last executing test programs: 47.445616234s ago: executing program 2 (id=111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000196ca6000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) 47.235390115s ago: executing program 2 (id=113): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x11, 0x0, 0x2) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f", 0x82}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0, 0xf00}], 0x2}, 0x0) 45.840393367s ago: executing program 2 (id=117): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x15, 0x3, 0x4) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, 0x0, 0x0, 0x400122a0, 0x0) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f00000005c0)={@remote, @empty}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 43.694527268s ago: executing program 2 (id=121): mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='caif0\x00'}) r1 = epoll_create1(0x80000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r3) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000400)={r2, &(0x7f00000000c0)='!\x00', 0x4000, &(0x7f0000000100)={@_ha_fsid={[0x7ff, 0xbf]}, {0x81, 0x3ff, 0x6, 0x80000001}}, 0x7, &(0x7f00000002c0), &(0x7f00000003c0)=0x9}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x22, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000007f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000030000000000008500000083000000bf0900000000000055090100000000009500000000000000186600000e00000000000000080000005d65040000000000185600000e00000000000000000000000054018005000000fade920100000001180000000800000000000000f7ffffff180000000900000000000000003daa008510000008000000181200"/156, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x3f, 0x0, 0x41100, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2080) close(0x3) r6 = epoll_create1(0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x2c83, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0xe}) dup2(r3, r7) epoll_wait(r6, &(0x7f0000000200)=[{}], 0x1, 0x254) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 39.716402549s ago: executing program 2 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001bb1ed1dfc8eed3a3"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9, 0x0, 0x0, 0x2}, {@in=@multicast1, 0xfffffffd, 0x2b}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x51f, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0xa, 0x4, 0x0, 0x100}}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x8080) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="201504"], 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000900)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRES8=0x0], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xe8, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000000)={0xa980000000000000, 0x10000, 0xe7, 0x8, 0x12}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x8, 0x0, 0x29000000, 0x7, 0x40000, r2, 0x0, '\x00', 0x0, r2, 0x1, 0x2, 0x8}, 0x50) 38.964066896s ago: executing program 2 (id=136): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4, 0x1, 0xb, 0x2, 0xa, 0x0, 0x40000000}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) 38.358593489s ago: executing program 32 (id=136): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4, 0x1, 0xb, 0x2, 0xa, 0x0, 0x40000000}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) 14.382552248s ago: executing program 1 (id=180): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000440)={0x4, &(0x7f0000000280)=[{0x2, 0x6, 0x4a}, {0x4, 0xcd, 0x7, 0x4}, {0xfffd, 0x7, 0x7, 0x100}, {0x4, 0x1, 0x67, 0x8}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_usbip_server_init(0x5) writev(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x46, &(0x7f0000000340)=0x41, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x40384708, &(0x7f0000000040)={0x8, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc28c554a, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="90b24b1008000200", @ANYRES32, @ANYBLOB="2c0dfce2"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) vmsplice(r0, &(0x7f0000000140), 0x0, 0x16) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 12.127280734s ago: executing program 4 (id=183): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, 0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee00) r4 = socket(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x334, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, 0x0) sendmsg$nl_generic(r4, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 10.482448717s ago: executing program 1 (id=184): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x9) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/172, 0xac}], 0x1) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x23, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 10.244330572s ago: executing program 0 (id=185): syz_emit_ethernet(0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000920000442f00fe8000000000000000000000000e001500000000000000000000ffff"], 0x0) 9.618142441s ago: executing program 4 (id=187): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x5, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0xbb84, 0x1c080, 0xa, 0x20082f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x1e00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="150b", 0x2}], 0x1}}], 0x1, 0x20040140) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.4361892s ago: executing program 0 (id=188): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) setresuid(0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x0, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000002c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc4cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x7d, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x40, 0xd, 