last executing test programs: 22.167577454s ago: executing program 4 (id=313): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}]}}}]}, 0x70}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x34dd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000000}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x4) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=@fuse_with_parent={0x18, 0x82, {{0x7c3d, 0xa23, 0x1}, {0x2ab27624, 0x25, 0x80000001}}}, 0x0) 21.221428633s ago: executing program 4 (id=318): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000f800ffffbfa3000000000000070300f320feffff720af0fff8ffffff71a4f0ff000000001f040000000000001d400200000000006504fdffffff00000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 14.295399353s ago: executing program 4 (id=340): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x262) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x1008001, 0x0) 13.706097854s ago: executing program 4 (id=343): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0x48b, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x21, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x20000050) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 12.97673708s ago: executing program 2 (id=346): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 12.865207304s ago: executing program 3 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x20000000) 12.616609424s ago: executing program 2 (id=348): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)="6031d0471252c5c1aa3dc36ace292e513bfb97c23ee063d88ffb2d33b4a75c497cd37d27231d564aa4284892b436076b89eca792de6f20fa075991ffcf9468dbe145a72c099cd10444ea661031a5611a46ecee282e4c02e72bda28224a07f5706a27b8110d76a1682cc961e19f9f61d09a3c73b30c945091c882ec843c8348", 0x7f}, {&(0x7f0000000900)="6f97df63acde88ba133d7b40dc555bb00d8a8178d9687d3a9b027d", 0x1b}, {&(0x7f0000000980)="4a196c0a1289c49b2c213c953ad009dbe31e1bce7611e466c041344a1805966d03bbb50084fea036be838839ad0b8df52d337c4c5f6bc81a1c13f8e98d238c34a87c16954103deaf8a0f18b41cc82f822d1cb297432dd3babb80cc24b6a0367247fcc45593475d896713b65af5d2a8894b68b94e6a29e29b404fd00ebe902d41dbdd478eb0d537bd6997455ececf4d4e3e23f998264b4f8d20b077195b9efe56f552ea67a9420779ad2d1e0c01d26ca19986e69d923329b336de3746c401bd6fd397e49957861b6ad28287197f47", 0xce}, {&(0x7f0000000a80)="cb4ca9e3db9d3fb6c16bc0a3c42287e70aff4c87e3e47a17c5216a6724ed03b0586cf4643cad3ac9a752c5050057d52132214abfd18c43f1d493da0cdf33f7aa43ae9f0b650ad52e17041f84440ff9a7bd", 0x51}, {&(0x7f0000000b00)="9524d10375acbdfe614e498c0540cfcbc89a3f78b39bcd127620e63c349f3a647b97784e46a7427e5039004d058945ff791154adfa14894f3d83334bcfe3ca9ea41bc1a49b74fae6964a6ead36df77ea0d632d5cf354a6f185", 0x59}], 0x5}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="7ec352fed9b4c24fa67bb324b0e1bcd157dbe02ed7315b42b0713e93e4d57c88d3d52a21f8eb6dda66fff3b91ed2145221da469d5ef716a8b0562e3dbe44720d48b4e9bedaefafbab4cbb1a8afde9eed4adaa734b41e6316f3eb236cf28435bc86168c480cc36b760f97729710d7072c06020c776e199dd2716832ff10d7ba6601a48ba387e998f65006e3629d185295f7", 0x91}, {&(0x7f00000003c0)="28b6af613a112ccde6b17845e42ed8cb8beb8a5ed25a24f4dfc9b84a39fee2c3f8703f57f12e722c69bd2e187b8a8236937a3b2a49fc0ec6bc28dd754a31afba6bcca0ab933f11cc321502783298dcb74164d0c9c4d75b83bf128a59d46b2e1dc3c0b053dd8fb3b27a7f4983ea3d85c9121c3a86750fdbf35f256a392d24d6dc166332a64a8ce25cf1fec7802b434cd06295e6a568018c9f240424fe3ac4ab8eb9253b308adef616a13e4f351bbae4fc9bdbeb4ab29f95824fd4c899d09611220e7c9586d39f46e605c121578a95a0f7f7a86bdd25bf8e165ac25a5d5838807b8e9e33db6a27ae2a94", 0xe9}, {&(0x7f0000000740)="82bedd0270614a3da26374bf09f898c62b1b5df9ceb4fe847189d0eed397f6951ea6c2231e4a7161aad157784aa8aa9b4affb032a478bf6c587987bdccb3a589c4c2b93d324b6215a6455aea4c83ca903f708d1edbf64dcba9c82497b74f22d83bad02d1f8669be1fa61fa2933ff176777d08cd2625fbf313b2c74548922f61998485aabd55f612fde70981ea0dd9b4bd5f08d7acf04cdc9041be4da5e84ed0c40465c757a652d0f888cff59da1c50c526564df5297eaf66d81acb5945c62c3eb3acff7c4428fcecb4dbcd2a70", 0xcd}], 0x3}}], 0x2, 0xd0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12.436627521s ago: executing program 3 (id=349): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 12.124199215s ago: executing program 2 (id=350): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)=""/125, 0x7d}, {&(0x7f0000000800)=""/59, 0x3b}], 0x2, &(0x7f0000000340)=""/149, 0x95}, 0x200000d}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaa8aaaabb86dd000186dd06100004aaaaaaaaaabbfc000000000000000000000000000001aaaaaaaaaabbfe8000"/62], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r5 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2) fcntl$addseals(r5, 0x409, 0x8) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r9}, 0x8) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) 10.956348691s ago: executing program 2 (id=351): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 10.916423602s ago: executing program 1 (id=352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000003100000095"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}}, 0x0) 10.616949014s ago: executing program 0 (id=353): close(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_normal', 0x20a02, 0x21) socket$netlink(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), &(0x7f0000000100)) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f00000000c0)={0x1, 0x100, 0x4, 0xe, 0x3, 0x161}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20044000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r2, &(0x7f0000000040)="6fa251480fbaa175310dfc8f0f9c0df526ec442f4f75883c9c116c31ed38b76fff9c4b114201fc85af1927d421febfe067622c46ba5b64c6ea024e82a74a85bbcf7d3b17fb6bed1390cef4a9190389547781f6fa64a5ac28084dd9e675e462c686fb7fbf1314cf9984779f7eba", 0x6d, 0x51, &(0x7f0000000000)={0xa, 0x3, 0x81, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c) 9.876530988s ago: executing program 1 (id=354): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getpeername(r0, 0x0, &(0x7f0000000040)) 9.547814789s ago: executing program 0 (id=355): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) close(0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '9p\x00'}}, {@euid_gt}]}}) 9.447907707s ago: executing program 3 (id=356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800150088a8ffff05000700070000000a0014000180c2"], 0x50}}, 0x0) 9.156555927s ago: executing program 3 (id=357): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}]}}}]}, 0x70}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x34dd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000000}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x4) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=@fuse_with_parent={0x18, 0x82, {{0x7c3d, 0xa23, 0x1}, {0x2ab27624, 0x25, 0x80000001}}}, 0x0) 9.156118353s ago: executing program 1 (id=358): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 8.870386495s ago: executing program 1 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x20000000) 8.788696734s ago: executing program 0 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4044040) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="a8a7f50d6f76c0b92f23c6f00795", 0x0, 0x6d2ae2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = dup3(0xffffffffffffffff, r0, 0x80000) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 8.788281989s ago: executing program 3 (id=361): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)="6031d0471252c5c1aa3dc36ace292e513bfb97c23ee063d88ffb2d33b4a75c497cd37d27231d564aa4284892b436076b89eca792de6f20fa075991ffcf9468dbe145a72c099cd10444ea661031a5611a46ecee282e4c02e72bda28224a07f5706a27b8110d76a1682cc961e19f9f61d09a3c73b30c945091c882ec843c8348", 0x7f}, {&(0x7f0000000900)="6f97df63acde88ba133d7b40dc555bb00d8a8178d9687d3a9b027d", 0x1b}, {&(0x7f0000000980)="4a196c0a1289c49b2c213c953ad009dbe31e1bce7611e466c041344a1805966d03bbb50084fea036be838839ad0b8df52d337c4c5f6bc81a1c13f8e98d238c34a87c16954103deaf8a0f18b41cc82f822d1cb297432dd3babb80cc24b6a0367247fcc45593475d896713b65af5d2a8894b68b94e6a29e29b404fd00ebe902d41dbdd478eb0d537bd6997455ececf4d4e3e23f998264b4f8d20b077195b9efe56f552ea67a9420779ad2d1e0c01d26ca19986e69d923329b336de3746c401bd6fd397e49957861b6ad28287197f47", 0xce}, {&(0x7f0000000a80)="cb4ca9e3db9d3fb6c16bc0a3c42287e70aff4c87e3e47a17c5216a6724ed03b0586cf4643cad3ac9a752c5050057d52132214abfd18c43f1d493da0cdf33f7aa43ae9f0b650ad52e17041f84440ff9a7bd", 0x51}, {&(0x7f0000000b00)="9524d10375acbdfe614e498c0540cfcbc89a3f78b39bcd127620e63c349f3a647b97784e46a7427e5039004d058945ff791154adfa14894f3d83334bcfe3ca9ea41bc1a49b74fae6964a6ead36df77ea0d632d5cf354a6f185", 0x59}], 0x5}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="7ec352fed9b4c24fa67bb324b0e1bcd157dbe02ed7315b42b0713e93e4d57c88d3d52a21f8eb6dda66fff3b91ed2145221da469d5ef716a8b0562e3dbe44720d48b4e9bedaefafbab4cbb1a8afde9eed4adaa734b41e6316f3eb236cf28435bc86168c480cc36b760f97729710d7072c06020c776e199dd2716832ff10d7ba6601a48ba387e998f65006e3629d185295f7", 0x91}, {&(0x7f00000003c0)="28b6af613a112ccde6b17845e42ed8cb8beb8a5ed25a24f4dfc9b84a39fee2c3f8703f57f12e722c69bd2e187b8a8236937a3b2a49fc0ec6bc28dd754a31afba6bcca0ab933f11cc321502783298dcb74164d0c9c4d75b83bf128a59d46b2e1dc3c0b053dd8fb3b27a7f4983ea3d85c9121c3a86750fdbf35f256a392d24d6dc166332a64a8ce25cf1fec7802b434cd06295e6a568018c9f240424fe3ac4ab8eb9253b308adef616a13e4f351bbae4fc9bdbeb4ab29f95824fd4c899d09611220e7c9586d39f46e605c121578a95a0f7f7a86bdd25bf8e165ac25a5d5838807b8e9e33db6a27ae2a94", 0xe9}, {&(0x7f0000000740)="82bedd0270614a3da26374bf09f898c62b1b5df9ceb4fe847189d0eed397f6951ea6c2231e4a7161aad157784aa8aa9b4affb032a478bf6c587987bdccb3a589c4c2b93d324b6215a6455aea4c83ca903f708d1edbf64dcba9c82497b74f22d83bad02d1f8669be1fa61fa2933ff176777d08cd2625fbf313b2c74548922f61998485aabd55f612fde70981ea0dd9b4bd5f08d7acf04cdc9041be4da5e84ed0c40465c757a652d0f888cff59da1c50c526564df5297eaf66d81acb5945c62c3eb3acff7c4428fcecb4dbcd2a70", 0xcd}], 0x3}}], 0x2, 0xd0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.613987148s ago: executing program 1 (id=362): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x1) 8.452701165s ago: executing program 4 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000251401002cbd7000fbdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x8}, 0x8) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value=0xffffffef}, 0x28) 7.588559669s ago: executing program 3 (id=364): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1bb2512b86180e01, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0xfffffffffffffffe) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000600)={{0xfffc, 0x6, 0x100, 0x403}, 'syz0\x00', 0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0x48002) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000002c0)=0xffffff7f) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x8804) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001140)=@newtaction={0x2f0, 0x30, 0xffff, 0x70bd28, 0x0, {}, [{0x2dc, 0x1, [@m_csum={0x0, 0xd, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x8, 0x800, 0x1, 0x8, 0xccd}, 0x2d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x6, 0x2, 0x4, 0xe9d, 0x9}, 0x4}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xfffffffe, 0xffffffff, 0x3, 0x6, 0x7}, 0x3d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xfffffffb, 0x4, 0x10000000, 0x100, 0x5}, 0x7d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x7f, 0x80000000, 0x7, 0x8, 0x9}, 0x50}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0xf, 0x5, 0x4, 0x2}}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xd32, 0x3, 0x5, 0x8f, 0x8000}, 0x9}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x3, 0x1, 0x3, 0x40, 0x149cbf29}, 0x6d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x4, 0x2, 0x10000000, 0x0, 0x800}, 0x48}}]}, {0x0, 0x6, "f6ce47a9db5d6b853cd117c01f30217a6518110cf59e29405c07edb482d0373ae0301231ef1267d8fb8d29ebe238a3398cd2a1dc44c7c29b63"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x1}}}}, @m_ct={0xe8, 0xe, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ce79e05e5e2441e0edb064e0b168a323"}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x87, 0x6, "2196abe571ccf61a5de245fab31552d5fbe8a39ccc08e096b0d0d875bfd11c5217ffae1d72a734778c814a39a319f02b89622c7d595421317761a6d75821b940502786d62015456d5f2f100e67c02bd06efe7603a582d830d479c7c06d4f259d6aafa6c90203a3336b4541f5f9a18d9c5f9ebd3c952d2e68de0a0b8ae7f9a56d1fd9d4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xa0, 0xb, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xffffffffffffff90, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x3b, 0x6, "6eb177dde9320703327c293303cc4a45f77492cad7ff4076d5e6c5e5408ec0a1fd55601f3d29505a5e933ce7d716b326164b801c3d2f78"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2f0}}, 0x800) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r6 = timerfd_create(0x0, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r8) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="000000003f0dc5da924212fda5cf0b9f3f36128e5028bb488113b78b8e4f23bb38c7916f8778155071710d59b1a6", @ANYRES16=r5, @ANYBLOB="010067bd7000fbdbdf25010000005400018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090039000000060002001100000008000800000000000600040001150000"], 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="000000003f0dc5da924212fda5cf0b9f3f36128e5028bb488113b78b8e4f23bb38c7916f8778155071710d59b1a6", @ANYRES16=r5, @ANYBLOB="010067bd7000fbdbdf25010000005400018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090039000000060002001100000008000800000000000600040001150000"], 