T9] usb 1-1: device descriptor read/8, error -71 [ 83.262938][ T6211] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 83.714079][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 83.714113][ T29] audit: type=1400 audit(1731614038.369:338): avc: denied { read } for pid=6206 comm="syz.4.88" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.719252][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 83.771556][ T29] audit: type=1400 audit(1731614038.369:339): avc: denied { open } for pid=6206 comm="syz.4.88" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.465860][ T6220] FAULT_INJECTION: forcing a failure. [ 84.465860][ T6220] name failslab, interval 1, probability 0, space 0, times 0 [ 84.494544][ T29] audit: type=1400 audit(1731614038.409:340): avc: denied { ioctl } for pid=6169 comm="syz.0.77" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.505412][ T6220] CPU: 1 UID: 0 PID: 6220 Comm: syz.0.91 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 84.519279][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 84.529610][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 84.529626][ T6220] Call Trace: [ 84.529633][ T6220] [ 84.529641][ T6220] dump_stack_lvl+0x16c/0x1f0 [ 84.529666][ T6220] should_fail_ex+0x497/0x5b0 [ 84.529685][ T6220] ? fs_reclaim_acquire+0xae/0x150 [ 84.529703][ T6220] should_failslab+0xc2/0x120 [ 84.529725][ T6220] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 84.577882][ T6220] ? getname_flags.part.0+0x4c/0x550 [ 84.583173][ T6220] getname_flags.part.0+0x4c/0x550 [ 84.588276][ T6220] getname_flags+0x93/0xf0 [ 84.592770][ T6220] user_path_at+0x24/0x60 [ 84.597083][ T6220] __x64_sys_mount+0x1fc/0x320 [ 84.601829][ T6220] ? __pfx___x64_sys_mount+0x10/0x10 [ 84.607109][ T6220] do_syscall_64+0xcd/0x250 [ 84.611597][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.617481][ T6220] RIP: 0033:0x7fa12d37e719 [ 84.621878][ T6220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.641469][ T6220] RSP: 002b:00007fa12e1c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.649873][ T6220] RAX: ffffffffffffffda RBX: 00007fa12d535f80 RCX: 00007fa12d37e719 [ 84.657827][ T6220] RDX: 0000000020000580 RSI: 0000000020000540 RDI: 0000000000000000 [ 84.665793][ T6220] RBP: 00007fa12e1c1090 R08: 00000000200003c0 R09: 0000000000000000 [ 84.673744][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.681697][ T6220] R13: 0000000000000001 R14: 00007fa12d535f80 R15: 00007ffda1fd8958 [ 84.689659][ T6220] [ 84.692798][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.714852][ T29] audit: type=1400 audit(1731614038.449:341): avc: denied { bind } for pid=6207 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.734543][ T29] audit: type=1400 audit(1731614038.449:342): avc: denied { name_bind } for pid=6207 comm="syz.2.89" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.755987][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.762353][ T29] audit: type=1400 audit(1731614038.449:343): avc: denied { node_bind } for pid=6207 comm="syz.2.89" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 84.783037][ T29] audit: type=1400 audit(1731614038.489:344): avc: denied { ioctl } for pid=6207 comm="syz.2.89" path="socket:[9059]" dev="sockfs" ino=9059 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.807170][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.845290][ T6212] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.853312][ T6212] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.879321][ T6231] binder: BINDER_SET_CONTEXT_MGR already set [ 84.889021][ T29] audit: type=1400 audit(1731614039.529:345): avc: denied { write } for pid=6230 comm="syz.3.93" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.890920][ T6231] binder: 6230:6231 ioctl 4018620d 20000000 returned -16 [ 84.911850][ T9] usb 1-1: device not accepting address 8, error -71 [ 84.933255][ T9] usb usb1-port1: unable to enumerate USB device [ 84.948564][ T29] audit: type=1400 audit(1731614039.529:346): avc: denied { map } for pid=6230 comm="syz.3.93" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.977812][ T6212] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.989596][ T29] audit: type=1400 audit(1731614039.589:347): avc: denied { read write } for pid=6232 comm="syz.1.95" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.992811][ T6212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.126834][ T6212] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.134975][ T6212] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.143551][ T6212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.150563][ T6212] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.158923][ T6212] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.169935][ T6212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.176276][ T6212] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.303283][ T6212] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.312191][ T6212] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 85.318791][ T6212] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 85.327493][ T6212] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 86.339927][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.666642][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 86.676600][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 86.693595][ T25] usb 2-1: can't read configurations, error -61 [ 86.836110][ T6253] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 86.890362][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.942610][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.000245][ T5878] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 87.041112][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.270151][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.276192][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.304401][ T5878] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 87.312714][ T5878] usb 3-1: config 0 has no interface number 0 [ 87.318984][ T5878] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.794507][ T5878] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 87.806289][ T5878] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 87.817519][ T5878] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 87.828621][ T5878] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 87.841902][ T5878] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 87.851446][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.852744][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 87.861972][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 88.024138][ T5832] ================================================================== [ 88.032242][ T5832] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x22a/0x240 [ 88.041118][ T5832] Read of size 8 at addr ffff888059734580 by task kworker/u9:4/5832 [ 88.049109][ T5832] [ 88.051436][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:4 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 88.062288][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 88.062510][ T5875] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.072338][ T5832] Workqueue: hci3 hci_rx_work [ 88.072372][ T5832] Call Trace: [ 88.072379][ T5832] [ 88.072386][ T5832] dump_stack_lvl+0x116/0x1f0 [ 88.072407][ T5832] print_report+0xc3/0x620 [ 88.072428][ T5832] ? __virt_addr_valid+0x5e/0x590 [ 88.072448][ T5832] ? __phys_addr+0xc6/0x150 [ 88.072471][ T5832] kasan_report+0xd9/0x110 [ 88.072491][ T5832] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 88.119750][ T5832] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 88.125806][ T5832] l2cap_sock_new_connection_cb+0x22a/0x240 [ 88.131682][ T5832] l2cap_connect_cfm+0x4c9/0xf80 [ 88.136600][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 88.142034][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 88.147464][ T5832] le_conn_complete_evt+0x1662/0x1d80 [ 88.152809][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 88.158503][ T5832] ? trace_contention_end+0xea/0x140 [ 88.163766][ T5832] hci_le_conn_complete_evt+0x23c/0x370 [ 88.169290][ T5832] hci_le_meta_evt+0x2e2/0x5d0 [ 88.174032][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 88.180106][ T5832] hci_event_packet+0x666/0x1180 [ 88.185035][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 88.190334][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 88.195695][ T5832] ? mark_held_locks+0x9f/0xe0 [ 88.200443][ T5832] ? kcov_remote_start+0x3cf/0x6e0 [ 88.205533][ T5832] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.210711][ T5832] hci_rx_work+0x2c6/0x16c0 [ 88.215210][ T5832] ? lock_acquire+0x2f/0xb0 [ 88.219696][ T5832] ? process_one_work+0x921/0x1ba0 [ 88.224783][ T5832] process_one_work+0x9c5/0x1ba0 [ 88.229796][ T5832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 88.235447][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 88.240817][ T5832] ? assign_work+0x1a0/0x250 [ 88.245439][ T5832] worker_thread+0x6c8/0xf00 [ 88.250023][ T5832] ? __kthread_parkme+0x148/0x220 [ 88.255024][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 88.260116][ T5832] kthread+0x2c1/0x3a0 [ 88.264180][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.269368][ T5832] ? __pfx_kthread+0x10/0x10 [ 88.273952][ T5832] ret_from_fork+0x45/0x80 [ 88.278345][ T5832] ? __pfx_kthread+0x10/0x10 [ 88.282921][ T5832] ret_from_fork_asm+0x1a/0x30 [ 88.287678][ T5832] [ 88.290672][ T5832] [ 88.292979][ T5832] Allocated by task 5832: [ 88.297276][ T5832] kasan_save_stack+0x33/0x60 [ 88.301926][ T5832] kasan_save_track+0x14/0x30 [ 88.306588][ T5832] __kasan_kmalloc+0xaa/0xb0 [ 88.311170][ T5832] __kmalloc_noprof+0x1e8/0x400 [ 88.315992][ T5832] sk_prot_alloc+0x1a8/0x2a0 [ 88.320569][ T5832] sk_alloc+0x36/0xb90 [ 88.324607][ T5832] bt_sock_alloc+0x3b/0x3a0 [ 88.329084][ T5832] l2cap_sock_alloc.constprop.0+0x35/0x180 [ 88.334866][ T5832] l2cap_sock_new_connection_cb+0x101/0x240 [ 88.340735][ T5832] l2cap_connect_cfm+0x4c9/0xf80 [ 88.345647][ T5832] le_conn_complete_evt+0x1662/0x1d80 [ 88.351026][ T5832] hci_le_conn_complete_evt+0x23c/0x370 [ 88.356575][ T5832] hci_le_meta_evt+0x2e2/0x5d0 [ 88.361335][ T5832] hci_event_packet+0x666/0x1180 [ 88.366263][ T5832] hci_rx_work+0x2c6/0x16c0 [ 88.370746][ T5832] process_one_work+0x9c5/0x1ba0 [ 88.375685][ T5832] worker_thread+0x6c8/0xf00 [ 88.380273][ T5832] kthread+0x2c1/0x3a0 [ 88.384332][ T5832] ret_from_fork+0x45/0x80 [ 88.388734][ T5832] ret_from_fork_asm+0x1a/0x30 [ 88.393482][ T5832] [ 88.395779][ T5832] Freed by task 6266: [ 88.399767][ T5832] kasan_save_stack+0x33/0x60 [ 88.404436][ T5832] kasan_save_track+0x14/0x30 [ 88.409084][ T5832] kasan_save_free_info+0x3b/0x60 [ 88.414095][ T5832] __kasan_slab_free+0x51/0x70 [ 88.418842][ T5832] kfree+0x14f/0x4b0 [ 88.422736][ T5832] __sk_destruct+0x5eb/0x720 [ 88.427315][ T5832] sk_destruct+0xc2/0xf0 [ 88.431541][ T5832] __sk_free+0xf4/0x3e0 [ 88.435682][ T5832] sk_free+0x6a/0x90 [ 88.439558][ T5832] l2cap_sock_kill+0x171/0x2d0 [ 88.444311][ T5832] l2cap_sock_cleanup_listen+0x3d/0x2a0 [ 88.449837][ T5832] l2cap_sock_release+0x5c/0x210 [ 88.454770][ T5832] __sock_release+0xb0/0x270 [ 88.459337][ T5832] sock_close+0x1c/0x30 [ 88.463567][ T5832] __fput+0x3f6/0xb60 [ 88.467528][ T5832] task_work_run+0x14e/0x250 [ 88.472109][ T5832] get_signal+0x1ca/0x2770 [ 88.476498][ T5832] arch_do_signal_or_restart+0x90/0x7e0 [ 88.482032][ T5832] syscall_exit_to_user_mode+0x150/0x2a0 [ 88.487638][ T5832] do_syscall_64+0xda/0x250 [ 88.492123][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.498001][ T5832] [ 88.500300][ T5832] The buggy address belongs to the object at ffff888059734000 [ 88.500300][ T5832] which belongs to the cache kmalloc-2k of size 2048 [ 88.514323][ T5832] The buggy address is located 1408 bytes inside of [ 88.514323][ T5832] freed 2048-byte region [ffff888059734000, ffff888059734800) [ 88.528260][ T5832] [ 88.530556][ T5832] The buggy address belongs to the physical page: [ 88.536944][ T5832] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59730 [ 88.545670][ T5832] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.554151][ T5832] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 88.561664][ T5832] page_type: f5(slab) [ 88.565627][ T5832] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 88.574198][ T5832] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 88.582756][ T5832] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 88.591408][ T5832] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 88.600060][ T5832] head: 00fff00000000003 ffffea000165cc01 ffffffffffffffff 0000000000000000 [ 88.608699][ T5832] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 88.617348][ T5832] page dumped because: kasan: bad access detected [ 88.623732][ T5832] page_owner tracks the page as allocated [ 88.629414][ T5832] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 59361501571, free_ts 59360716544 [ 88.650565][ T5832] post_alloc_hook+0x2d1/0x350 [ 88.655335][ T5832] get_page_from_freelist+0xfce/0x2f80 [ 88.660805][ T5832] __alloc_pages_noprof+0x223/0x25a0 [ 88.666072][ T5832] alloc_pages_mpol_noprof+0x2c9/0x610 [ 88.671506][ T5832] new_slab+0x2c9/0x410 [ 88.675645][ T5832] ___slab_alloc+0xdac/0x1880 [ 88.680296][ T5832] __slab_alloc.constprop.0+0x56/0xb0 [ 88.685649][ T5832] __kmalloc_node_track_caller_noprof+0x355/0x430 [ 88.692037][ T5832] kmalloc_reserve+0xef/0x2c0 [ 88.696688][ T5832] pskb_expand_head+0x243/0x1260 [ 88.701601][ T5832] netlink_trim+0x1ef/0x250 [ 88.706087][ T5832] netlink_unicast+0xc6/0x7f0 [ 88.710752][ T5832] ctrl_getfamily+0x40b/0x540 [ 88.715421][ T5832] genl_family_rcv_msg_doit+0x202/0x2f0 [ 88.720963][ T5832] genl_rcv_msg+0x565/0x800 [ 88.725446][ T5832] netlink_rcv_skb+0x16b/0x440 [ 88.730190][ T5832] page last free pid 5200 tgid 5200 stack trace: [ 88.736503][ T5832] free_unref_page+0x661/0x1080 [ 88.741331][ T5832] __put_partials+0x14c/0x170 [ 88.745978][ T5832] qlist_free_all+0x4e/0x120 [ 88.750544][ T5832] kasan_quarantine_reduce+0x192/0x1e0 [ 88.755975][ T5832] __kasan_slab_alloc+0x69/0x90 [ 88.760802][ T5832] kmem_cache_alloc_node_noprof+0x153/0x310 [ 88.766665][ T5832] __alloc_skb+0x2b1/0x380 [ 88.771085][ T5832] netlink_alloc_large_skb+0x69/0x130 [ 88.776442][ T5832] netlink_sendmsg+0x689/0xd70 [ 88.781186][ T5832] ____sys_sendmsg+0xaaf/0xc90 [ 88.785942][ T5832] ___sys_sendmsg+0x135/0x1e0 [ 88.790607][ T5832] __sys_sendmsg+0x117/0x1f0 [ 88.795197][ T5832] do_syscall_64+0xcd/0x250 [ 88.799686][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.805588][ T5832] [ 88.807892][ T5832] Memory state around the buggy address: [ 88.813513][ T5832] ffff888059734480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.821550][ T5832] ffff888059734500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.829603][ T5832] >ffff888059734580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.837667][ T5832] ^ [ 88.841715][ T5832] ffff888059734600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.849765][ T5832] ffff888059734680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.857818][ T5832] ================================================================== [ 88.865889][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.880540][ T5878] usb 3-1: config 0 descriptor?? [ 88.885555][ T5832] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.892757][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:4 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 88.903633][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 88.913707][ T5832] Workqueue: hci3 hci_rx_work [ 88.918401][ T5832] Call Trace: [ 88.921670][ T5832] [ 88.924603][ T5832] dump_stack_lvl+0x3d/0x1f0 [ 88.929186][ T5832] panic+0x71d/0x800 [ 88.933089][ T5832] ? __pfx_panic+0x10/0x10 [ 88.937512][ T5832] ? preempt_schedule_thunk+0x1a/0x30 [ 88.942868][ T5832] ? preempt_schedule_common+0x44/0xc0 [ 88.948330][ T5832] check_panic_on_warn+0xab/0xb0 [ 88.953255][ T5832] end_report+0x117/0x180 [ 88.957582][ T5832] kasan_report+0xe9/0x110 [ 88.961982][ T5832] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 88.968040][ T5832] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 88.974115][ T5832] l2cap_sock_new_connection_cb+0x22a/0x240 [ 88.980024][ T5832] l2cap_connect_cfm+0x4c9/0xf80 [ 88.984974][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 88.990436][ T5832] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 88.995912][ T5832] le_conn_complete_evt+0x1662/0x1d80 [ 89.001298][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 89.007017][ T5832] ? trace_contention_end+0xea/0x140 [ 89.012321][ T5832] hci_le_conn_complete_evt+0x23c/0x370 [ 89.017865][ T5832] hci_le_meta_evt+0x2e2/0x5d0 [ 89.022634][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 89.028689][ T5832] hci_event_packet+0x666/0x1180 [ 89.033611][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 89.038882][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 89.044238][ T5832] ? mark_held_locks+0x9f/0xe0 [ 89.048981][ T5832] ? kcov_remote_start+0x3cf/0x6e0 [ 89.054095][ T5832] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.059282][ T5832] hci_rx_work+0x2c6/0x16c0 [ 89.063772][ T5832] ? lock_acquire+0x2f/0xb0 [ 89.068255][ T5832] ? process_one_work+0x921/0x1ba0 [ 89.073350][ T5832] process_one_work+0x9c5/0x1ba0 [ 89.078272][ T5832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 89.083894][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 89.089249][ T5832] ? assign_work+0x1a0/0x250 [ 89.093916][ T5832] worker_thread+0x6c8/0xf00 [ 89.098488][ T5832] ? __kthread_parkme+0x148/0x220 [ 89.103497][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 89.108602][ T5832] kthread+0x2c1/0x3a0 [ 89.112673][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.117878][ T5832] ? __pfx_kthread+0x10/0x10 [ 89.122452][ T5832] ret_from_fork+0x45/0x80 [ 89.126850][ T5832] ? __pfx_kthread+0x10/0x10 [ 89.131423][ T5832] ret_from_fork_asm+0x1a/0x30 [ 89.136179][ T5832] [ 89.139728][ T5832] Kernel Offset: disabled [ 89.144027][ T5832] Rebooting in 86400 seconds..