0xc, "846e03ef1633235cc968cf7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.288632966s ago: executing program 4 (id=189): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x280, 0x1b0, 0x370, 0x370, 0x370, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x84}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1}, {0x87}, 0xfffffffd}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x370}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0x0, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x4}}}, {{@ipv6={@private1, @local, [0xffffff00, 0xff, 0xff000000, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x3, 0x2, 0x50}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x88}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1e}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}], 0x54) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x24b4040, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000008"]) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8243cb8a7a09fddc) 8.182505036s ago: executing program 3 (id=190): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:mtrr_device_t:s0\x00', 0x23, 0x1) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000075c0)={@local, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x409, 0x0, 0xa, 0x1}) unshare(0x62020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) lstat(&(0x7f0000000540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0x6000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000301010300000000000000000a0040020c000093080001001dbe977190586d010000300001800c000180140003002001000010000000000000000000000214000400fc00"/84], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) listns(&(0x7f0000000280)={0x20, 0x0, 0x81, 0x20000000}, 0x0, 0x15, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 8.151118354s ago: executing program 1 (id=191): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:mtrr_device_t:s0\x00', 0x23, 0x1) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000075c0)={@local, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x409, 0x0, 0xa, 0x1}) unshare(0x62020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) lstat(&(0x7f0000000540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0x6000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000301010300000000000000000a0040020c000093080001001dbe977190586d010000300001800c000180140003002001000010000000000000000000000214000400fc00"/84], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) listns(&(0x7f0000000280)={0x20, 0x0, 0x81, 0x20000000}, 0x0, 0x15, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 5.957999249s ago: executing program 4 (id=192): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$CEC_ADAP_S_PHYS_ADDR(0xffffffffffffffff, 0x40026102, &(0x7f0000000080)=0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0x40, 0x1, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@remote}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0x8, 0x14c, 0x0, 0x1, [@nested={0x4, 0x9a}]}, @nested={0x4, 0x8f}]}]}, 0x2c}}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x7fffffff}, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgid(0xffffffffffffffff) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45480, 0x18080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x80}]}}}]}, 0x44}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@link_local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040), 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40400d2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000040)=0x5f) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 4.793360067s ago: executing program 1 (id=193): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000003ec0)=""/4122, 0x101a, 0x105) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002540)=@newtfilter={0x40, 0x2c, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffe0}, {0x8, 0x10}, {0xf, 0xfffb}}, [@TCA_RATE={0x6, 0x5, {0x72, 0x6}}, @filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8005}, 0x4000080) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000040c000000000000070000008500aa5c0000300000001801000020207325000000002cc90000001af8ff00000000bfa100000000000007010000f8ff00b7030000d625ffff85000000060000009500"/98], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mknodat(r3, &(0x7f0000000140)='./file0\x00', 0x2, 0xfffffff4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f00000006c0)={@null, 0xf, 'bond0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @random='\a\x00'}) r8 = accept4$alg(r1, 0x0, 0x0, 0x80000) recvmsg(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f0000000880)=""/91, 0x5b}], 0x2, &(0x7f0000000940)}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r11 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r11, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x3, 0x0, @b}, 0x48, r11) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x8, 0xe8, 0xfc, 0x9, 0x6, 0x6f, 0xe, 0x8, 0xfd, 0x6, 0x7, 0x0, 0x7, 0x8, 0x8, 0x8}}) listen(r4, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000003000017814000400ff020000000000000000000000000001060005004e220000060001000a0000000800060001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) 4.649170581s ago: executing program 0 (id=194): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000600007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4.592772793s ago: executing program 4 (id=195): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x50}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x76) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) connect$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x80, 0x3, @local}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x4}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 4.443184604s ago: executing