last executing test programs: 28.846957274s ago: executing program 2 (id=24): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x40040, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x4810) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x40}}, 0x0) 28.456343293s ago: executing program 2 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e8, 0x3b8, 0x0, 0x2e8, 0x3b8, 0x2e8, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0xffff, 0xfffe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@dst={{0x48}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) 27.357956979s ago: executing program 3 (id=30): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 26.432001665s ago: executing program 2 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r2, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) connect$unix(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setpriority(0x2, 0x0, 0x0) 26.39796367s ago: executing program 3 (id=34): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r3, 0x92c, 0x2, r2}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r3, 0x0, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) 26.216039575s ago: executing program 2 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x2000000c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 25.97161847s ago: executing program 3 (id=38): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004054}, 0x80) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioprio_get$pid(0x3, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r8 = getpid() r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r7, @ANYBLOB="08001c00", @ANYRES32=r8], 0x24}}, 0x0) 24.018868833s ago: executing program 2 (id=43): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa0100fe}, {@multicast1, 0x3}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010101, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote, 0xfffffffe}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 24.018304867s ago: executing program 3 (id=44): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x95, &(0x7f0000000140)=""/149, 0x41000, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000680)=[{0x0, 0x5, 0x0, 0x2}, {0x0, 0x5}], 0x10, 0x40, @void, @value}, 0x90) 21.287983919s ago: executing program 3 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 19.737864922s ago: executing program 3 (id=49): syz_open_dev$vim2m(0x0, 0x100005, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000010c0)={'bond0\x00', &(0x7f0000000fc0)=@ethtool_drvinfo={0x3, "1e44b5bec4946f57feaf593e7675ae1c14a57bfa1a7420b4c7c38815e21bd55d", "7f1eb60c71dc4dcd8bef1108c4ecf87dafc2b7b9ced00d6f36aefe677cd647aa", "05796d26cec5320e44397b89b5d2505866d67aca07d2235916691bb7a53621b1", "feba96d8e88c9896ec52d971f4d134ad5d6d6133cd03282adfbcd356cef6d27d", "16921dff030000000000002e65ee840210e74f8e4e8c083a75c5659aad244826", "bd60a23b3c1ce9cd8e15bac1"}}) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r3, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 19.595709214s ago: executing program 2 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000008100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.416480141s ago: executing program 4 (id=64): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x88, 0xdb5f, 0x40, @loopback, @private1, 0x10, 0x798, 0xb99, 0xfffffffc}}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_4={0x3, 0x0, 0x0, "0577f5d2"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x183200) close_range(r3, 0xffffffffffffffff, 0x0) 10.949114915s ago: executing program 0 (id=71): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000300)={0x7, 0x7, 0x4}, &(0x7f0000000340)=0x28) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4d, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 9.834837665s ago: executing program 0 (id=72): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 9.334259839s ago: executing program 4 (id=74): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair(0x10, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r3, 0x0, 0xd88d02a0}, 0x38) 9.33364037s ago: executing program 0 (id=75): syz_usbip_server_init(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) syz_usbip_server_init(0x1) 7.968737564s ago: executing program 4 (id=77): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 6.653683977s ago: executing program 4 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r3) 6.51055745s ago: executing program 0 (id=79): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) 5.315223576s ago: executing program 1 (id=80): io_setup(0x6, &(0x7f00000002c0)) io_setup(0x40, &(0x7f0000000140)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}}) io_setup(0x40, &(0x7f0000000140)) io_setup(0x2, &(0x7f0000000240)) io_setup(0x4, &(0x7f0000001880)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100", 0x1b) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x1, 0x10, 0x9, 0xce1, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x2, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r2], 0x24}}, 0x0) 5.106709938s ago: executing program 0 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x36}, &(0x7f0000000440)='./file0\x00', 0x18}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x4ac6, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 3.886715132s ago: executing program 4 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.563944673s ago: executing program 0 (id=83): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000280)=',\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0xedf, &(0x7f0000001740)=0x0) io_submit(r2, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 2.682820234s ago: executing program 4 (id=84): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f00000014c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)="03", 0x1}], 0x1}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fcntl$dupfd(r2, 0x0, r2) recvmmsg(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/124, 0x7a}], 0x1}}], 0x400000000000358, 0x40000142, 0x0) 2.404359695s ago: executing program 1 (id=85): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x894c, 0x0) 2.237207418s ago: executing program 1 (id=86): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe09) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0x3}, 0x2) 1.878797969s ago: executing program 1 (id=87): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x101000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f00000000c0)=0xa) 697.012575ms ago: executing program 1 (id=88): fsmount(0xffffffffffffffff, 0x0, 0x70) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') setns(r3, 0x24020000) syz_clone(0x5d000120, 0x0, 0x3, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=89): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 71.202766][ T30] audit: type=1400 audit(1728358597.138:88): avc: denied { mounton } for pid=5211 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 71.208719][ T5211] cgroup: Unknown subsys name 'net' [ 71.230857][ T30] audit: type=1400 audit(1728358597.138:89): avc: denied { mount } for pid=5211 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.253238][ T30] audit: type=1400 audit(1728358597.178:90): avc: denied { unmount } for pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.410534][ T5211] cgroup: Unknown subsys name 'cpuset' [ 71.419278][ T5211] cgroup: Unknown subsys name 'rlimit' [ 71.551339][ T30] audit: type=1400 audit(1728358597.488:91): avc: denied { setattr } for pid=5211 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.574767][ T30] audit: type=1400 