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1479e1a91092ba6dd4250f859653f95dd4927210db40e76a8ee9e657376b6e6027fd34a1667ec9a2365e2d29319720400383050b100740983a6ab13d34bb3ab7754f65cdeddb29a92d"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1479e1a91092ba6dd4250f859653f95dd4927210db40e76a8ee9e657376b6e6027fd34a1667ec9a2365e2d29319720400383050b100740983a6ab13d34bb3ab7754f65cdeddb29a92d"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xed) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xed) 7.326597351s ago: executing program 0 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000002c00040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 6.319471685s ago: executing program 4 (id=366): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 5.402813114s ago: executing program 0 (id=367): close(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_normal', 0x20a02, 0x21) socket$netlink(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), &(0x7f0000000100)) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f00000000c0)={0x1, 0x100, 0x4, 0xe, 0x3, 0x161}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20044000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r2, &(0x7f0000000040)="6fa251480fbaa175310dfc8f0f9c0df526ec442f4f75883c9c116c31ed38b76fff9c4b114201fc85af1927d421febfe067622c46ba5b64c6ea024e82a74a85bbcf7d3b17fb6bed1390cef4a9190389547781f6fa64a5ac28084dd9e675e462c686fb7fbf1314cf9984779f7eba", 0x6d, 0x51, &(0x7f0000000000)={0xa, 0x3, 0x81, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c) 4.417673239s ago: executing program 2 (id=368): r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_GET_SECCOMP(0x15) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0x14) syz_emit_ethernet(0xaa, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x69, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0x8, "000000000080"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x6, "c8f46976"}]}]}}}}}}}, 0x0) 4.219018101s ago: executing program 0 (id=369): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)="6f97df63acde88ba133d7b40dc555bb00d8a8178d9687d3a9b027d1365cbde684aa06a", 0x23}, {&(0x7f0000000980)="4a196c0a1289c49b2c213c953ad009dbe31e1bce7611e466c041344a1805966d03bbb50084fea036be838839ad0b8df52d337c4c5f6bc81a1c13f8e98d238c34a87c16954103deaf8a0f18b41cc82f822d1cb297432dd3babb80cc24b6a0367247fcc45593475d896713b65af5d2a8894b68b94e6a29e29b404fd00ebe902d41dbdd478eb0d537bd6997455ececf4d4e3e23f998264b4f8d20b077195b9efe56f552ea67a9420779ad2d1e0c01d26ca19986e69d923329b336de3746c401bd6fd397e49957861b6ad28287197f47", 0xce}, {&(0x7f0000000a80)="cb4ca9e3db9d3fb6c16bc0a3c42287e70aff4c87e3e47a17c5216a6724ed03b0586cf4643cad3ac9a752c5050057d52132214abfd18c43f1d493da0cdf33f7aa43ae9f0b650ad52e17041f84440ff9a7bd", 0x51}, {&(0x7f0000000b00)="9524d10375acbdfe614e498c0540cfcbc89a3f78b39bcd127620e63c349f3a647b97784e46a7427e5039004d058945ff791154adfa14894f3d83334bcfe3ca9ea41bc1a49b74fae6964a6ead36df77ea0d632d5cf354a6f185ac8c6a42f5cf961fc1fd89ed2f0d505b12fb2838c173af09cbe4107c045d71b6467dc0d558d462d7717b7d197041b14e6a4f0b61", 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="7ec352fed9b4c24fa67bb324b0e1bcd157dbe02ed7315b42b0713e93e4d57c88d3d52a21f8eb6dda66fff3b91ed2145221da469d5ef716a8b0562e3dbe44720d48b4e9bedaefafbab4cbb1a8afde9eed4adaa734b41e6316f3eb236cf28435bc86168c480cc36b760f97729710d7072c06020c776e199dd2716832ff10d7ba6601a48ba387e998f65006e3629d185295f78ef9681b", 0x95}, {&(0x7f00000003c0)="28b6af613a112ccde6b17845e42ed8cb8beb8a5ed25a24f4dfc9b84a39fee2c3f8703f57f12e722c69bd2e187b8a8236937a3b2a49fc0ec6bc28dd754a31afba6bcca0ab933f11cc321502783298dcb74164d0c9c4d75b83bf128a59d46b2e1dc3c0b053dd8fb3b27a7f4983ea3d85c9121c3a86750fdbf35f256a392d24d6dc166332a64a8ce25cf1fec7802b434cd06295e6a568018c9f240424fe3ac4ab8eb9253b308adef616a13e4f351bbae4fc9bdbeb4ab29f95824fd4c899d09611220e7c9586d39f46e605c121578a95a0f7f7a86bdd25bf8e165ac25a5d5838807b8e9e33db6a27ae2a94daf9e83c82ae23", 0xf0}, {&(0x7f0000000740)="82bedd0270614a3da26374bf09f898c62b1b5df9ceb4fe847189d0eed397f6951ea6c2231e4a7161aad157784aa8aa9b4affb032a478bf6c587987bdccb3a589c4c2b93d324b6215a6455aea4c83ca903f708d1edbf64dcba9c82497b74f22d83bad02d1f8669be1fa", 0x69}, {&(0x7f0000000840)="e7e2bfbb6387a2dc7ea934d7a36e6d3ccd87e21a42ab2106dd38a78437da7116592f34e5a4999b7c203fd7d6069c8fde503b53672c2d", 0x36}], 0x4}}], 0x2, 0xd0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 3.918170982s ago: executing program 1 (id=370): pipe2$9p(&(0x7f00000001c0), 0x0) close(0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 0s ago: executing program 2 (id=371): bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x8) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000001010400000000000000000000000093a3f87680dfee04fc4b6cd4999aa17c49adb188bd453aaed828e800859d82cb0f56620b1949f5eac47fef00afe8a88bb9c563e24865987b24c12cb26cf5b1ca64c9921b4cbd514de1cdf98d82b53395c2ac6606d5bc69848fc1c69618db9034442d8eb8b295c5941b88707cd5dfb080f5a85d6f054f4b2ee6997495b9d0ab7d80585f75016666184e64e69b542bdb25d256a58c98553f8d01dc839410fb51cd378f1b1f58e57f17fa9fec491bc1c3571522dcb02d535d29e6fdc18bfd545873e36381c22c"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c00018014000300000000000000000000fffffff500000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 64.035356][ T30] audit: type=1400 audit(1754697213.933:62): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.040378][ T5833] cgroup: Unknown subsys name 'net' [ 64.058150][ T30] audit: type=1400 audit(1754697213.933:63): avc: denied { mount } for pid=5833 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.088234][ T30] audit: type=1400 audit(1754697213.983:64): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.225669][ T5833] cgroup: Unknown subsys name 'cpuset' [ 64.234706][ T5833] cgroup: Unknown subsys name 'rlimit' [ 64.422686][ T30] audit: type=1400 audit(1754697214.323:65): avc: denied { setattr } for pid=5833 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.458176][ T30] audit: type=1400 audit(1754697214.323:66): avc: denied { create } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.487758][ T30] audit: type=1400 audit(1754697214.323:67): avc: denied { write } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.508935][ T30] audit: type=1400 audit(1754697214.323:68): avc: denied { read } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.529402][ T30] audit: type=1400 audit(1754697214.323:69): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.546778][ T5835] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 64.554372][ T30] audit: type=1400 audit(1754697214.323:70): avc: denied { mount } for pid=5833 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.586390][ T30] audit: type=1400 audit(1754697214.383:71): avc: denied { read } for pid=5511 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.553793][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.960224][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.969045][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.974224][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.976964][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.991743][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.992335][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.999793][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.007258][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.014699][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.021814][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.028770][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.035037][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.042758][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.057061][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.058160][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.065017][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.072548][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.081875][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.086274][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.095713][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.142073][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.153622][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.164053][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.179499][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.193158][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.650331][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 68.835725][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 68.856220][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 68.887219][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 68.963570][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.971178][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.979389][ T5843] bridge_slave_0: entered allmulticast mode [ 68.986696][ T5843] bridge_slave_0: entered promiscuous mode [ 69.030672][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.037886][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.045101][ T5843] bridge_slave_1: entered allmulticast mode [ 69.051931][ T5843] bridge_slave_1: entered promiscuous mode [ 69.064817][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 69.185461][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.194724][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.201861][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.210699][ T5845] bridge_slave_0: entered allmulticast mode [ 69.218142][ T5845] bridge_slave_0: entered promiscuous mode [ 69.245197][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.252542][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.259811][ T5856] bridge_slave_0: entered allmulticast mode [ 69.266929][ T5856] bridge_slave_0: entered promiscuous mode [ 69.276395][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.295208][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.302550][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.309797][ T5845] bridge_slave_1: entered allmulticast mode [ 69.316891][ T5845] bridge_slave_1: entered promiscuous mode [ 69.327285][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.334490][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.341637][ T5844] bridge_slave_0: entered allmulticast mode [ 69.349500][ T5844] bridge_slave_0: entered promiscuous mode [ 69.356520][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.364074][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.371250][ T5856] bridge_slave_1: entered allmulticast mode [ 69.378382][ T5856] bridge_slave_1: entered promiscuous mode [ 69.408961][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.416194][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.423819][ T5844] bridge_slave_1: entered allmulticast mode [ 69.430590][ T5844] bridge_slave_1: entered promiscuous mode [ 69.449843][ T5843] team0: Port device team_slave_0 added [ 69.491594][ T5843] team0: Port device team_slave_1 added [ 69.500026][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.512691][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.541326][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.584602][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.596240][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.608350][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.640136][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.647274][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.673183][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.695474][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.702932][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.710075][ T5855] bridge_slave_0: entered allmulticast mode [ 69.717504][ T5855] bridge_slave_0: entered promiscuous mode [ 69.744509][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.751463][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.778021][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.797844][ T5845] team0: Port device team_slave_0 added [ 69.804343][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.811450][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.818899][ T5855] bridge_slave_1: entered allmulticast mode [ 69.825758][ T5855] bridge_slave_1: entered promiscuous mode [ 69.856759][ T5844] team0: Port device team_slave_0 added [ 69.864469][ T5856] team0: Port device team_slave_0 added [ 69.873882][ T5856] team0: Port device team_slave_1 added [ 69.882829][ T5845] team0: Port device team_slave_1 added [ 69.900035][ T5844] team0: Port device team_slave_1 added [ 69.953674][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.966239][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.995697][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.004166][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.031044][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.054586][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.061538][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.087991][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.109878][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.117127][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.143349][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.166314][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.173572][ T5861] Bluetooth: hci2: command tx timeout [ 70.173572][ T5859] Bluetooth: hci0: command tx timeout [ 70.173871][ T51] Bluetooth: hci1: command tx timeout [ 70.180394][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.216028][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.227660][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.234638][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.253231][ T51] Bluetooth: hci4: command tx timeout [ 70.260559][ T5859] Bluetooth: hci3: command tx timeout [ 70.268006][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.297805][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.304971][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.331538][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.347332][ T5843] hsr_slave_0: entered promiscuous mode [ 70.354384][ T5843] hsr_slave_1: entered promiscuous mode [ 70.380754][ T5855] team0: Port device team_slave_0 added [ 70.429067][ T5855] team0: Port device team_slave_1 added [ 70.481165][ T5856] hsr_slave_0: entered promiscuous mode [ 70.487714][ T5856] hsr_slave_1: entered promiscuous mode [ 70.494114][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 70.499896][ T5856] Cannot create hsr debugfs directory [ 70.521590][ T5844] hsr_slave_0: entered promiscuous mode [ 70.527743][ T5844] hsr_slave_1: entered promiscuous mode [ 70.533945][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 70.539667][ T5844] Cannot create hsr debugfs directory [ 70.555668][ T5845] hsr_slave_0: entered promiscuous mode [ 70.561875][ T5845] hsr_slave_1: entered promiscuous mode [ 70.568388][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 70.574137][ T5845] Cannot create hsr debugfs directory [ 70.595710][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.602938][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.628955][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.641145][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.648157][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.674155][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.847144][ T5855] hsr_slave_0: entered promiscuous mode [ 70.854754][ T5855] hsr_slave_1: entered promiscuous mode [ 70.860791][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 70.866785][ T5855] Cannot create hsr debugfs directory [ 71.136475][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.146625][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.201172][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.213009][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.225196][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.245615][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.304077][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.315321][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.328457][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.344065][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.427265][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.439427][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.450868][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.466078][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.545587][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.561900][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.587328][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.599573][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.625786][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.724513][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.750658][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.761505][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.781731][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.789047][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.803145][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.814826][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.837668][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.844802][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.876912][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.916115][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.943848][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.951003][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.992228][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.011542][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.018708][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.044782][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.070938][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.124098][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.131224][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.150910][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.158069][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.194311][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.230350][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.249946][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.257119][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.262167][ T5859] Bluetooth: hci1: command tx timeout [ 72.269694][ T5859] Bluetooth: hci2: command tx timeout [ 72.275709][ T51] Bluetooth: hci0: command tx timeout [ 72.287561][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.294706][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.335625][ T5861] Bluetooth: hci3: command tx timeout [ 72.337395][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.341114][ T5859] Bluetooth: hci4: command tx timeout [ 72.387080][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.405622][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 72.405637][ T30] audit: type=1400 audit(1754697222.303:86): avc: denied { sys_module } for pid=5845 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.479093][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.554128][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.561270][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.585645][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.592851][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.707914][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.810251][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.891934][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.951421][ T5843] veth0_vlan: entered promiscuous mode [ 72.999612][ T5843] veth1_vlan: entered promiscuous mode [ 73.009629][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.040555][ T5845] veth0_vlan: entered promiscuous mode [ 73.076264][ T5845] veth1_vlan: entered promiscuous mode [ 73.129667][ T5843] veth0_macvtap: entered promiscuous mode [ 73.157463][ T5856] veth0_vlan: entered promiscuous mode [ 73.172718][ T5843] veth1_macvtap: entered promiscuous mode [ 73.217734][ T5856] veth1_vlan: entered promiscuous mode [ 73.246557][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.257654][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.284560][ T5845] veth0_macvtap: entered promiscuous mode [ 73.307627][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.335643][ T5845] veth1_macvtap: entered promiscuous mode [ 73.367063][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.377706][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.389761][ T5856] veth0_macvtap: entered promiscuous mode [ 73.401320][ T5856] veth1_macvtap: entered promiscuous mode [ 73.408511][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.418661][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.476006][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.500151][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.515174][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.557228][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.569196][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.580632][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.600297][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.609515][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.636259][ T5855] veth0_vlan: entered promiscuous mode [ 73.665095][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.674509][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.700314][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.715408][ T2909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.741163][ T5855] veth1_vlan: entered promiscuous mode [ 73.799255][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.814022][ T5855] veth0_macvtap: entered promiscuous mode [ 73.827597][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.865678][ T5855] veth1_macvtap: entered promiscuous mode [ 73.874010][ T5844] veth0_vlan: entered promiscuous mode [ 73.908787][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.917947][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.925036][ T5844] veth1_vlan: entered promiscuous mode [ 73.958918][ T3615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.975084][ T3615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.979256][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.999893][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.027615][ T3615] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.054936][ T30] audit: type=1400 audit(1754697223.933:87): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.8pivys/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.078000][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.082539][ T30] audit: type=1400 audit(1754697223.943:88): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.113400][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.116549][ T30] audit: type=1400 audit(1754697223.943:89): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.8pivys/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.132953][ T3615] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.154454][ T30] audit: type=1400 audit(1754697223.953:90): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.154494][ T30] audit: type=1400 audit(1754697223.953:91): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.8pivys/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.154532][ T30] audit: type=1400 audit(1754697223.953:92): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.8pivys/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.154572][ T30] audit: type=1400 audit(1754697223.953:93): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.178636][ T30] audit: type=1400 audit(1754697223.983:94): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.214299][ T3615] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.283236][ T30] audit: type=1400 audit(1754697223.983:95): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="gadgetfs" ino=7426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.313128][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.317752][ T5844] veth0_macvtap: entered promiscuous mode [ 74.338491][ T5859] Bluetooth: hci2: command tx timeout [ 74.344349][ T5859] Bluetooth: hci0: command tx timeout [ 74.349751][ T5859] Bluetooth: hci1: command tx timeout [ 74.382154][ T3615] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.413853][ T5861] Bluetooth: hci4: command tx timeout [ 74.419305][ T5859] Bluetooth: hci3: command tx timeout [ 74.427267][ T5844] veth1_macvtap: entered promiscuous mode [ 74.481588][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.496411][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.504813][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.542742][ T3615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.550580][ T3615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.558167][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.656760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.687271][ T3615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.492496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.657422][ T3615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.680011][ T3615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.827054][ T5974] fuse: Bad value for 'fd' [ 76.108335][ T3615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.150733][ T3615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.176034][ T3615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.602408][ T5859] Bluetooth: hci0: command tx timeout [ 76.608137][ T51] Bluetooth: hci2: command tx timeout [ 76.613624][ T5861] Bluetooth: hci1: command tx timeout [ 76.619287][ T5859] Bluetooth: hci4: command tx timeout [ 76.631236][ T51] Bluetooth: hci3: command tx timeout [ 77.157772][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.386623][ T5987] fuse: Bad value for 'user_id' [ 77.391504][ T5987] fuse: Bad value for 'user_id' [ 77.635224][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.696955][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 77.696971][ T30] audit: type=1400 audit(1754697227.593:129): avc: denied { read write } for pid=5988 comm="syz.2.9" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.744217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.766260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.922242][ T30] audit: type=1400 audit(1754697227.593:130): avc: denied { open } for pid=5988 comm="syz.2.9" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.951092][ T30] audit: type=1400 audit(1754697227.593:131): avc: denied { ioctl } for pid=5988 comm="syz.2.9" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.980042][ T3615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.002384][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.006948][ T3615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.052442][ T5994] ÿÿÿÿÿÿÇ(¯J: renamed from lo (while UP) [ 78.074070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.169169][ T30] audit: type=1400 audit(1754697227.663:132): avc: denied { read } for pid=5991 