program 3 (id=196): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value=0x34000000}, 0x20) 4.179591812s ago: executing program 3 (id=197): r0 = syz_open_dev$media(&(0x7f0000000080), 0x7, 0x8242) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0xfffffffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32=r0, @ANYRES64=r0, @ANYRES32, @ANYRES32=r1], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0x44844) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x3, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x1b, 0x7, 0x8, 0x1f, 0x2, 0x3ff, 0x1, 0xae, 0x1}) socket$alg(0x26, 0x5, 0x0) 4.061529282s ago: executing program 0 (id=198): socket$phonet(0x23, 0x2, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=@raw=[@func, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x4b, &(0x7f0000000700)=""/75, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x6, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ec0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2], &(0x7f0000000f00)=[{0x5, 0x1, 0x10, 0x2}, {0x5, 0x5, 0xc, 0xc}, {0x1, 0x1, 0xe}], 0x10, 0x9}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r7 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 3.930947332s ago: executing program 3 (id=199): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:mtrr_device_t:s0\x00', 0x23, 0x1) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000075c0)={@local, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x409, 0x0, 0xa, 0x1}) unshare(0x62020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) lstat(&(0x7f0000000540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0x6000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ptrace(0x11, r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000301010300000000000000000a0040020c000093080001001dbe977190586d010000300001800c000180140003002001000010000000000000000000000214000400fc00"/84], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) listns(&(0x7f0000000280)={0x20, 0x0, 0x81, 0x20000000}, 0x0, 0x15, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 3.369025511s ago: executing program 1 (id=200): lseek(0xffffffffffffffff, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x9, 0x5, 0x9, 0x8, 0xffffffff, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0x1a, 0xa2b9, 0xff, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x9, 0xd, 0x0, 0x8, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0xa, 0x8, 0x0, 0x91, 0x2, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0xc7b, 0xa7, 0x81, 0x4, 0xf9a2, 0x80000001, 0x2, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xfffffffc, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd4e, 0x7, 0x8, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x0, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x6, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x7, 0x92, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x800003fc, 0x4000006, 0x400, 0x41, 0x6, 0xee49, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0xfffffa8e, 0x4005, 0xd3, 0x8, 0x97f7, 0x40003, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x3, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x891f, 0x6, 0x8000, 0xf45, 0x3, 0xd4fd, 0x8, 0x5, 0x9, 0x6, 0x1010000, 0xfffffffd, 0x5, 0x1d], [0xa774, 0x6, 0x5, 0x1afa, 0x9, 0xb, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x4, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80007fff, 0x7777, 0xff, 0x0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x5, 0x3, 0x6, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x6, 0x0, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x456041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xb, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x81) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getitimer(0x0, &(0x7f00000001c0)={{}, {0x0, 0x0}}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x20000000}, 0xad) r7 = socket$inet(0x2, 0x3, 0x4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="141d0000", @ANYRESHEX=r1, @ANYRESOCT=r6], 0x14}}, 0x24000010) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) setrlimit(0x4, &(0x7f0000000280)={0x7, 0x5e5}) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r7, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x13, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x1, 0x2, 0x4}, @fda={0x66646185, 0x3, 0x2, 0x1a}, @fda={0x66646185, 0x4000000, 0x1, 0x35}}, &(0x7f00000003c0)={0x0, 0x32, 0x40}}}], 0x9e, 0x0, &(0x7f00000004c0)="b0bcd928e2447d92cfcbf263ce86f6356cdfe319e5621d816db6bdd48a8992012e377abe7de2067908e58854e530adc21151449ca7e77c08e568aa8e3b64463af8490a6ed1c2e188b87d883aa2e1d5bc158fa25905d2ce7caa531de0ede56e535b87f7319f9c2158437cc06d8106a13ebeb6a1ba49de81f085b608ed807c88411d7c476c5700c129b1361dc1aa397058d3145b9bca3687973fcf1712bd14"}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x458f8, &(0x7f00000000c0)={0x0, 0xc61e, 0x4021, 0x2001, 0x9c}, &(0x7f0000000400), &(0x7f0000000040), &(0x7f00000002c0)) 1.47653568s ago: executing program 3 (id=201): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x318, 0x0, 0x0, 0x148, 0x0, 0x148, 0x280, 0x240, 0x240, 0x280, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x14, 0x0, 0x1ff, 0x100000, 0x2, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x21, 0x1e, 0x3d, 0xb, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) open(0x0, 0x60840, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3}, @fda={0x66646185, 0x7, 0x0, 0x32}, @flat=@binder={0x73622a85, 0x101}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r6, &(0x7f0000000000)="2c919a7769e5dc00", 0xfdef, 0x800, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) 1.244636868s ago: executing program 0 (id=202): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x9) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/172, 