audit(1728358597.488:92): avc: denied { create } for pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.610808][ T30] audit: type=1400 audit(1728358597.488:93): avc: denied { write } for pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.631526][ T30] audit: type=1400 audit(1728358597.488:94): avc: denied { read } for pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.651863][ T30] audit: type=1400 audit(1728358597.518:95): avc: denied { mounton } for pid=5211 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 71.676920][ T30] audit: type=1400 audit(1728358597.518:96): avc: denied { mount } for pid=5211 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 71.700282][ T30] audit: type=1400 audit(1728358597.528:97): avc: denied { read } for pid=4888 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 71.714177][ T5214] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 73.089045][ T5211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.607257][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 76.607292][ T30] audit: type=1400 audit(1728358602.548:103): avc: denied { create } for pid=5221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.640173][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.646708][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.662063][ T30] audit: type=1400 audit(1728358602.558:104): avc: denied { read write } for pid=5222 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.709859][ T30] audit: type=1400 audit(1728358602.558:105): avc: denied { open } for pid=5222 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.752264][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.759190][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.762345][ T30] audit: type=1400 audit(1728358602.598:106): avc: denied { ioctl } for pid=5222 comm="syz-executor" path="socket:[4222]" dev="sockfs" ino=4222 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.769507][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.798745][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.806741][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.815003][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.824298][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.832355][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.839984][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.848001][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.856597][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.864868][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.872382][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.880639][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.884073][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.896569][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.904146][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.906529][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.914138][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.925757][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.926351][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.940787][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.947927][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.948571][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.960129][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.966759][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.970894][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.988604][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.997276][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.005855][ T30] audit: type=1400 audit(1728358602.908:107): avc: denied { read } for pid=5225 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.028740][ T30] audit: type=1400 audit(1728358602.908:108): avc: denied { open } for pid=5225 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.041060][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.052212][ T30] audit: type=1400 audit(1728358602.908:109): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.386603][ T30] audit: type=1400 audit(1728358603.318:110): avc: denied { module_request } for pid=5232 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.456806][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 77.582657][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 77.633532][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 77.693569][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 77.763957][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.772162][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.781841][ T5232] bridge_slave_0: entered allmulticast mode [ 77.789148][ T5232] bridge_slave_0: entered promiscuous mode [ 77.798147][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.805254][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.812470][ T5232] bridge_slave_1: entered allmulticast mode [ 77.819546][ T5232] bridge_slave_1: entered promiscuous mode [ 77.839242][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.846434][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.853629][ T5225] bridge_slave_0: entered allmulticast mode [ 77.860650][ T5225] bridge_slave_0: entered promiscuous mode [ 77.869055][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.876559][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.883697][ T5225] bridge_slave_1: entered allmulticast mode [ 77.891240][ T5225] bridge_slave_1: entered promiscuous mode [ 77.939867][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 78.002008][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.013630][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.024739][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.049291][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.056640][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.063788][ T5230] bridge_slave_0: entered allmulticast mode [ 78.070851][ T5230] bridge_slave_0: entered promiscuous mode [ 78.082996][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.090636][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.098022][ T5230] bridge_slave_1: entered allmulticast mode [ 78.104694][ T5230] bridge_slave_1: entered promiscuous mode [ 78.129866][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.175634][ T5225] team0: Port device team_slave_0 added [ 78.184125][ T5225] team0: Port device team_slave_1 added [ 78.201194][ T5232] team0: Port device team_slave_0 added [ 78.229117][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.247041][ T5232] team0: Port device team_slave_1 added [ 78.262173][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.269629][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.279755][ T5222] bridge_slave_0: entered allmulticast mode [ 78.287023][ T5222] bridge_slave_0: entered promiscuous mode [ 78.301114][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.336409][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.343401][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.369457][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.382561][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.390228][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.416533][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.433637][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.441628][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.449119][ T5222] bridge_slave_1: entered allmulticast mode [ 78.455873][ T5222] bridge_slave_1: entered promiscuous mode [ 