comm="syz.1.8" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 78.192455][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 78.218318][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.267739][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.272439][ T30] audit: type=1400 audit(1754697227.663:133): avc: denied { open } for pid=5991 comm="syz.1.8" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 78.304768][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 78.325900][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.398110][ T30] audit: type=1400 audit(1754697228.013:134): avc: denied { create } for pid=5996 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.407507][ T9] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 78.512166][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.627649][ T30] audit: type=1400 audit(1754697228.013:135): avc: denied { connect } for pid=5996 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.637305][ T9] usb 3-1: config 0 descriptor?? [ 78.666148][ T30] audit: type=1400 audit(1754697228.023:136): avc: denied { listen } for pid=5996 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.810435][ T6015] fuse: Bad value for 'user_id' [ 78.816893][ T6015] fuse: Bad value for 'user_id' [ 79.245685][ T30] audit: type=1400 audit(1754697228.063:137): avc: denied { accept } for pid=5996 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.270603][ T30] audit: type=1400 audit(1754697228.113:138): avc: denied { ioctl } for pid=5999 comm="syz.1.11" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 79.874645][ T6022] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 80.045561][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 80.052882][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 80.089514][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 80.097606][ T6027] gretap1: entered promiscuous mode [ 80.122672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 80.145069][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 80.180059][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 80.202408][ T6029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=6029 comm=syz.1.18 [ 80.214900][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 80.221284][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 80.455302][ T9] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 80.496255][ T9] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 80.612192][ T5863] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 80.687361][ T5995] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 80.785848][ T6047] fuse: Bad value for 'user_id' [ 80.790767][ T6047] fuse: Bad value for 'user_id' [ 80.891787][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.131668][ T9] usb 3-1: USB disconnect, device number 2 [ 81.137780][ T5995] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 81.167413][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.182557][ T5863] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 81.194863][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.204172][ T5995] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 81.234917][ T5863] usb 4-1: config 0 descriptor?? [ 81.273662][ T5995] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 81.410432][ T24] cfg80211: failed to load regulatory.db [ 81.862632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 82.202117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.332347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.388502][ T6055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 82.460003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.477083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.653080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.912471][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 82.912487][ T30] audit: type=1400 audit(1754697232.813:163): avc: denied { create } for pid=6058 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.076695][ T6062] syz.1.27: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 83.092971][ T6062] CPU: 0 UID: 0 PID: 6062 Comm: syz.1.27 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 83.093004][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.093023][ T6062] Call Trace: [ 83.093031][ T6062] [ 83.093039][ T6062] dump_stack_lvl+0x16c/0x1f0 [ 83.093081][ T6062] warn_alloc+0x248/0x3a0 [ 83.093106][ T6062] ? __pfx_warn_alloc+0x10/0x10 [ 83.093135][ T6062] ? kasan_save_stack+0x42/0x60 [ 83.093155][ T6062] ? kasan_save_stack+0x33/0x60 [ 83.093175][ T6062] ? kasan_save_track+0x14/0x30 [ 83.093197][ T6062] ? xskq_create+0x52/0x1d0 [ 83.093222][ T6062] ? xsk_setsockopt+0x74e/0x9a0 [ 83.093245][ T6062] ? do_sock_setsockopt+0xf0/0x1d0 [ 83.093269][ T6062] ? xskq_create+0xfb/0x1d0 [ 83.093296][ T6062] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 83.093336][ T6062] ? xskq_create+0xfb/0x1d0 [ 83.093370][ T6062] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 83.093416][ T6062] ? xskq_create+0xfb/0x1d0 [ 83.093445][ T6062] vmalloc_user_noprof+0x9e/0xe0 [ 83.093476][ T6062] ? xskq_create+0xfb/0x1d0 [ 83.093506][ T6062] xskq_create+0xfb/0x1d0 [ 83.093537][ T6062] xsk_setsockopt+0x74e/0x9a0 [ 83.093564][ T6062] ? __pfx_xsk_setsockopt+0x10/0x10 [ 83.093589][ T6062] ? find_held_lock+0x2b/0x80 [ 83.093620][ T6062] ? selinux_socket_setsockopt+0x6a/0x80 [ 83.093644][ T6062] ? __pfx_xsk_setsockopt+0x10/0x10 [ 83.093671][ T6062] do_sock_setsockopt+0xf0/0x1d0 [ 83.093696][ T6062] __sys_setsockopt+0x1a0/0x230 [ 83.093730][ T6062] __x64_sys_setsockopt+0xbd/0x160 [ 83.093758][ T6062] ? do_syscall_64+0x91/0x4c0 [ 83.093776][ T6062] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.093806][ T6062] do_syscall_64+0xcd/0x4c0 [ 83.093827][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.093849][ T6062] RIP: 0033:0x7fe78fd8ebe9 [ 83.093867][ T6062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.093887][ T6062] RSP: 002b:00007fe790ba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.093906][ T6062] RAX: ffffffffffffffda RBX: 00007fe78ffb6090 RCX: 00007fe78fd8ebe9 [ 83.093920][ T6062] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 83.093933][ T6062] RBP: 00007fe78fe11e19 R08: 0000000000000004 R09: 0000000000000000 [ 83.093946][ T6062] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.093959][ T6062] R13: 00007fe78ffb6128 R14: 00007fe78ffb6090 R15: 00007ffc2f7a9568 [ 83.093988][ T6062] [ 83.094002][ T6062] Mem-Info: [ 83.346954][ T6062] active_anon:10140 inactive_anon:0 isolated_anon:0 [ 83.346954][ T6062] active_file:1356 inactive_file:40534 isolated_file:0 [ 83.346954][ T6062] unevictable:768 dirty:1844 writeback:0 [ 83.346954][ T6062] slab_reclaimable:11561 slab_unreclaimable:96401 [ 83.346954][ T6062] mapped:33180 shmem:3702 pagetables:1163 [ 83.346954][ T6062] sec_pagetables:0 bounce:0 [ 83.346954][ T6062] kernel_misc_reclaimable:0 [ 83.346954][ T6062] free:1322059 free_pcp:13867 free_cma:0 [ 83.392408][ T6062] Node 0 active_anon:40560kB inactive_anon:0kB active_file:5424kB inactive_file:161936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132720kB dirty:7368kB writeback:0kB shmem:13272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12044kB pagetables:4496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 83.425231][ T6062] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 83.456080][ T6062] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 83.485183][ T6062] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 83.491073][ T6062] Node 0 DMA32 free:1378724kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40532kB inactive_anon:0kB active_file:5424kB inactive_file:160612kB unevictable:1536kB writepending:7364kB present:3129332kB managed:2539436kB mlocked:0kB bounce:0kB free_pcp:34480kB local_pcp:7460kB free_cma:0kB [ 83.524092][ T6062] lowmem_reserve[]: 0 0 1 1 1 [ 83.529008][ T6062] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 83.559188][ T6062] lowmem_reserve[]: 0 0 0 0 0 [ 83.564300][ T6062] Node 1 Normal free:3894144kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20920kB local_pcp:14008kB free_cma:0kB [ 83.596043][ T6062] lowmem_reserve[]: 0 0 0 0 0 [ 83.600912][ T6062] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 83.615090][ T6062] Node 0 DMA32: 992*4kB (UME) 215*8kB (UME) 12*16kB (UM) 4*32kB (UM) 6*64kB (UME) 6*128kB (UM) 6*256kB (UM) 6*512kB (ME) 3*1024kB (ME) 7*2048kB (UM) 330*4096kB (M) = 1380856kB [ 83.633837][ T6062] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 83.646047][ T6062] Node 1 Normal: 146*4kB (UE) 61*8kB (UME) 35*16kB (UME) 81*32kB (UME) 24*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894144kB [ 83.664550][ T6062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.674136][ T6062] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.683483][ T6062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.694329][ T6062] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.704283][ T6062] 45588 total pagecache pages [ 83.709732][ T6062] 0 pages in swap cache [ 83.714579][ T6062] Free swap = 124996kB [ 83.718757][ T6062] Total swap = 124996kB [ 83.722960][ T6062] 2097051 pages RAM [ 83.726806][ T6062] 0 pages HighMem/MovableOnly [ 83.732270][ T6062] 430230 pages reserved [ 83.736453][ T6062] 0 pages cma reserved [ 83.875573][ T30] audit: type=1400 audit(1754697232.813:164): avc: denied { accept } for pid=6058 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.934146][ T30] audit: type=1400 audit(1754697232.903:165): avc: denied { create } for pid=6057 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.227326][ T30] audit: type=1400 audit(1754697232.963:166): avc: denied { create } for pid=6057 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.352520][ T30] audit: type=1400 audit(1754697232.973:167): avc: denied { setopt } for pid=6057 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.494648][ T30] audit: type=1400 audit(1754697233.803:168): avc: denied { ioctl } for pid=6057 comm="syz.1.27" path="socket:[8421]" dev="sockfs" ino=8421 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.963403][ T30] audit: type=1400 audit(1754697234.503:169): avc: denied { watch_mount watch_reads } for pid=6056 comm="syz.2.25" path="/3" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.029348][ T5863] usbhid 4-1:0.0: can't add hid device: -71 [ 85.074603][ T5863] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 85.693685][ T30] audit: type=1400 audit(1754697234.983:170): avc: denied { create } for pid=6067 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.900098][ T5863] usb 4-1: USB disconnect, device number 2 [ 86.359980][ T30] audit: type=1400 audit(1754697236.223:171): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 86.728786][ T30] audit: type=1400 audit(1754697236.623:172): avc: denied { read } for pid=6085 comm="syz.1.34" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.401943][ T6097] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 87.409789][ T6097] netlink: 244 bytes leftover after parsing attributes in process `syz.3.36'. [ 88.077146][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 88.077161][ T30] audit: type=1400 audit(1754697237.943:186): avc: denied { bind } for pid=6080 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.216703][ T30] audit: type=1400 audit(1754697237.943:187): avc: denied { setopt } for pid=6080 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.504486][ T6106] fuse: Bad value for 'user_id' [ 88.509437][ T6106] fuse: Bad value for 'user_id' [ 88.741197][ T30] audit: type=1400 audit(1754697238.063:188): avc: denied { write } for pid=6080 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.760389][ T30] audit: type=1400 audit(1754697238.103:189): avc: denied { read write } for pid=6102 comm="syz.3.38" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.784218][ T30] audit: type=1400 audit(1754697238.103:190): avc: denied { open } for pid=6102 comm="syz.3.38" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.012942][ T30] audit: type=1400 audit(1754697238.143:191): avc: denied { create } for pid=6102 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.134182][ T30] audit: type=1400 audit(1754697238.883:192): avc: denied { write } for pid=6085 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.253075][ T30] audit: type=1400 audit(1754697238.883:193): avc: denied { name_connect } for pid=6085 comm="syz.1.34" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 89.350050][ T30] audit: type=1400 audit(1754697239.163:194): avc: denied { getopt } for pid=6102 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.475252][ T30] audit: type=1400 audit(1754697239.163:195): avc: denied { ioctl } for pid=6102 comm="syz.3.38" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.530551][ T6120] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.676959][ T6122] bridge_slave_0: left allmulticast mode [ 89.682823][ T6122] bridge_slave_0: left promiscuous mode [ 89.689745][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.834080][ T6122] bridge_slave_1: left allmulticast mode [ 90.839826][ T6122] bridge_slave_1: left promiscuous mode [ 90.857717][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.903240][ T6122] bond0: (slave bond_slave_0): Releasing backup interface [ 90.925935][ T6122] bond0: (slave bond_slave_1): Releasing backup interface [ 91.006635][ T6120] Invalid ELF header magic: != ELF [ 91.083874][ T6122] team0: Port device team_slave_0 removed [ 91.352125][ T6122] team0: Port device team_slave_1 removed [ 