0xac}], 0x1) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x23, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) fcntl$setlease(r6, 0x400, 0x0) socket$packet(0x11, 0x3, 0x300) 151.096158ms ago: executing program 3 (id=203): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a300000000008004100736977001400330077673100000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x42142, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000c"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 87.190175ms ago: executing program 4 (id=204): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000feff00000000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 62.792948ms ago: executing program 0 (id=205): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000300000000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) 0s ago: executing program 1 (id=206): socket$igmp(0x2, 0x3, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0x5421, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r2, 0x10000000005, 0x0) memfd_create(0x0, 0xc) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x2, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0xffff, 0x80000000, 0xbb2, 0xffffffffffffffff, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r4, r5, 0x25, 0x5, @val=@iter={&(0x7f00000002c0)=@map_fd=r2, 0x10}}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001600)=@newtfilter={0x7cc, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x1, 0xd}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x40, 0xc6}}, @TCA_CHAIN={0x8, 0xb, 0x3a}, @TCA_RATE={0x6, 0x5, {0x36, 0x43}}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @filter_kind_options=@f_route={{0xa}, {0x75c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xd8}, @TCA_ROUTE4_ACT={0x2cc, 0x6, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}]}, {0x2a, 0x6, "c795fdda34fea60ab5373db40aac71f8609a3202a7e0a6e1b861d213e4cff905f0c8b39cd2ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0xf29645cd7de98dcb}}}}, @m_nat={0x198, 0x13, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x0, 0x8, 0x3ff, 0x3}, @remote, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x100, 0x2, 0x0, 0xa}, @local, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x200, 0x0, 0x316b, 0x40}, @loopback, @private=0xa010101, 0xff, 0x1}}]}, {0xf5, 0x6, "3d4e88ce1270a60e0915ca007e5d0f00fcb5824be7484871f8d692e35e166f2c615f003bcdb94e6f5b013464cfe4b2f5da0860bd0108d27b46a1be2e0aedb024ab3a106940f652e37ef543972e926fdefc1ba23e1647ae917f3870c282f214275a66b495f11a247f3c360915623af08849304aec8f824a710d9650e997ce1cf0a7eb9a3b586a2e05cc470e993cb65bca30e10df7686b2a21a95d9e2ea43273030851f31eb07830bc776d5c26f1e0f5b97e34f902f49a0b6d91e7d97efe045e4343d0532c6d32293db88573e189af684791ce698a735602dac5624aa4d82ab7b52e9ade0094a495a6c676f4bba45f0d07bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0xac, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0x7f, 0x6, "57e569cbe9d6ba11fe5567bb84a3e1032acccd9785449f671f1d76ec6414d5e06e24f70ad436254bd794d5503a3549e881ca8c707d2747c8450608f1f31a98fb7cfb3231433e8802868624654992993881afc1a1fc5a8f2eb723aa937ae13a2290d8e02cdd9241a7247dccb4badf82893871c6a22b1dd963876ec5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xac}, @TCA_ROUTE4_POLICE={0x46c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x10000, 0x9, 0x1, 0xab3, 0x5, 0x5, 0x0, 0x80, 0x5, 0x0, 0x7, 0x1, 0xfffffff7, 0x7, 0xaf07, 0xd9f2, 0x5, 0x8, 0x31c9, 0x183, 0x5, 0x5, 0xf5, 0x80000000, 0x3, 0xff, 0x1aec, 0x6, 0x3ff, 0x10, 0x5, 0x0, 0x8e1, 0x0, 0x0, 0x3, 0x6ac1, 0x76d, 0xffffffff, 0x7, 0x80000000, 0x1, 0x9, 0x9, 0x2, 0x9, 0x1, 0x7f825396, 0x2, 0x9, 0x100, 0x8, 0x2, 0xd, 0x5, 0xc511, 0x1, 0x4, 0x6, 0x7, 0x7ff, 0x8, 0x1, 0x3b4c, 0x2, 0xe9, 0x6, 0x0, 0xa, 0x3d2200d0, 0xb, 0x509ebfa6, 0xe, 0x2, 0x787074d4, 0x1, 0x0, 0xbf8d, 0xdad, 0x2, 0x6, 0x6, 0x4, 0x530, 0x1ff, 0x8001, 0x6, 0x0, 0x7f, 0x7f, 0x1, 0xb, 0x9, 0x20, 0x657, 0x80, 0x5, 0x80000000, 0x6, 0x8, 0x9, 0x7fff, 0xfffffffb, 0x59065953, 0x99c, 0xfffffff2, 0xffffffff, 0x69ca, 0x2, 0x3, 0x33af, 0x5b36, 0xfffffff8, 0xa0000, 0x1ff, 0x7fffffff, 0x76, 0x8, 0x800, 0x6f6b032a, 0xfffffff7, 0x101, 0x1, 0x1, 0x9, 0xd75, 0x3e, 0x3, 0x4, 0xded1, 0x9, 0x9, 0x0, 0x5, 0x0, 0x684, 0x8, 0x6, 0x3ff, 0x1, 0x1, 0x2, 0x0, 0xfc000000, 0x9, 0x6, 0x9, 0x2, 0x8, 0xc2e8, 0x539a, 0x80000000, 0xfffffff7, 0x6, 0x4, 0x1, 0x0, 0x80000000, 0x75, 0x6, 0x5, 0x3, 0x1, 0xfffffffc, 0x1, 0x800, 0xa5d0, 0x9, 0x80000001, 0x8, 0x3, 0x860, 0xfd, 0x1, 0x9, 0x55f9, 0x0, 0x3, 0x2, 0x8000, 0x6, 0x7fff, 0x7fff, 0xe5b, 0x9d, 0x7, 0xffff87e4, 0x1, 0x7, 0x7, 0x5, 0x9, 0xd, 0x8, 0x400, 0x5, 0x2fb, 0x8001, 0x9, 0xe, 0xfffff0cc, 0x4, 0xfffffffd, 0x826b, 0x4, 0x5, 0x9, 0xbe59, 0x2, 0x1b, 0x7, 0xffff, 0x4, 0xcaf, 0xfffffffa, 0x1, 0x4, 0xb, 0xfffffff8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x3, 0x8, 0x9, 0x8, 0x4, 0x2, 0x3, 0x3, 0x7, 0x49b, 0x9, 0x9, 0x9, 0x1af5, 0x9, 0xfffffff9, 0x8, 0xfa, 0x400, 0x4, 0x120000, 0x0, 0x9, 0x7, 0x3, 0x1, 0x0, 0x2, 0xffffffff, 0x8000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfb1c, 0xffffffffffffffff, 0x80000000, 0xd994, 0xfffffff9, {0x7, 0x1, 0x4, 0x0, 0x7, 0x8}, {0x0, 0x2, 0x22cc, 0x80, 0x9b5, 0x80000000}, 0x6, 0x1, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xc}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x7f}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x7cc}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044011}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r9 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000240)=0x1) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @private2}}}}}}, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): [ 59.090495][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 59.090512][ T29] audit: type=1400 audit(1780573806.785:118): avc: denied { write } for pid=5520 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.294212][ T29] audit: type=1400 audit(1780573806.985:119): avc: denied { write } for pid=5523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.352046][ T29] audit: type=1400 audit(1780573807.045:120): avc: denied { write } for pid=5534 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.541063][ T29] audit: type=1400 audit(1780573807.235:121): avc: denied { write } for pid=5537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.599287][ T29] audit: type=1400 audit(1780573807.295:122): avc: denied { write } for pid=5548 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.801261][ T29] audit: type=1400 audit(1780573807.495:123): avc: denied { write } for pid=5551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.856167][ T29] audit: type=1400 audit(1780573807.555:124): avc: denied { write } for pid=5562 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.054214][ T29] audit: type=1400 audit(1780573807.745:125): avc: denied { write } for pid=5565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.105078][ T29] audit: type=1400 audit(1780573807.795:126): avc: denied { write } for pid=5576 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.361274][ T29] audit: type=1400 audit(1780573808.055:127): avc: denied { write } for pid=5580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. [ 66.364853][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 66.364870][ T29] audit: type=1400 audit(1780573814.055:129): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.396115][ T29] audit: type=1400 audit(1780573814.095:130): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.399511][ T5602] cgroup: Unknown subsys name 'net' [ 66.427664][ T29] audit: type=1400 audit(1780573814.125:131): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.508338][ T5602] cgroup: Unknown subsys name 'cpuset' [ 66.516921][ T5602] cgroup: Unknown subsys name 'rlimit' [ 66.638802][ T29] audit: type=1400 audit(1780573814.335:132): avc: denied { setattr } for pid=5602 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.673814][ T29] audit: type=1400 audit(1780573814.335:133): avc: denied { create } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.694786][ T29] audit: type=1400 audit(1780573814.335:134): avc: denied { write } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 66.735078][ T29] audit: type=1400 audit(1780573814.335:135): avc: denied { read } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.755835][ T5604] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.760053][ T29] audit: type=1400 audit(1780573814.335:136): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.789505][ T29] audit: type=1400 audit(1780573814.335:137): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.812912][ T29] audit: type=1400 audit(1780573814.455:138): avc: denied { relabelto } for pid=5604 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.741708][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.901625][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.910917][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.920465][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.929116][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.929405][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.936746][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.945565][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.954965][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.958735][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.972316][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.976860][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.981356][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.988130][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.000773][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.002178][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.018574][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.019557][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.033956][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.041765][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.042064][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.066491][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.081332][ T4933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.089460][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.104553][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.113263][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.218104][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.225643][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.508657][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.515902][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.523363][ T5616] bridge_slave_0: entered allmulticast mode [ 71.530493][ T5616] bridge_slave_0: entered promiscuous mode [ 71.570664][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.577951][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.585071][ T5616] bridge_slave_1: entered allmulticast mode [ 71.592106][ T5616] bridge_slave_1: entered promiscuous mode [ 71.684764][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.711070][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.718289][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.725611][ T5617] bridge_slave_0: entered allmulticast mode [ 71.732771][ T5617] bridge_slave_0: entered promiscuous mode [ 71.741637][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.778393][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.785596][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.792724][ T5614] bridge_slave_0: entered allmulticast mode [ 71.799854][ T5614] bridge_slave_0: entered