78.475114][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.482412][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.508395][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.557102][ T5230] team0: Port device team_slave_0 added [ 78.563107][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.570330][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.577579][ T5221] bridge_slave_0: entered allmulticast mode [ 78.584273][ T5221] bridge_slave_0: entered promiscuous mode [ 78.592391][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.599511][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.625932][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.665453][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.676586][ T5230] team0: Port device team_slave_1 added [ 78.684019][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.693604][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.701247][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.708714][ T5221] bridge_slave_1: entered allmulticast mode [ 78.715417][ T5221] bridge_slave_1: entered promiscuous mode [ 78.755006][ T5225] hsr_slave_0: entered promiscuous mode [ 78.761508][ T5225] hsr_slave_1: entered promiscuous mode [ 78.805715][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.818093][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.828012][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.834973][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.861329][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.884699][ T5222] team0: Port device team_slave_0 added [ 78.907884][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.914949][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.941474][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.964299][ T5222] team0: Port device team_slave_1 added [ 78.986420][ T5221] team0: Port device team_slave_0 added [ 79.002508][ T5232] hsr_slave_0: entered promiscuous mode [ 79.009206][ T5232] hsr_slave_1: entered promiscuous mode [ 79.015345][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.023601][ T5232] Cannot create hsr debugfs directory [ 79.027277][ T5235] Bluetooth: hci2: command tx timeout [ 79.057147][ T5221] team0: Port device team_slave_1 added [ 79.106469][ T5243] Bluetooth: hci4: command tx timeout [ 79.106738][ T5229] Bluetooth: hci1: command tx timeout [ 79.112183][ T5243] Bluetooth: hci0: command tx timeout [ 79.118004][ T5235] Bluetooth: hci3: command tx timeout [ 79.142299][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.149509][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.175516][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.188298][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.195263][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.221358][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.244921][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.251969][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.278113][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.290637][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.297730][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.323655][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.354855][ T5230] hsr_slave_0: entered promiscuous mode [ 79.361503][ T5230] hsr_slave_1: entered promiscuous mode [ 79.368367][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.375924][ T5230] Cannot create hsr debugfs directory [ 79.463488][ T5222] hsr_slave_0: entered promiscuous mode [ 79.470109][ T5222] hsr_slave_1: entered promiscuous mode [ 79.476980][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.484567][ T5222] Cannot create hsr debugfs directory [ 79.561248][ T5221] hsr_slave_0: entered promiscuous mode [ 79.568352][ T5221] hsr_slave_1: entered promiscuous mode [ 79.574458][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.582299][ T5221] Cannot create hsr debugfs directory [ 79.802897][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.833980][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.858739][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.870203][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.907183][ T5232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.923640][ T5232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.933258][ T5232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.950625][ T5232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.018477][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.029383][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.052133][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.078288][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.142007][ T5221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.155735][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.167749][ T5221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.178306][ T5221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.196880][ T5221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.212841][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.301699][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.309047][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.325847][ T5222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.338455][ T5222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.359997][ T2482] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.367145][ T2482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.393484][ T5222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.403614][ T5222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.454461][ T5225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.489575][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.541120][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.558722][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.573042][ T30] audit: type=1400 audit(1728358606.508:111): avc: denied { sys_module } for pid=5225 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.645362][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.652635][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.664370][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.671525][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.695404][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.740864][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.778444][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.785680][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.803622][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.822949][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.830116][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.844399][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.851570][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.874443][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.881609][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.972363][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.988528][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.060597][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.106706][ T5235] Bluetooth: hci2: command tx timeout [ 81.159612][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.166913][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.187431][ T5235] Bluetooth: hci0: command tx timeout [ 81.193006][ T5235] Bluetooth: hci3: command tx timeout [ 81.200935][ T5235] Bluetooth: hci1: command tx timeout [ 81.204429][ T5243] Bluetooth: hci4: command tx timeout [ 81.273807][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.281064][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.303657][ T5225] veth0_vlan: entered promiscuous mode [ 81.354327][ T5225] veth1_vlan: entered promiscuous mode [ 81.370474][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.480070][ T5225] veth0_macvtap: entered promiscuous mode [ 81.490766][ T5225] veth1_macvtap: entered promiscuous mode [ 81.502256][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.530189][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.603002][ T5232] veth0_vlan: entered promiscuous mode [ 81.619310][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.644919][ T5232] veth1_vlan: entered promiscuous mode [ 81.668737][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.702922][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.712570][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.722044][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.731493][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.760194][ T5221] veth0_vlan: entered promiscuous mode [ 81.783628][ T5230] veth0_vlan: entered promiscuous mode [ 81.838332][ T5221] veth1_vlan: entered promiscuous mode [ 81.847175][ T5230] veth1_vlan: entered promiscuous mode [ 81.888599][ T5232] veth0_macvtap: entered promiscuous mode [ 81.901030][ T5232] veth1_macvtap: entered promiscuous mode [ 81.941417][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.975671][ T5230] veth0_macvtap: entered promiscuous mode [ 82.016389][ T5221] veth0_macvtap: entered promiscuous mode [ 82.049736][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.063563][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.077067][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.094219][ T5230] veth1_macvtap: entered promiscuous mode [ 82.117751][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.125769][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.127616][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.145291][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.159666][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.170496][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.182014][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.191191][ T5221] veth1_macvtap: entered promiscuous mode [ 82.232202][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.244282][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.255724][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.263688][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.274594][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.285496][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.297787][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.310400][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.338685][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.349091][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.358121][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.367212][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.385025][ T5232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.395664][ T5232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.411020][ T5232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.423177][ T5232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.438884][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.449633][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.462703][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.473848][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.484053][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.494604][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.508093][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.518979][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.531455][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.534579][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.550811][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.560755][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.572422][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.583415][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.594596][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.607774][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.628761][ T30] audit: type=1400 audit(1728358608.568:112): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/root/syzkaller.xGyk5V/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 82.661295][ T30] audit: type=1400 audit(1728358608.568:113): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.681968][ T5221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.692563][ T30] audit: type=1400 audit(1728358608.568:114): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/root/syzkaller.xGyk5V/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.702390][ T5221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.724381][ T30] audit: type=1400 audit(1728358608.568:115): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.728306][ T5221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.758570][ T5221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.759381][ T30] audit: type=1400 audit(1728358608.568:116): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/root/syzkaller.xGyk5V/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 82.813965][ T30] audit: type=1400 audit(1728358608.568:117): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/root/syzkaller.xGyk5V/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 82.832571][ T5225] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.851607][ T30] audit: type=1400 audit(1728358608.568:118): avc: denied { unmount } for pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.887733][ T30] audit: type=1400 audit(1728358608.598:119): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.900626][ T5222] veth0_vlan: entered promiscuous mode [ 82.916403][ T30] audit: type=1400 audit(1728358608.598:120): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.939698][ T30] audit: type=1400 audit(1728358608.598:121): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.025062][ T5222] veth1_vlan: entered promiscuous mode [ 83.111615][ T5310] IPv4: Oversized IP packet from 172.20.20.10 [ 83.119327][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 83.126213][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 83.173657][ T5310] IPv4: Oversized IP packet from 172.20.20.10 [ 83.180334][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 83.186678][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 83.186895][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.199534][ T5310] IPv4: Oversized IP packet from 172.20.20.10 [ 83.201017][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.207272][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 83.214678][ T5243] Bluetooth: hci2: command tx timeout [ 83.220896][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 83.232437][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.240383][ T5222] veth0_macvtap: entered promiscuous mode [ 83.247395][ T5310] IPv4: Oversized IP packet from 172.20.20.10 [ 83.253671][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.267237][ T5243] Bluetooth: hci4: command tx timeout [ 83.276393][ T5243] Bluetooth: hci1: command tx timeout [ 83.281842][ T5243] Bluetooth: hci3: command tx timeout [ 83.284120][ T5235] Bluetooth: hci0: command tx timeout [ 83.295979][ T5222] veth1_macvtap: entered promiscuous mode [ 