91.631321][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.644001][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.760804][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.771194][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.038772][ T6135] fuse: Bad value for 'user_id' [ 92.043800][ T6135] fuse: Bad value for 'user_id' [ 92.441045][ T6124] team0: Mode changed to "loadbalance" [ 92.727705][ T6137] wireguard0: entered promiscuous mode [ 92.925928][ T6137] wireguard0: entered allmulticast mode [ 93.786658][ T1206] kernel read not supported for file /dsp (pid: 1206 comm: kworker/1:2) [ 93.942310][ T6150] fuse: Bad value for 'user_id' [ 93.947851][ T6150] fuse: Bad value for 'user_id' [ 94.481782][ T6152] wireguard0: entered promiscuous mode [ 94.511958][ T6152] wireguard0: entered allmulticast mode [ 94.801931][ T6161] fuse: Bad value for 'user_id' [ 94.806925][ T6161] fuse: Bad value for 'user_id' [ 95.154835][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 95.154850][ T30] audit: type=1400 audit(1754697245.053:203): avc: denied { setopt } for pid=6158 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.185399][ T6163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.198794][ T6163] netlink: 148 bytes leftover after parsing attributes in process `syz.2.52'. [ 95.477573][ T6169] fuse: Bad value for 'fd' [ 96.629617][ T6180] netlink: 52 bytes leftover after parsing attributes in process `syz.0.58'. [ 97.786905][ T30] audit: type=1400 audit(1754697247.683:204): avc: denied { append } for pid=6194 comm="syz.3.64" name="comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.797606][ T6198] comedi comedi1: dac02: I/O port conflict (0x4,8) [ 97.840008][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.854721][ T6192] netlink: 148 bytes leftover after parsing attributes in process `syz.1.60'. [ 98.986127][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.67'. [ 99.386362][ T30] audit: type=1400 audit(1754697249.283:205): avc: denied { create } for pid=6207 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.310329][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 100.536190][ T30] audit: type=1400 audit(1754697250.433:206): avc: denied { read write } for pid=6207 comm="syz.4.68" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.464443][ T30] audit: type=1400 audit(1754697250.433:207): avc: denied { open } for pid=6207 comm="syz.4.68" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.578781][ T30] audit: type=1400 audit(1754697250.463:208): avc: denied { map } for pid=6207 comm="syz.4.68" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.700531][ T6223] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 101.731521][ T30] audit: type=1400 audit(1754697250.463:209): avc: denied { execute } for pid=6207 comm="syz.4.68" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.731584][ T6223] File: /dev/nullb0 PID: 6223 Comm: syz.4.68 [ 101.760938][ T30] audit: type=1400 audit(1754697250.993:210): avc: denied { create } for pid=6216 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.837542][ T30] audit: type=1400 audit(1754697251.623:211): avc: denied { ioctl } for pid=6207 comm="syz.4.68" path="socket:[8677]" dev="sockfs" ino=8677 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.465658][ T30] audit: type=1400 audit(1754697252.163:212): avc: denied { create } for pid=6232 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.648193][ T6229] wireguard0: entered promiscuous mode [ 102.654522][ T30] audit: type=1400 audit(1754697252.173:213): avc: denied { connect } for pid=6232 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.692083][ T6229] wireguard0: entered allmulticast mode [ 104.106180][ T30] audit: type=1400 audit(1754697253.993:214): avc: denied { read } for pid=6251 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.584124][ T30] audit: type=1400 audit(1754697254.083:215): avc: denied { name_bind } for pid=6249 comm="syz.3.80" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 106.042048][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 106.042066][ T30] audit: type=1400 audit(1754697255.523:218): avc: denied { mount } for pid=6238 comm="syz.1.76" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.878954][ T6285] fuse: Bad value for 'user_id' [ 107.884794][ T6285] fuse: Bad value for 'user_id' [ 108.256423][ T30] audit: type=1400 audit(1754697258.153:219): avc: denied { watch } for pid=6267 comm="syz.2.84" path="/16" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.770984][ T30] audit: type=1400 audit(1754697258.553:220): avc: denied { map } for pid=6280 comm="syz.0.86" path="socket:[8775]" dev="sockfs" ino=8775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.855670][ T30] audit: type=1400 audit(1754697258.553:221): avc: denied { read } for pid=6280 comm="syz.0.86" path="socket:[8775]" dev="sockfs" ino=8775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.603034][ T30] audit: type=1400 audit(1754697259.503:222): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.327962][ T30] audit: type=1400 audit(1754697260.223:223): avc: denied { create } for pid=6299 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.390755][ T30] audit: type=1400 audit(1754697260.283:224): avc: denied { create } for pid=6300 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.707979][ T30] audit: type=1400 audit(1754697260.313:225): avc: denied { getopt } for pid=6300 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.810600][ T6310] mmap: syz.0.91 (6310) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.895270][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'. [ 112.299977][ T6318] fuse: Bad value for 'user_id' [ 112.305081][ T6318] fuse: Bad value for 'user_id' [ 112.712516][ T6309] bridge_slave_0: left allmulticast mode [ 112.737986][ T6309] bridge_slave_0: left promiscuous mode [ 112.904258][ T30] audit: type=1400 audit(1754697262.703:226): avc: denied { read } for pid=6317 comm="syz.1.94" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.112750][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.195125][ T6309] bridge_slave_1: left allmulticast mode [ 113.239813][ T6309] bridge_slave_1: left promiscuous mode [ 114.425020][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.445001][ T30] audit: type=1400 audit(1754697262.703:227): avc: denied { open } for pid=6317 comm="syz.1.94" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.584963][ T30] audit: type=1400 audit(1754697262.743:228): avc: denied { ioctl } for pid=6317 comm="syz.1.94" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.652502][ T6309] bond0: (slave bond_slave_0): Releasing backup interface [ 114.796570][ T6330] fuse: Bad value for 'user_id' [ 114.801545][ T6330] fuse: Bad value for 'user_id' [ 115.112155][ T30] audit: type=1400 audit(1754697262.813:229): avc: denied { execute } for pid=6317 comm="syz.1.94" path="/18/cgroup.events" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.171394][ T6309] bond0: (slave bond_slave_1): Releasing backup interface [ 115.226910][ T6309] team0: Port device team_slave_0 removed [ 115.271161][ T6309] team0: Port device team_slave_1 removed [ 115.370576][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.391062][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.402898][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.412140][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.431895][ T6311] team0: Mode changed to "loadbalance" [ 115.721247][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 115.758356][ T6336] vlan0: entered promiscuous mode [ 115.765531][ T6336] gretap0: entered promiscuous mode [ 115.831502][ T6342] netlink: 84 bytes leftover after parsing attributes in process `syz.3.101'. [ 115.957091][ T30] audit: type=1400 audit(1754697265.743:230): avc: denied { bind } for pid=6337 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.877960][ T30] audit: type=1400 audit(1754697265.743:231): avc: denied { name_bind } for pid=6337 comm="syz.0.100" src=18464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 116.939659][ T30] audit: type=1400 audit(1754697265.753:232): avc: denied { node_bind } for pid=6337 comm="syz.0.100" saddr=255.255.255.255 src=18464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 117.150682][ T30] audit: type=1400 audit(1754697265.753:233): avc: denied { connect } for pid=6337 comm="syz.0.100" laddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.172105][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.224435][ T6357] fuse: Bad value for 'user_id' [ 117.229346][ T6357] fuse: Bad value for 'user_id' [ 117.617825][ T30] audit: type=1400 audit(1754697265.993:234): avc: denied { getopt } for pid=6337 comm="syz.0.100" laddr=255.255.255.255 faddr=172.20.20.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.641900][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.648089][ T30] audit: type=1400 audit(1754697266.603:235): avc: denied { mount } for pid=6337 comm="syz.0.100" name="/" dev="ramfs" ino=9515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 117.683520][ T30] audit: type=1400 audit(1754697267.203:236): avc: denied { ioctl } for pid=6354 comm="syz.4.105" path="socket:[9539]" dev="sockfs" ino=9539 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.708018][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.720451][ T30] audit: type=1400 audit(1754697267.243:237): avc: denied { bind } for pid=6354 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.745850][ T30] audit: type=1400 audit(1754697267.613:238): avc: denied { cmd } for pid=6354 comm="syz.4.105" path="socket:[8916]" dev="sockfs" ino=8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 117.864443][ T6362] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=6362 comm=syz.2.106 [ 117.893771][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 118.040613][ T30] audit: type=1400 audit(1754697267.923:239): avc: denied { setopt } for pid=6361 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.123711][ T30] audit: type=1400 audit(1754697269.713:240): avc: denied { name_bind } for pid=6370 comm="syz.0.108" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 120.493001][ T5916] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.678258][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 120.724493][ T5916] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 121.607461][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.632603][ T5916] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.665788][ T5916] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 121.677868][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.743545][ T6367] bridge_slave_0: left allmulticast mode [ 121.749487][ T6367] bridge_slave_0: left promiscuous mode [ 121.756261][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.827611][ T6367] bridge_slave_1: left allmulticast mode [ 121.835050][ T6367] bridge_slave_1: left promiscuous mode [ 121.840893][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.977921][ T6367] bond0: (slave bond_slave_0): Releasing backup interface [ 122.000065][ T6367] bond0: (slave bond_slave_1): Releasing backup interface [ 122.067830][ T6367] team0: Port device team_slave_0 removed [ 122.080099][ T6367] team0: Port device team_slave_1 removed [ 122.089237][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.098792][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.109349][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.119791][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.150880][ T6368] team0: Mode changed to "loadbalance" [ 122.198532][ T6387] macvlan2: entered promiscuous mode [ 122.285821][ T6387] team0: entered promiscuous mode [ 122.307208][ T6387] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.340268][ T6387] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 122.810853][ T6403] fuse: Bad value for 'user_id' [ 122.816762][ T6403] fuse: Bad value for 'user_id' [ 123.274961][ T5916] usb 3-1: can't set config #1, error -71 [ 123.286698][ T6363] [U]  [ 123.297656][ T5916] usb 3-1: USB disconnect, device number 3 [ 123.372258][ T5995] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.500806][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 123.500823][ T30] audit: type=1400 audit(1754697273.393:246): avc: denied { bind } for pid=6406 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.526693][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.569202][ T30] audit: type=1400 audit(1754697273.393:247): avc: denied { write } for pid=6406 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.572316][ T5995] usb 4-1: Using ep0 maxpacket: 8 [ 123.610951][ T6413] loop9: detected capacity change from 0 to 8 [ 123.611269][ T5995] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 123.629004][ T6413] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 123.637985][ T6413] loop9: partition table partially beyond EOD, truncated [ 123.650710][ T6413] loop9: p1 size 81768186 extends beyond EOD, truncated [ 123.812748][ T5995] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 123.824941][ T5995] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.838309][ T5995] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.850710][ T5995] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.852138][ T6108] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 123.863299][ T5995] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 123.915508][ T6108] loop9: partition table partially beyond EOD, truncated [ 124.008855][ T6421] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.097789][ T30] audit: type=1400 audit(1754697273.843:248): avc: denied { mount } for pid=6410 