83.371885][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.390735][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.401111][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.411680][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.421539][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.432748][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.442643][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.453372][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.466709][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.475682][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.489482][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.600533][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.611836][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.622319][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.633103][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.643064][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.653577][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.663540][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.665397][ T5314] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 83.677183][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.691580][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.728009][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.737488][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.745354][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.751105][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.755355][ T5222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.770838][ T5222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.780103][ T5222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.790209][ T5222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.849792][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.863029][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.052261][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.079611][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.167079][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.175020][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.420720][ T1174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.423169][ T5324] binder: 5323:5324 unknown command 0 [ 84.435688][ T5324] binder: 5323:5324 ioctl c0306201 20000a80 returned -22 [ 84.506314][ T5326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.633008][ T1174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.676198][ T1174] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 84.685330][ T1174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.713610][ T1174] usb 3-1: config 0 descriptor?? [ 84.842733][ T5330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.174074][ T1174] appletouch 3-1:0.0: Geyser mode initialized. [ 85.334731][ T5344] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 85.344167][ T5344] VFS: Can't find a romfs filesystem on dev nullb0. [ 85.344167][ T5344] [ 86.139104][ T1174] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 86.152652][ T5235] Bluetooth: hci2: command tx timeout [ 86.158894][ T5235] Bluetooth: hci3: command tx timeout [ 86.164397][ T5235] Bluetooth: hci1: command tx timeout [ 86.170383][ T5235] Bluetooth: hci4: command tx timeout [ 86.175846][ T5235] Bluetooth: hci0: command tx timeout [ 86.957549][ T25] cfg80211: failed to load regulatory.db [ 88.051116][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 88.051137][ T30] audit: type=1400 audit(1728358613.988:167): avc: denied { bind } for pid=5348 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.335203][ T30] audit: type=1400 audit(1728358613.988:168): avc: denied { name_bind } for pid=5348 comm="syz.0.14" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.357916][ T30] audit: type=1400 audit(1728358613.988:169): avc: denied { node_bind } for pid=5348 comm="syz.0.14" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 88.379990][ T30] audit: type=1400 audit(1728358614.038:170): avc: denied { write } for pid=5348 comm="syz.0.14" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.402307][ T30] audit: type=1400 audit(1728358614.048:171): avc: denied { connect } for pid=5348 comm="syz.0.14" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.423790][ T30] audit: type=1400 audit(1728358614.048:172): avc: denied { name_connect } for pid=5348 comm="syz.0.14" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 90.157829][ T30] audit: type=1400 audit(1728358615.568:173): avc: denied { create } for pid=5355 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.245024][ T5311] usb 3-1: USB disconnect, device number 2 [ 91.503058][ T5311] appletouch 3-1:0.0: input: appletouch disconnected [ 91.695038][ T5374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.892552][ T5378] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 91.901049][ T5378] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 91.909520][ T5378] ALSA: mixer_oss: invalid OSS volume 'lg' [ 91.915455][ T5378] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 91.923914][ T5378] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 91.932317][ T5378] ALSA: mixer_oss: invalid OSS volume '' [ 91.938151][ T5378] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 91.945951][ T5378] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 91.954378][ T5378] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 91.963871][ T5378] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 91.972326][ T5378] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 91.979814][ T5378] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 92.747888][ T5371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.998398][ T30] audit: type=1400 audit(1728358618.918:174): avc: denied { read } for pid=5380 comm="syz.3.23" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 93.065809][ T30] audit: type=1400 audit(1728358618.968:175): avc: denied { open } for pid=5380 comm="syz.3.23" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 93.156376][ T9] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 93.177353][ T30] audit: type=1400 audit(1728358618.988:176): avc: denied { read } for pid=5382 comm="syz.2.24" name="rtc0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.200105][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.207504][ T30] audit: type=1400 audit(1728358618.988:177): avc: denied { open } for pid=5382 comm="syz.2.24" path="/dev/rtc0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.234077][ T30] audit: type=1400 audit(1728358618.998:178): avc: denied { create } for pid=5382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.254546][ T30] audit: type=1400 audit(1728358619.028:179): avc: denied { write } for pid=5382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.332091][ T30] audit: type=1400 audit(1728358619.028:180): avc: denied { nlmsg_write } for pid=5382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.352568][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.056537][ T30] audit: type=1400 audit(1728358619.048:181): avc: denied { write } for pid=5382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.078522][ T30] audit: type=1400 audit(1728358619.098:182): avc: denied { read write } for pid=5380 comm="syz.3.23" name="video1" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.102540][ T30] audit: type=1400 audit(1728358619.108:183): avc: denied { open } for pid=5380 comm="syz.3.23" path="/dev/video1" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.127161][ T30] audit: type=1400 audit(1728358619.158:184): avc: denied { ioctl } for pid=5380 comm="syz.3.23" path="/dev/video1" dev="devtmpfs" ino=848 