comm="syz.4.121" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.260018][ T6108] loop9: p1 size 81768186 extends beyond EOD, truncated [ 124.261106][ T5995] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 124.281810][ T5995] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.295673][ T30] audit: type=1400 audit(1754697273.853:249): avc: denied { lock } for pid=6410 comm="syz.4.121" path="socket:[9007]" dev="sockfs" ino=9007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.325840][ T5995] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.340801][ T5995] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.355220][ T6417] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 124.362918][ T5995] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 124.363838][ T6417] loop9: partition table partially beyond EOD, [ 124.370562][ T5995] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 124.383081][ T6417] truncated [ 124.432373][ T6417] loop9: p1 size 81768186 extends beyond EOD, truncated [ 124.455552][ T30] audit: type=1400 audit(1754697274.313:250): avc: denied { read } for pid=6423 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.538487][ T5995] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.550464][ T30] audit: type=1400 audit(1754697274.323:251): avc: denied { sys_module } for pid=6423 comm="syz.2.125" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.617891][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'. [ 124.631823][ T30] audit: type=1400 audit(1754697274.333:252): avc: denied { read } for pid=5201 comm="acpid" name="event6" dev="devtmpfs" ino=2928 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 124.671947][ T6433] vlan0: entered promiscuous mode [ 124.702869][ T6433] gretap0: entered promiscuous mode [ 124.727162][ T30] audit: type=1400 audit(1754697274.333:253): avc: denied { open } for pid=5201 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=2928 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 124.770111][ T5995] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.799526][ T5995] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.821571][ T30] audit: type=1400 audit(1754697274.333:254): avc: denied { ioctl } for pid=5201 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=2928 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 124.905447][ T6440] netlink: 136 bytes leftover after parsing attributes in process `syz.0.126'. [ 124.986676][ T5995] usb 4-1: string descriptor 0 read error: -22 [ 125.121532][ T5995] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 125.298977][ T30] audit: type=1400 audit(1754697274.403:255): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 125.331305][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.488352][ T5995] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 125.550982][ T6108] udevd[6108]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 125.572625][ T6448] FAULT_INJECTION: forcing a failure. [ 125.572625][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.637807][ T5995] usb 4-1: USB disconnect, device number 3 [ 125.655005][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.2.131 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 125.655034][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.655050][ T6448] Call Trace: [ 125.655056][ T6448] [ 125.655065][ T6448] dump_stack_lvl+0x16c/0x1f0 [ 125.655099][ T6448] should_fail_ex+0x512/0x640 [ 125.655121][ T6448] _copy_to_user+0x32/0xd0 [ 125.655146][ T6448] simple_read_from_buffer+0xcb/0x170 [ 125.655170][ T6448] proc_fail_nth_read+0x197/0x240 [ 125.655194][ T6448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.655218][ T6448] ? rw_verify_area+0xcf/0x6c0 [ 125.655247][ T6448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.655269][ T6448] vfs_read+0x1e1/0xc60 [ 125.655293][ T6448] ? __pfx___mutex_lock+0x10/0x10 [ 125.655312][ T6448] ? __pfx_vfs_read+0x10/0x10 [ 125.655340][ T6448] ? __fget_files+0x20e/0x3c0 [ 125.655377][ T6448] ksys_read+0x12a/0x250 [ 125.655396][ T6448] ? __pfx_ksys_read+0x10/0x10 [ 125.655424][ T6448] do_syscall_64+0xcd/0x4c0 [ 125.655446][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.655466][ T6448] RIP: 0033:0x7f7f1c18d5fc [ 125.655483][ T6448] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.655500][ T6448] RSP: 002b:00007f7f1d0c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.655518][ T6448] RAX: ffffffffffffffda RBX: 00007f7f1c3b5fa0 RCX: 00007f7f1c18d5fc [ 125.655531][ T6448] RDX: 000000000000000f RSI: 00007f7f1d0c60a0 RDI: 0000000000000003 [ 125.655543][ T6448] RBP: 00007f7f1d0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.655554][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.655565][ T6448] R13: 00007f7f1c3b6038 R14: 00007f7f1c3b5fa0 R15: 00007ffd465d0718 [ 125.655594][ T6448] [ 125.911804][ T6452] fuse: Bad value for 'user_id' [ 125.916922][ T6452] fuse: Bad value for 'user_id' [ 125.988746][ T6108] udevd[6108]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 127.380326][ T6478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.393140][ T6478] netlink: 148 bytes leftover after parsing attributes in process `syz.2.138'. [ 127.569349][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 127.575962][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 127.672125][ T5916] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.858055][ T6470] ceph: No mds server is up or the cluster is laggy [ 127.981278][ T1206] libceph: connect (1)[c::]:6789 error -101 [ 128.128260][ T1206] libceph: mon0 (1)[c::]:6789 connect error [ 128.322299][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.363398][ T5916] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.420930][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.502974][ T5916] usb 2-1: config 0 descriptor?? [ 129.195056][ T6499] fuse: Bad value for 'user_id' [ 129.200112][ T6499] fuse: Bad value for 'user_id' [ 129.689701][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 129.689717][ T30] audit: type=1400 audit(1754697279.583:270): avc: denied { ioctl } for pid=6473 comm="syz.1.141" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.959961][ T30] audit: type=1400 audit(1754697279.583:271): avc: denied { set_context_mgr } for pid=6473 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.081705][ T30] audit: type=1400 audit(1754697279.973:272): avc: denied { map } for pid=6473 comm="syz.1.141" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.109550][ T6507] binder: BINDER_SET_CONTEXT_MGR already set [ 130.360680][ T6507] binder: 6473:6507 ioctl 4018620d 200000004a80 returned -16 [ 130.676993][ T30] audit: type=1400 audit(1754697280.553:273): avc: denied { ioctl } for pid=6510 comm="syz.4.151" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.738323][ T6507] binder: 6473:6507 ioctl c0189374 200000000280 returned -22 [ 130.781166][ T6501] binder: 6473:6501 ioctl 3302 0 returned -22 [ 130.789328][ T30] audit: type=1400 audit(1754697280.623:274): avc: denied { ioctl } for pid=6473 comm="syz.1.141" path="socket:[9822]" dev="sockfs" ino=9822 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.096777][ T30] audit: type=1400 audit(1754697281.993:275): avc: denied { search } for pid=5511 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.182684][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 132.188715][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 132.209489][ T30] audit: type=1400 audit(1754697282.023:276): avc: denied { search } for pid=5511 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.298803][ T30] audit: type=1400 audit(1754697282.023:277): avc: denied { search } for pid=5511 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.405780][ T5916] usb 2-1: USB disconnect, device number 2 [ 132.530382][ T30] audit: type=1400 audit(1754697282.023:278): avc: denied { read } for pid=5511 comm="dhcpcd" name="n100" dev="tmpfs" ino=2507 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.682344][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.689070][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.835142][ T30] audit: type=1400 audit(1754697282.023:279): avc: denied { open } for pid=5511 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2507 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.835404][ T6541] syz.0.158 uses obsolete (PF_INET,SOCK_PACKET) [ 134.005817][ T5916] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.194383][ T6559] fuse: Bad value for 'user_id' [ 134.199242][ T6559] fuse: Bad value for 'user_id' [ 134.376326][ T5916] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 134.601970][ C1] hrtimer: interrupt took 30915 ns [ 135.185135][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.225869][ T5916] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 135.244384][ T5916] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 135.279368][ T5916] usb 2-1: Manufacturer: syz [ 135.302117][ T5916] usb 2-1: config 0 descriptor?? [ 136.175901][ T5916] rc_core: IR keymap rc-hauppauge not found [ 136.181840][ T5916] Registered IR keymap rc-empty [ 136.322082][ T5863] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.352140][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 136.352155][ T30] audit: type=1400 audit(1754697286.243:286): avc: denied { add_name } for pid=6542 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.449054][ T5916] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 136.459860][ T30] audit: type=1400 audit(1754697286.283:287): avc: denied { create } for pid=6542 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.510272][ T5916] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 136.561298][ T5916] usb 2-1: USB disconnect, device number 3 [ 136.617081][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.626374][ T30] audit: type=1400 audit(1754697286.283:288): avc: denied { write } for pid=6542 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2538 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.642062][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 136.722827][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.781461][ T30] audit: type=1400 audit(1754697286.283:289): avc: denied { append } for pid=6542 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2538 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.827794][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.912078][ T30] audit: type=1400 audit(1754697286.803:290): avc: denied { remove_name } for pid=6594 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2538 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.024721][ T5863] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.034370][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.044579][ T30] audit: type=1400 audit(1754697286.803:291): avc: denied { unlink } for pid=6594 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2538 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.072844][ T5863] usb 3-1: config 0 descriptor?? [ 137.517236][ T6575] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.585816][ T6608] 9pnet_fd: Insufficient options for proto=fd [ 137.873449][ T6615] fuse: Bad value for 'user_id' [ 137.879957][ T6615] fuse: Bad value for 'user_id' [ 138.031528][ T6619] loop9: detected capacity change from 0 to 8 [ 138.050256][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.178'. [ 138.277213][ T6108] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 138.294906][ T6108] loop9: partition table partially beyond EOD, truncated [ 138.321489][ T6622] vlan2: entered promiscuous mode [ 138.330954][ T6108] loop9: p1 size 81768186 extends beyond EOD, truncated [ 138.346655][ T6622] gretap0: entered promiscuous mode [ 138.641115][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.668413][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.714530][ T6575] binder: 6572:6575 ioctl c0306201 200000000240 returned -14 [ 138.798118][ T5863] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 138.858157][ T5863] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 138.940898][ T6619] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 138.964136][ T6619] loop9: partition table partially beyond EOD, truncated [ 139.003298][ T6619] loop9: p1 size 81768186 extends beyond EOD, truncated [ 139.373348][ T6641] Zero length message leads to an empty skb [ 139.422841][ T5863] usb 3-1: USB disconnect, device number 4 [ 139.992204][ T6108] udevd[6108]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 140.060982][ T6630] fido_id[6630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.096548][ T6650] netlink: 136 bytes leftover after parsing attributes in process `syz.0.182'. [ 140.375160][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.572862][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 140.597059][ T5847] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 140.625222][ T5847] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.782536][ T6678] fuse: Bad value for 'user_id' [ 140.787419][ T6678] fuse: Bad value for 'user_id' [ 140.812263][ T5847] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.824004][ T5847] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.835225][ T5847] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.865868][ T30] audit: type=1400 audit(1754697290.763:292): avc: denied { write } for pid=6669 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 141.097585][ T5847] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 141.110916][ T5847] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 141.147043][ T5847] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.188379][ T5847] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.246767][ T5847] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 141.273437][ T5847] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 141.281004][ T5847] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 141.313883][ T5847] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.352862][ T5847] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.370143][ T5847] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 141.558240][ T5847] usb 2-1: string descriptor 0 read error: -22 [ 141.598795][ T5847] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 141.782170][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.852380][ T5847] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 141.920292][ T6700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.931807][ T6700] netlink: 148 bytes leftover after parsing attributes in process `syz.0.198'. [ 142.085975][ T5847] usb 2-1: USB disconnect, device number 4 [ 142.219535][ T30] audit: type=1400 audit(1754697292.103:293): avc: denied { bind } for pid=6703 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.274846][ T30] audit: type=1400 audit(1754697292.103:294): avc: denied { write } for pid=6703 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.361226][ T6649] batadv_slave_1: mtu less than device minimum [ 142.446833][ T5863] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.592142][ T5863] usb 3-1: device descriptor read/64, error -71 [ 142.852525][ T5863] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.022210][ T5863] usb 3-1: device descriptor read/64, error -71 [ 143.818267][ T6724] fuse: Bad value for 'user_id' [ 143.823266][ T6724] fuse: Bad value for 'user_id' [ 143.897504][ T5863] usb usb3-port1: attempt power cycle [ 144.540260][ T5863] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.664236][ T5863] usb 3-1: device descriptor read/8, error -71 [ 144.887237][ T6740] netlink: 44 bytes leftover after parsing attributes in process `syz.1.212'. [ 145.684911][ T5863] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.806980][ T5863] usb 3-1: device descriptor read/8, error -71 [ 145.822140][ T30] audit: type=1400 audit(1754697295.703:295): avc: denied { mounton } for pid=6719 comm="syz.3.206" path="/41/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.918362][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 146.022237][ T30] audit: type=1400 audit(1754697295.813:296): avc: denied { setattr } for pid=6719 comm="syz.3.206" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.091514][ T5863] usb usb3-port1: unable to enumerate USB device [ 146.141070][ T30] audit: type=1400 audit(1754697296.033:297): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 146.660609][ T30] audit: type=1400 audit(1754697296.553:298): avc: denied { create } for pid=6739 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 146.782373][ T30] audit: type=1400 audit(1754697296.593:299): avc: denied { map } for pid=6758 comm="syz.0.219" path="socket:[10200]" dev="sockfs" ino=10200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.982202][ T5863] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 147.122171][ T5863] usb 2-1: device descriptor read/64, error -71 [ 147.432078][ T5863] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 147.697717][ T5863] usb 2-1: device descriptor read/64, error -71 [ 148.403069][ T5863] usb usb2-port1: attempt power cycle [ 149.005929][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.233'. [ 149.327253][ T30] audit: type=1400 audit(1754697299.033:300): avc: denied { setopt } for pid=6790 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.649350][ T6809] trusted_key: syz.1.235 sent an empty control message without MSG_MORE. [ 150.126733][ T6828] fuse: Bad value for 'user_id' [ 150.131655][ T6828] fuse: Bad value for 'user_id' [ 150.533433][ T6820] process 'syz.0.237' launched './file0' with NULL argv: empty string added [ 150.591434][ T30] audit: type=1400 audit(1754697300.473:301): avc: denied { execute_no_trans } for pid=6805 comm="syz.0.237" path="/56/file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.769982][ T6842] bridge_slave_0: left allmulticast mode [ 151.776918][ T6842] bridge_slave_0: left promiscuous mode [ 151.783334][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.946272][ T6842] bridge_slave_1: left allmulticast mode [ 152.954331][ T6842] bridge_slave_1: left promiscuous mode [ 152.960249][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.035507][ T6842] bond0: (slave bond_slave_0): Releasing backup interface [ 153.837321][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 153.892599][ T6842] bond0: (slave bond_slave_1): Releasing backup interface [ 153.937676][ T6842] team0: Port device team_slave_0 removed [ 153.954796][ T6857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=6857 comm=syz.2.248 [ 154.003773][ T6842] team0: Port device team_slave_1 removed [ 154.041030][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.055674][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.151267][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.167263][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.655663][ T6843] team0: Mode changed to "loadbalance" [ 154.793012][ T30] audit: type=1400 audit(1754697304.693:302): avc: denied { mounton } for pid=6865 comm="syz.2.253" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 154.828295][ T6866] syz.2.253: attempt to access beyond end of device [ 154.828295][ T6866] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 157.411267][ T6907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.504873][ T6911] netlink: 184 bytes leftover after parsing attributes in process `syz.2.264'. [ 157.582568][ T30] audit: type=1400 audit(1754697307.473:303): avc: denied { create } for pid=6905 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 157.607506][ T6911] xt_socket: unknown flags 0xd0 [ 157.627769][ T30] audit: type=1400 audit(1754697307.473:304): avc: denied { ioctl } for pid=6905 comm="syz.2.264" path="socket:[11391]" dev="sockfs" ino=11391 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 157.776598][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 157.866631][ T975] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.302080][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 159.206000][ T6934] fuse: Bad value for 'user_id' [ 159.210915][ T6934] fuse: Bad value for 'user_id' [ 159.511248][ T975] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.531730][ T975] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.542076][ T975] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15136, setting to 1024 [ 159.553550][ T975] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 159.563890][ T975] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.592473][ T975] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.601544][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.996823][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 160.066021][ T6946] netlink: 52 bytes leftover after parsing attributes in process `syz.3.280'. [ 160.140964][ T6950] 9pnet_fd: Insufficient options for proto=fd [ 160.186943][ T9] usb 2-1: config 150 has an invalid interface number: 204 but max is 0 [ 160.212424][ T9] usb 2-1: config 150 has no interface number 0 [ 160.212749][ T975] usb 5-1: GET_CAPABILITIES returned 0 [ 160.224799][ T9] usb 2-1: config 150 interface 204 has no altsetting 0 [ 160.229470][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 160.255970][ T9] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 160.272063][ T975] usbtmc 5-1:16.0: can't read capabilities [ 160.280555][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.309682][ T9] usb 2-1: Product: syz [ 160.345810][ T6958] overlayfs: failed to clone upperpath [ 160.448685][ T9] usb 2-1: Manufacturer: syz [ 160.453769][ T9] usb 2-1: SerialNumber: syz [ 160.488684][ T24] usb 5-1: USB disconnect, device number 2 [ 160.976018][ T6943] ubi31: attaching mtd0 [ 160.995275][ T6943] ubi31: scanning is finished [ 161.001606][ T6943] ubi31: empty MTD device detected [ 162.089491][ T6970] fuse: Bad value for 'user_id' [ 162.096666][ T6970] fuse: Bad value for 'user_id' [ 162.162051][ T6943] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 162.169745][ T6943] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 162.235656][ T6943] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 162.243008][ T6943] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 162.254320][ T6943] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 162.261368][ T6943] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 162.320436][ T6943] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3864680636 [ 162.371222][ T6943] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 162.384163][ T6974] ubi31: background thread "ubi_bgt31d" started, PID 6974 [ 162.403291][ T6977] wireguard0: entered promiscuous mode [ 162.558867][ T6977] wireguard0: entered allmulticast mode [ 162.815734][ T9] usb 2-1: USB disconnect, device number 8 [ 163.285069][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 163.453535][ T6996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=6996 comm=syz.0.298 [ 164.028403][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 164.037486][ T7009] netlink: 'syz.0.303': attribute type 2 has an invalid length. [ 164.045535][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'. [ 165.347492][ T7030] fuse: Bad value for 'user_id' [ 165.352447][ T7030] fuse: Bad value for 'user_id' [ 166.230274][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 166.390037][ T7038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=7038 comm=syz.4.313 [ 168.252328][ T7074] fuse: Bad value for 'user_id' [ 168.257203][ T7074] fuse: Bad value for 'user_id' [ 168.502205][ T30] audit: type=1400 audit(1754697318.123:305): avc: denied { ioctl } for pid=7068 comm="syz.3.325" path="socket:[11032]" dev="sockfs" ino=11032 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.788424][ T30] audit: type=1400 audit(1754697318.133:306): avc: denied { watch } for pid=7068 comm="syz.3.325" path="/62" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 169.107966][ T30] audit: type=1400 audit(1754697318.133:307): avc: denied { watch_sb } for pid=7068 comm="syz.3.325" path="/62" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 174.210447][ T30] audit: type=1400 audit(1754697324.103:308): avc: denied { read write } for pid=7116 comm="syz.4.340" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.294210][ T7121] fuse: Bad value for 'user_id' [ 174.299116][ T7121] fuse: Bad value for 'user_id' [ 174.312960][ T7118] Invalid source name [ 174.374778][ T30] audit: type=1400 audit(1754697324.103:309): avc: denied { open } for pid=7116 comm="syz.4.340" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.520610][ T30] audit: type=1400 audit(1754697324.163:310): avc: denied { ioctl } for pid=7116 comm="syz.4.340" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.748426][ T30] audit: type=1400 audit(1754697324.173:311): avc: denied { mount } for pid=7116 comm="syz.4.340" name="/" dev="pstore" ino=3502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 174.793978][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 174.917681][ T7130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=7130 comm=syz.3.344 [ 174.954344][ T30] audit: type=1400 audit(1754697324.173:312): avc: denied { mounton } for pid=7116 comm="syz.4.340" path="/70/file0" dev="pstore" ino=3502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 175.129935][ T30] audit: type=1400 audit(1754697324.373:313): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 176.520752][ T30] audit: type=1400 audit(1754697326.413:314): avc: denied { mount } for pid=7144 comm="syz.2.350" name="/" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 176.742495][ T30] audit: type=1400 audit(1754697326.413:315): avc: denied { search } for pid=7144 comm="syz.2.350" name="/" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.944578][ T30] audit: type=1400 audit(1754697326.413:316): avc: denied { search } for pid=7144 comm="syz.2.350" name="/" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.230902][ T30] audit: type=1400 audit(1754697326.413:317): avc: denied { read open } for pid=7144 comm="syz.2.350" path="/" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.701696][ T7154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.352'. [ 179.141158][ T7167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=7167 comm=syz.3.357 [ 182.057347][ T7187] netlink: 728 bytes leftover after parsing attributes in process `syz.3.364'. [ 182.076028][ T30] audit: type=1400 audit(1754697331.953:318): avc: denied { write } for pid=7184 comm="syz.3.364" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.118144][ T7186] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 182.160110][ T30] audit: type=1400 audit(1754697332.013:319): avc: denied { create } for pid=7184 comm="syz.3.364" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.186502][ T7186] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 182.194978][ T7186] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 182.202859][ T7186] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 188.409408][ T7185] sched: DL replenish lagged too much [ 195.287412][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.304510][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.190692][ T5167] Bluetooth: hci2: command 0x0406 tx timeout [ 200.209959][ T5167] Bluetooth: hci1: command 0x0406 tx timeout [ 200.300561][ T5849] Bluetooth: hci0: command tx timeout [ 200.515223][ T5862] Bluetooth: hci3: command tx timeout [ 295.651930][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 295.658921][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5216/1:b..l [ 295.667223][ C1] rcu: (detected by 1, t=10503 jiffies, g=15037, q=1159464 ncpus=2) [ 295.675291][ C1] task:udevd state:R running task stack:24904 pid:5216 tgid:5216 ppid:1 task_flags:0x400140 flags:0x00004002 [ 295.689673][ C1] Call Trace: [ 295.692955][ C1] [ 295.695888][ C1] __schedule+0x1190/0x5de0 [ 295.700410][ C1] ? find_held_lock+0x2b/0x80 [ 295.705112][ C1] ? __pfx___schedule+0x10/0x10 [ 295.710004][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 295.714984][ C1] ? mark_held_locks+0x49/0x80 [ 295.719765][ C1] preempt_schedule_irq+0x51/0x90 [ 295.724814][ C1] irqentry_exit+0x36/0x90 [ 295.729254][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.735236][ C1] RIP: 0010:stack_access_ok+0x1d/0x200 [ 295.740706][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 49 89 d4 4c 89 f2 55 <48> c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 80 3c 02 00 0f 85 94 [ 295.760492][ C1] RSP: 0018:ffffc9000fd3f400 EFLAGS: 00000283 [ 295.766568][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff913f7ede [ 295.774539][ C1] RDX: ffffc9000fd3f4f8 RSI: ffffc9000fd3f580 RDI: ffffc9000fd3f4f0 [ 295.782513][ C1] RBP: ffffc9000fd3f580 R08: 0000000000000001 R09: 0000000000000000 [ 295.790484][ C1] R10: 0000000000000001 R11: 00000000000061ed R12: 0000000000000008 [ 295.798467][ C1] R13: ffffc9000fd3f4f0 R14: ffffc9000fd3f4f8 R15: ffffc9000fd3f524 [ 295.806459][ C1] unwind_next_frame+0x15c5/0x20a0 [ 295.811580][ C1] ? arch_stack_walk+0x73/0x100 [ 295.816440][ C1] __unwind_start+0x45f/0x7f0 [ 295.821122][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 295.827285][ C1] arch_stack_walk+0x73/0x100 [ 295.831973][ C1] ? stack_trace_save+0x8e/0xc0 [ 295.836836][ C1] stack_trace_save+0x8e/0xc0 [ 295.841519][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 295.846897][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 295.851844][ C1] ? hpsa_scsi_queue_command+0x692/0x740 [ 295.857483][ C1] save_stack+0x160/0x1f0 [ 295.861810][ C1] ? __pfx_save_stack+0x10/0x10 [ 295.866668][ C1] ? page_ext_put+0x3e/0xd0 [ 295.871175][ C1] __reset_page_owner+0x84/0x1a0 [ 295.876118][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 295.881339][ C1] qlist_free_all+0x4d/0x120 [ 295.885933][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 295.891394][ C1] __kasan_slab_alloc+0x69/0x90 [ 295.896250][ C1] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 295.902149][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 295.907094][ C1] ? trace_kmem_cache_alloc+0x28/0xc0 [ 295.912477][ C1] kmalloc_reserve+0x18b/0x2c0 [ 295.917245][ C1] __alloc_skb+0x166/0x380 [ 295.921686][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 295.926641][ C1] ? cap_capable+0xb3/0x250 [ 295.931156][ C1] netlink_alloc_large_skb+0x69/0x130 [ 295.936553][ C1] netlink_sendmsg+0x6a1/0xdd0 [ 295.941324][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.946619][ C1] ____sys_sendmsg+0xa95/0xc70 [ 295.951389][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 295.956863][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.962151][ C1] ? fput_close_sync+0x118/0x210 [ 295.967130][ C1] ___sys_sendmsg+0x134/0x1d0 [ 295.971839][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.977045][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 295.982027][ C1] ? __might_fault+0x13b/0x190 [ 295.986808][ C1] __sys_sendmsg+0x16d/0x220 [ 295.991422][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.996574][ C1] do_syscall_64+0xcd/0x4c0 [ 296.001090][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.006990][ C1] RIP: 0033:0x7f4b8b8a7407 [ 296.011406][ C1] RSP: 002b:00007fffb7fb2c60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 296.019824][ C1] RAX: ffffffffffffffda RBX: 00007f4b8bf68880 RCX: 00007f4b8b8a7407 [ 296.027803][ C1] RDX: 0000000000000000 RSI: 00007fffb7fb2cc0 RDI: 0000000000000004 [ 296.035777][ C1] RBP: 000055ac6e281620 R08: 0000000000000000 R09: 0000000000000000 [ 296.043750][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000093 [ 296.051720][ C1] R13: 000055ac6e033d80 R14: 0000000000000000 R15: 0000000000000000 [ 296.059712][ C1] [ 296.062728][ C1] rcu: rcu_preempt kthread starved for 9283 jiffies! g15037 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 296.073830][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 296.083792][ C1] rcu: RCU grace-period kthread stack dump: [ 296.089669][ C1] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 296.103184][ C1] Call Trace: [ 296.106466][ C1] [ 296.109402][ C1] __schedule+0x1190/0x5de0 [ 296.113948][ C1] ? __pfx___schedule+0x10/0x10 [ 296.118815][ C1] ? find_held_lock+0x2b/0x80 [ 296.123501][ C1] ? schedule+0x2d7/0x3a0 [ 296.127842][ C1] schedule+0xe7/0x3a0 [ 296.131919][ C1] schedule_timeout+0x123/0x290 [ 296.136768][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 296.142151][ C1] ? __pfx_process_timeout+0x10/0x10 [ 296.147464][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 296.153278][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 296.158765][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 296.163542][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 296.168826][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.174037][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 296.178976][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 296.183832][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 296.189652][ C1] rcu_gp_kthread+0x270/0x380 [ 296.194328][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 296.199535][ C1] ? rcu_is_watching+0x12/0xc0 [ 296.204309][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.209524][ C1] ? __kthread_parkme+0x19e/0x250 [ 296.214563][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 296.219776][ C1] kthread+0x3c5/0x780 [ 296.223856][ C1] ? __pfx_kthread+0x10/0x10 [ 296.228458][ C1] ? rcu_is_watching+0x12/0xc0 [ 296.233228][ C1] ? __pfx_kthread+0x10/0x10 [ 296.237828][ C1] ret_from_fork+0x5d4/0x6f0 [ 296.242421][ C1] ? __pfx_kthread+0x10/0x10 [ 296.247013][ C1] ret_from_fork_asm+0x1a/0x30 [ 296.251797][ C1] [ 296.254812][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 296.261132][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 296.272425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.282571][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 296.287796][ C1] Code: f7 3d 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 37 13 0f 0f 82 74 02 00 00 8b 35 2a 69 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 f6 3d 12 0f 85 c7 02 00 00 48 83 c4 [ 296.307414][ C1] RSP: 0018:ffffc90000a07da0 EFLAGS: 00000206 [ 296.313493][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c1160 RCX: 000000007f1fed10 [ 296.321467][ C1] RDX: 0000000000000000 RSI: ffffffff8de29498 RDI: ffffffff8c161180 [ 296.329442][ C1] RBP: 0000000000000002 R08: 03813abc02fcf7df R09: 0000000000000000 [ 296.337502][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 296.345473][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.353444][ C1] FS: 0000000000000000(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 296.362386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.368972][ C1] CR2: 00007f74308e6865 CR3: 0000000078839000 CR4: 00000000003526f0 [ 296.376954][ C1] Call Trace: [ 296.380234][ C1] [ 296.383169][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 296.388381][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.394569][ C1] unwind_next_frame+0xd1/0x20a0 [ 296.399513][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 296.404632][ C1] ? nf_hook_slow+0xbe/0x200 [ 296.409238][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.415400][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.421585][ C1] arch_stack_walk+0x94/0x100 [ 296.426277][ C1] ? nf_hook_slow+0xbe/0x200 [ 296.430884][ C1] stack_trace_save+0x8e/0xc0 [ 296.435571][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 296.440957][ C1] ? kasan_save_track+0x14/0x30 [ 296.445809][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 296.450576][ C1] ref_tracker_alloc+0x1d2/0x5b0 [ 296.455520][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 296.460980][ C1] ? dst_init+0xda/0x580 [ 296.465228][ C1] ? dst_alloc+0xbb/0x1a0 [ 296.469580][ C1] ? rt_dst_alloc+0x35/0x3a0 [ 296.474168][ C1] ? ip_route_output_key_hash_rcu+0x880/0x28c0 [ 296.480330][ C1] ? ip_route_output_key_hash+0x137/0x2e0 [ 296.486058][ C1] ? ip_route_output_flow+0x27/0x150 [ 296.491347][ C1] ? ip_route_me_harder+0x55d/0x12e0 [ 296.496649][ C1] ? synproxy_send_tcp.isra.0+0x2fa/0x630 [ 296.502367][ C1] ? synproxy_send_client_synack+0x6f6/0x8f0 [ 296.508360][ C1] ? nft_synproxy_do_eval+0xa63/0xd80 [ 296.513736][ C1] ? nft_do_chain+0x2e6/0x1920 [ 296.518500][ C1] ? nft_do_chain_inet+0x18a/0x340 [ 296.523611][ C1] ? nf_hook_slow+0xbe/0x200 [ 296.528218][ C1] ? rcu_is_watching+0x12/0xc0 [ 296.533004][ C1] dst_init+0xda/0x580 [ 296.537086][ C1] dst_alloc+0xbb/0x1a0 [ 296.541256][ C1] rt_dst_alloc+0x35/0x3a0 [ 296.545678][ C1] ip_route_output_key_hash_rcu+0x880/0x28c0 [ 296.551678][ C1] ip_route_output_key_hash+0x137/0x2e0 [ 296.557234][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 296.563313][ C1] ? lock_acquire+0x179/0x350 [ 296.568006][ C1] ? find_held_lock+0x2b/0x80 [ 296.572692][ C1] ip_route_output_flow+0x27/0x150 [ 296.577828][ C1] ip_route_me_harder+0x55d/0x12e0 [ 296.582963][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 296.588520][ C1] ? rcu_is_watching+0x12/0xc0 [ 296.593297][ C1] ? trace_kmem_cache_alloc+0x28/0xc0 [ 296.598688][ C1] ? __pfx_cookie_hash+0x10/0x10 [ 296.603637][ C1] synproxy_send_tcp.isra.0+0x2fa/0x630 [ 296.609188][ C1] synproxy_send_client_synack+0x6f6/0x8f0 [ 296.615002][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 296.621333][ C1] ? net_generic+0x178/0x2a0 [ 296.625937][ C1] nft_synproxy_do_eval+0xa63/0xd80 [ 296.631152][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 296.636886][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 296.641913][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 296.647373][ C1] nft_do_chain+0x2e6/0x1920 [ 296.651992][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 296.657030][ C1] ? __pfx_chacha_block_generic+0x10/0x10 [ 296.662767][ C1] ? nf_conntrack_in+0x8b0/0x1930 [ 296.667804][ C1] nft_do_chain_inet+0x18a/0x340 [ 296.672741][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 296.678215][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 296.683507][ C1] ? lock_acquire+0x179/0x350 [ 296.688202][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 296.693657][ C1] nf_hook_slow+0xbe/0x200 [ 296.698091][ C1] nf_hook.constprop.0+0x422/0x750 [ 296.703216][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 296.709209][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 296.714861][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 296.719986][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 296.725983][ C1] ip_local_deliver+0x169/0x1f0 [ 296.730845][ C1] ip_rcv+0x2e0/0x600 [ 296.734833][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 296.739341][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 296.745243][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 296.751676][ C1] ? lock_acquire+0x179/0x350 [ 296.756382][ C1] ? process_backlog+0x3f0/0x15e0 [ 296.761428][ C1] __netif_receive_skb+0x1d/0x160 [ 296.766464][ C1] process_backlog+0x442/0x15e0 [ 296.771331][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 296.776709][ C1] ? rcu_is_watching+0x12/0xc0 [ 296.781484][ C1] net_rx_action+0xa9f/0xfe0 [ 296.786095][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 296.791230][ C1] ? tmigr_handle_remote+0x132/0x380 [ 296.796537][ C1] ? run_timer_base+0x121/0x190 [ 296.801405][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 296.806622][ C1] handle_softirqs+0x216/0x8e0 [ 296.811400][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 296.816699][ C1] __irq_exit_rcu+0x109/0x170 [ 296.821388][ C1] irq_exit_rcu+0x9/0x30 [ 296.825647][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 296.831303][ C1] [ 296.834235][ C1] [ 296.837164][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.843150][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 296.848798][ C1] Code: 2c 63 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 52 17 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 296.868410][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 296.874484][ C1] RAX: 0000000000e09935 RBX: 0000000000000001 RCX: ffffffff8b92bc29 [ 296.882460][ C1] RDX: 0000000000000000 RSI: ffffffff8de4e889 RDI: ffffffff8c161180 [ 296.890427][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6655 [ 296.898396][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 296.906368][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab0090 R15: 0000000000000000 [ 296.914350][ C1] ? ct_kernel_exit+0x139/0x190 [ 296.919229][ C1] default_idle+0x13/0x20 [ 296.923561][ C1] default_idle_call+0x6d/0xb0 [ 296.928326][ C1] do_idle+0x391/0x510 [ 296.932408][ C1] ? __pfx_do_idle+0x10/0x10 [ 296.937024][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 296.942235][ C1] cpu_startup_entry+0x4f/0x60 [ 296.947021][ C1] start_secondary+0x21d/0x2b0 [ 296.951821][ C1] ? __pfx_start_secondary+0x10/0x10 [ 296.957133][ C1] common_startup_64+0x13e/0x148 [ 296.962092][ C1]