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.168374][ T9] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 94.176794][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 94.184924][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.215436][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 94.224436][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 94.245707][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 94.278808][ T9] usb 1-1: string descriptor 0 read error: -22 [ 94.292777][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 94.312210][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.325502][ T9] usb 1-1: config 0 descriptor?? [ 94.389194][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 94.435971][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 94.682267][ T5405] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 95.288405][ T5301] usb 1-1: USB disconnect, device number 2 [ 95.393898][ T5413] Illegal XDP return value 792442328 on prog (id 9) dev N/A, expect packet loss! [ 97.702044][ T5301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.939953][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 98.103002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.172880][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 98.205352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.238658][ T5301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.303159][ T5301] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.341170][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.477121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.354859][ T5301] usb 2-1: config 0 descriptor?? [ 99.369227][ T5432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.387337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.586344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.946351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.106711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 100.150025][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.158208][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.176227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.208821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.225684][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 100.225702][ T30] audit: type=1400 audit(1728358626.158:228): avc: denied { name_bind } for pid=5447 comm="syz.4.45" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 100.267899][ T5438] bridge0: entered allmulticast mode [ 100.293490][ T30] audit: type=1400 audit(1728358626.218:229): avc: denied { node_bind } for pid=5447 comm="syz.4.45" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 100.347531][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.354282][ T5301] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 100.354646][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.370723][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.371942][ T5301] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.377914][ T5450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.455825][ T30] audit: type=1400 audit(1728358626.388:230): avc: denied { write } for pid=5445 comm="syz.2.43" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.482028][ T5450] bridge0: entered promiscuous mode [ 100.573589][ T5446] kvm: emulating exchange as write [ 101.550977][ T30] audit: type=1400 audit(1728358626.828:231): avc: denied { create } for pid=5456 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.574684][ T30] audit: type=1400 audit(1728358626.838:232): avc: denied { bind } for pid=5456 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.594389][ T30] audit: type=1400 audit(1728358626.848:233): avc: denied { listen } for pid=5456 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.962253][ T5311] usb 2-1: USB disconnect, device number 2 [ 102.037612][ T30] audit: type=1400 audit(1728358627.968:234): avc: denied { create } for pid=5464 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.075697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.130639][ T30] audit: type=1400 audit(1728358628.058:235): avc: denied { bind } for pid=5464 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.203395][ C0] net_ratelimit: 86 callbacks suppressed [ 102.203420][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 102.213841][ T30] audit: type=1400 audit(1728358628.068:236): avc: denied { setopt } for pid=5464 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.384789][ T5474] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.469522][ T5476] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.522673][ T5476] kvm: pic: non byte read [ 105.252313][ T30] audit: type=1400 audit(1728358630.408:237): avc: denied { ioctl } for pid=5492 comm="syz.4.57" path="/dev/vhost-net" dev="devtmpfs" ino=1082 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.277562][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.691251][ T30] audit: type=1326 audit(1728358631.608:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000 [ 105.714398][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.767562][ T30] audit: type=1326 audit(1728358631.608:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000 [ 105.824731][ T30] audit: type=1326 audit(1728358631.608:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000 [ 105.847927][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.864206][ T30] audit: type=1326 audit(1728358631.608:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000 [ 105.898730][ T30] audit: type=1326 audit(1728358631.608:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000 [ 105.958257][ T30] audit: type=1326 audit(1728358631.608:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000 [ 105.981555][ T30] audit: type=1326 audit(1728358631.608:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000 [ 106.005127][ T30] audit: type=1326 audit(1728358631.608:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000 [ 106.028738][ T30] audit: type=1326 audit(1728358631.608:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000 [ 107.158287][ T5514] process 'syz.1.62' launched './file1' with NULL argv: empty string added [ 108.616196][ T5311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.692379][ T5311] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.730610][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.827383][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.870737][ T5311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.921544][ T5311] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.956239][ T5311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.015522][ T5311] usb 5-1: config 0 descriptor?? [ 110.544028][ T5311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 110.581910][ T5311] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 110.607988][ T5311] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 110.814519][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 110.814540][ T30] audit: type=1400 audit(1728358636.748:262): avc: denied { write } for pid=5521 comm="syz.4.64" name="hiddev0" dev="devtmpfs" ino=2350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.055952][ T30] audit: type=1400 audit(1728358637.988:263): avc: denied { read } for pid=5554 comm="syz.0.72" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.144416][ T30] audit: type=1400 audit(1728358637.988:264): avc: denied { open } for pid=5554 comm="syz.0.72" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.201499][ T30] audit: type=1400 audit(1728358637.998:265): avc: denied { ioctl } for pid=5554 comm="syz.0.72" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.439878][ T5559] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 112.446736][ T5559] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.462101][ T30] audit: type=1400 audit(1728358637.998:266): avc: denied { create } for pid=5554 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.741753][ T5311] usb 5-1: USB disconnect, device number 2 [ 113.716692][ T5559] vhci_hcd vhci_hcd.0: Device attached [ 113.899942][ T5278] vhci_hcd: vhci_device speed not set [ 113.907637][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.940334][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.966262][ T5278] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 114.098360][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.159704][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.168158][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.175701][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.184388][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.191956][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 114.200664][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.328379][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.363657][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.372797][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.390212][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.403694][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.412720][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.429309][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.440991][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.448631][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 114.455847][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.535147][ T1122] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.591520][ T30] audit: type=1400 audit(1728358639.868:267): avc: denied { setopt } for pid=5570 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.610641][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.635326][ T30] audit: type=1400 audit(1728358640.408:268): avc: denied { mounton } for pid=5569 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 114.689221][ T1122] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.705444][ T5559] vhci_hcd vhci_hcd.0: port 0 already used [ 114.816342][ T30] audit: type=1400 audit(1728358640.738:269): avc: denied { bind } for pid=5570 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.865401][ T1122] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.928467][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 115.098174][ T5560] vhci_hcd: connection reset by peer [ 115.113064][ T1122] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.144753][ T81] vhci_hcd: stop threads [ 115.150857][ T81] vhci_hcd: release socket [ 115.180297][ T81] vhci_hcd: disconnect device [ 116.436662][ T5587] tty tty21: ldisc open failed (-12), clearing slot 20 [ 116.469900][ T5588] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 116.559165][ T30] audit: type=1400 audit(1728358642.488:270): avc: denied { map_create } for pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.578082][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.584519][ T5233] Bluetooth: hci5: command tx timeout [ 116.657215][ T30] audit: type=1400 audit(1728358642.488:271): avc: denied { map_read map_write } for pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.677092][ T30] audit: type=1400 audit(1728358642.498:272): avc: denied { read } for pid=4656 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 116.699148][ T30] audit: type=1400 audit(1728358642.498:273): avc: denied { search } for pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.711195][ T5233] Bluetooth: hci6: command tx timeout [ 116.876786][ T30] audit: type=1400 audit(1728358642.498:274): avc: denied { append } for pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.899016][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.237743][ T30] audit: type=1400 audit(1728358642.498:275): avc: denied { open } for pid=4656 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.275070][ T30] audit: type=1400 audit(1728358642.498:276): avc: denied { getattr } for pid=4656 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.696815][ T30] audit: type=1400 audit(1728358642.538:277): avc: denied { create } for pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.721063][ T30] audit: type=1400 audit(1728358642.538:278): avc: denied { write } for pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.742469][ T30] audit: type=1400 audit(1728358642.538:279): avc: denied { read } for pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.874261][ T5233] Bluetooth: hci5: command tx timeout [ 118.874305][ T5235] Bluetooth: hci6: command tx timeout [ 119.009625][ T5569] chnl_net:caif_netlink_parms(): no params data found [ 119.122457][ T5278] vhci_hcd: vhci_device speed not set [ 119.317057][ T1122] bridge_slave_1: left allmulticast mode [ 119.323078][ T1122] bridge_slave_1: left promiscuous mode [ 119.330311][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.372362][ T1122] bridge_slave_0: left allmulticast mode [ 119.383221][ T1122] bridge_slave_0: left promiscuous mode [ 119.399537][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.986234][ T5235] Bluetooth: hci6: command tx timeout [ 120.991719][ T5235] Bluetooth: hci5: command tx timeout [ 121.367183][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.391258][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.412461][ T1122] bond0 (unregistering): Released all slaves [ 121.623791][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 121.623806][ T30] audit: type=1400 audit(1728358647.558:312): avc: denied { search } for pid=4888 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.672341][ T5569] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.695865][ T5569] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.716698][ T30] audit: type=1400 audit(1728358647.598:313): avc: denied { read } for pid=4888 comm="dhcpcd" name="n69" dev="tmpfs" ino=1794 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.760106][ T5569] bridge_slave_0: entered allmulticast mode [ 121.785910][ T5569] bridge_slave_0: entered promiscuous mode [ 121.896623][ T5569] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.931159][ T5569] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.549979][ T5235] Bluetooth: hci5: command tx timeout [ 126.988657][ T5233] Bluetooth: hci6: command tx timeout [ 127.196075][ C0] sched: DL replenish lagged too much [ 131.516261][ T30] audit: type=1400 audit(1728358647.598:314): avc: denied { open } for pid=4888 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=1794 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.738645][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.726012][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 250.733209][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1102/1:b..l P5626/1:b..l [ 250.742653][ C0] rcu: (detected by 0, t=10502 jiffies, g=10241, q=1310984 ncpus=2) [ 250.750736][ C0] task:syz.1.89 state:R running task stack:25824 pid:5626 tgid:5626 ppid:5225 flags:0x00004004 [ 250.763287][ C0] Call Trace: [ 250.766578][ C0] [ 250.769553][ C0] __schedule+0xef5/0x5750 [ 250.773996][ C0] ? hlock_class+0x4e/0x130 [ 250.778554][ C0] ? __pfx___schedule+0x10/0x10 [ 250.783453][ C0] ? find_held_lock+0x2d/0x110 [ 250.788258][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 250.793648][ C0] preempt_schedule_common+0x44/0xc0 [ 250.798951][ C0] preempt_schedule_thunk+0x1a/0x30 [ 250.804178][ C0] _raw_spin_unlock+0x3e/0x50 [ 250.808886][ C0] unmap_page_range+0xb01/0x3cf0 [ 250.813852][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 250.819340][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 250.824313][ C0] ? uprobe_munmap+0x20/0x5c0 [ 250.829020][ C0] unmap_single_vma+0x194/0x2b0 [ 250.833895][ C0] unmap_vmas+0x22f/0x490 [ 250.838245][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 250.843111][ C0] ? __pfx_lock_release+0x10/0x10 [ 250.848159][ C0] ? lock_acquire+0x2f/0xb0 [ 250.852675][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 250.857729][ C0] exit_mmap+0x1c6/0xb30 [ 250.861986][ C0] ? trace_contention_end+0xea/0x140 [ 250.867286][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 250.872165][ C0] ? __mutex_lock+0x1a6/0x9c0 [ 250.876886][ C0] __mmput+0x12a/0x480 [ 250.880972][ C0] mmput+0x62/0x70 [ 250.884816][ C0] do_exit+0x9bf/0x2d70 [ 250.889017][ C0] ? get_signal+0x8f2/0x2770 [ 250.893626][ C0] ? __pfx_do_exit+0x10/0x10 [ 250.898253][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 250.903288][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.908675][ C0] do_group_exit+0xd3/0x2a0 [ 250.913202][ C0] get_signal+0x25fb/0x2770 [ 250.917721][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 250.922939][ C0] ? ktime_get+0xd9/0x1a0 [ 250.927291][ C0] ? __pfx_get_signal+0x10/0x10 [ 250.932173][ C0] ? __pfx_do_futex+0x10/0x10 [ 250.936880][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 250.942449][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 250.948642][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 250.954320][ C0] do_syscall_64+0xda/0x250 [ 250.958847][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.964779][ C0] RIP: 0033:0x7f909f37dff9 [ 250.969212][ C0] RSP: 002b:00007ffce34b73b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 250.977642][ C0] RAX: ffffffffffffff92 RBX: 00007ffce34b74e0 RCX: 00007f909f37dff9 [ 250.985641][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f909f536064 [ 250.993642][ C0] RBP: 00007f909f536064 R08: 00007f90a0138080 R09: 00007ffce34b76af [ 251.001624][ C0] R10: 00007ffce34b74c0 R11: 0000000000000246 R12: 000000000001dc5a [ 251.009607][ C0] R13: 00007ffce34b74c0 R14: 0000000000000032 R15: 000000000001dc28 [ 251.017602][ C0] [ 251.020635][ C0] task:kworker/u8:6 state:R running task stack:24912 pid:1102 tgid:1102 ppid:2 flags:0x00004000 [ 251.032440][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 251.038705][ C0] Call Trace: [ 251.041979][ C0] [ 251.044916][ C0] __schedule+0xef5/0x5750 [ 251.049350][ C0] ? hlock_class+0x4e/0x130 [ 251.053916][ C0] ? mark_lock+0xb5/0xc60 [ 251.058269][ C0] ? __pfx_mark_lock+0x10/0x10 [ 251.063040][ C0] ? hlock_class+0x4e/0x130 [ 251.067557][ C0] ? __lock_acquire+0xbdd/0x3ce0 [ 251.072520][ C0] ? __pfx___schedule+0x10/0x10 [ 251.077489][ C0] ? mark_held_locks+0x9f/0xe0 [ 251.082277][ C0] preempt_schedule_irq+0x51/0x90 [ 251.087315][ C0] irqentry_exit+0x36/0x90 [ 251.091806][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 251.097820][ C0] RIP: 0010:lock_is_held_type+0x107/0x150 [ 251.103677][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 ac ca e0 74 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 45 31 ed eb [ 251.125297][ C0] RSP: 0018:ffffc90003e67898 EFLAGS: 00000282 [ 251.134808][ C0] RAX: 0000000000000046 RBX: ffff8880272be558 RCX: 0000000000000001 [ 251.144032][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd340 RDI: ffffffff8bd1a0c0 [ 251.153069][ C0] RBP: ffffffff8e1b8340 R08: 0000000000000005 R09: 0000000000000000 [ 251.162552][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880272bda00 [ 251.170989][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000003 [ 251.180411][ C0] ieee80211_bss_info_update+0x5f9/0xab0 [ 251.187788][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 251.196219][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x185e/0x2f40 [ 251.203077][ C0] ? ieee80211_mandatory_rates+0x1ab/0x220 [ 251.209176][ C0] ieee80211_ibss_rx_queued_mgmt+0x1898/0x2f40 [ 251.215810][ C0] ? hlock_class+0x4e/0x130 [ 251.220451][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 251.227378][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 251.232687][ C0] ? find_held_lock+0x2d/0x110 [ 251.237478][ C0] ? find_held_lock+0x2d/0x110 [ 251.242300][ C0] ? kcov_remote_start+0x370/0x6e0 [ 251.247450][ C0] ? mark_held_locks+0x9f/0xe0 [ 251.252316][ C0] ? kcov_remote_start+0x3cf/0x6e0 [ 251.257470][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 251.262705][ C0] cfg80211_wiphy_work+0x3d9/0x550 [ 251.267855][ C0] process_one_work+0x9c5/0x1ba0 [ 251.272816][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 251.278469][ C0] ? __pfx_process_one_work+0x10/0x10 [ 251.283861][ C0] ? assign_work+0x1a0/0x250 [ 251.288474][ C0] worker_thread+0x6c8/0xf00 [ 251.293103][ C0] ? __pfx_worker_thread+0x10/0x10 [ 251.298247][ C0] kthread+0x2c1/0x3a0 [ 251.302331][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.307538][ C0] ? __pfx_kthread+0x10/0x10 [ 251.312141][ C0] ret_from_fork+0x45/0x80 [ 251.316747][ C0] ? __pfx_kthread+0x10/0x10 [ 251.321355][ C0] ret_from_fork_asm+0x1a/0x30 [ 251.326167][ C0] [ 251.329194][ C0] rcu: rcu_preempt kthread starved for 9963 jiffies! g10241 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 251.340316][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 251.350284][ C0] rcu: RCU grace-period kthread stack dump: [ 251.356174][ C0] task:rcu_preempt state:R running task stack:26544 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 251.367964][ C0] Call Trace: [ 251.371250][ C0] [ 251.374212][ C0] __schedule+0xef5/0x5750 [ 251.378647][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 251.383856][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 251.388912][ C0] ? __pfx___schedule+0x10/0x10 [ 251.393794][ C0] ? schedule+0x298/0x350 [ 251.398175][ C0] ? __pfx_lock_release+0x10/0x10 [ 251.403205][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 251.408429][ C0] ? lock_acquire+0x2f/0xb0 [ 251.412938][ C0] ? schedule+0x1fd/0x350 [ 251.417282][ C0] schedule+0xe7/0x350 [ 251.421382][ C0] schedule_timeout+0x136/0x2a0 [ 251.426259][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 251.431695][ C0] ? __pfx_process_timeout+0x10/0x10 [ 251.437007][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 251.442829][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 251.448300][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 251.453074][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 251.458381][ C0] ? rcu_gp_init+0xc82/0x1630 [ 251.463086][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 251.468297][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 251.474118][ C0] rcu_gp_kthread+0x271/0x380 [ 251.478815][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 251.484023][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 251.489238][ C0] ? __kthread_parkme+0x148/0x220 [ 251.494298][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 251.499505][ C0] kthread+0x2c1/0x3a0 [ 251.503589][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.508797][ C0] ? __pfx_kthread+0x10/0x10 [ 251.513406][ C0] ret_from_fork+0x45/0x80 [ 251.517834][ C0] ? __pfx_kthread+0x10/0x10 [ 251.522439][ C0] ret_from_fork_asm+0x1a/0x30 [ 251.527240][ C0] [ 251.530279][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 251.536620][ C0] Sending NMI from CPU 0 to CPUs 1: [ 251.541850][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20