promiscuous mode [ 71.807489][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.814607][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.822383][ T5617] bridge_slave_1: entered allmulticast mode [ 71.829273][ T5617] bridge_slave_1: entered promiscuous mode [ 71.858632][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.865990][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.873233][ T5614] bridge_slave_1: entered allmulticast mode [ 71.880297][ T5614] bridge_slave_1: entered promiscuous mode [ 71.895812][ T5616] team0: Port device team_slave_0 added [ 71.901582][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.908784][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.915966][ T5626] bridge_slave_0: entered allmulticast mode [ 71.922705][ T5626] bridge_slave_0: entered promiscuous mode [ 71.929861][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.937206][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.944411][ T5615] bridge_slave_0: entered allmulticast mode [ 71.951430][ T5615] bridge_slave_0: entered promiscuous mode [ 71.973054][ T5616] team0: Port device team_slave_1 added [ 71.979002][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.986151][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.993382][ T5626] bridge_slave_1: entered allmulticast mode [ 72.000474][ T5626] bridge_slave_1: entered promiscuous mode [ 72.006733][ T5621] Bluetooth: hci0: command tx timeout [ 72.018011][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.025098][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.032305][ T5615] bridge_slave_1: entered allmulticast mode [ 72.039190][ T5615] bridge_slave_1: entered promiscuous mode [ 72.055518][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.086417][ T5621] Bluetooth: hci3: command tx timeout [ 72.086427][ T50] Bluetooth: hci1: command tx timeout [ 72.086539][ T50] Bluetooth: hci2: command tx timeout [ 72.105812][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.116839][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.127470][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.134473][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.160759][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.171372][ T50] Bluetooth: hci4: command tx timeout [ 72.180159][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.198962][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.220173][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.227250][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.253402][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.266165][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.277675][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.318381][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.346082][ T5617] team0: Port device team_slave_0 added [ 72.354122][ T5617] team0: Port device team_slave_1 added [ 72.375887][ T5614] team0: Port device team_slave_0 added [ 72.383744][ T5614] team0: Port device team_slave_1 added [ 72.398661][ T5626] team0: Port device team_slave_0 added [ 72.406395][ T5615] team0: Port device team_slave_0 added [ 72.439065][ T5626] team0: Port device team_slave_1 added [ 72.446418][ T5615] team0: Port device team_slave_1 added [ 72.468587][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.475865][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.501913][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.534251][ T5616] hsr_slave_0: entered promiscuous mode [ 72.540660][ T5616] hsr_slave_1: entered promiscuous mode [ 72.547958][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.554999][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.581291][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.592943][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.600190][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.626137][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.659413][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.666449][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.692356][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.712295][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.719401][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.745315][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.767573][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.774612][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.800890][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.813028][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.820026][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.845923][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.869369][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.876395][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.902581][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.951125][ T5617] hsr_slave_0: entered promiscuous mode [ 72.957662][ T5617] hsr_slave_1: entered promiscuous mode [ 72.963764][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 72.969661][ T5617] Cannot create hsr debugfs directory [ 72.997301][ T5614] hsr_slave_0: entered promiscuous mode [ 73.003656][ T5614] hsr_slave_1: entered promiscuous mode [ 73.009929][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 73.016025][ T5614] Cannot create hsr debugfs directory [ 73.123776][ T5615] hsr_slave_0: entered promiscuous mode [ 73.132877][ T5615] hsr_slave_1: entered promiscuous mode [ 73.139017][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 73.144731][ T5615] Cannot create hsr debugfs directory [ 73.160843][ T5626] hsr_slave_0: entered promiscuous mode [ 73.167216][ T5626] hsr_slave_1: entered promiscuous mode [ 73.173175][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 73.178952][ T5626] Cannot create hsr debugfs directory [ 73.545041][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.556940][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.565797][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.576104][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.584144][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.595535][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.610514][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.620183][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.673543][ T5626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.683224][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.691467][ T5626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.701593][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.709811][ T5626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.718913][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.726750][ T5626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.735961][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.818866][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.829816][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.838024][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.847967][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.862542][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.872641][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.881131][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.892448][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.002291][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.012008][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.020197][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.030479][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.048314][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.057638][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.065199][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.073817][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.095583][ T50] Bluetooth: hci0: command tx timeout [ 74.127681][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.166226][ T50] Bluetooth: hci2: command tx timeout [ 74.176186][ T4933] Bluetooth: hci1: command tx timeout [ 74.181952][ T50] Bluetooth: hci3: command tx timeout [ 74.187130][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.197235][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.205020][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.216250][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.233016][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.242304][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.249500][ T50] Bluetooth: hci4: command tx timeout [ 74.257334][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.267292][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.283918][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.295019][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.323804][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.331351][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.368731][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.375872][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.398502][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.415590][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.437933][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.445036][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.468182][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.475339][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.522125][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.565953][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.573101][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.589640][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.612341][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.619458][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.687534][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.704090][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.711270][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.748779][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.755971][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.789797][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.880343][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.923881][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.931086][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.964977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.972146][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.993310][ T5614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.496335][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.670312][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.710902][ T5616] veth0_vlan: entered promiscuous mode [ 75.761175][ T5616] veth1_vlan: entered promiscuous mode [ 75.846628][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.928572][ T5616] veth0_macvtap: entered promiscuous mode [ 75.982520][ T5616] veth1_macvtap: entered promiscuous mode [ 76.004228][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.094370][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.111826][ T5617] veth0_vlan: entered promiscuous mode [ 76.133221][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.144561][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.166409][ T50] Bluetooth: hci0: command tx timeout [ 76.173650][ T5617] veth1_vlan: entered promiscuous mode [ 76.181618][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.191317][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.212227][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.221188][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.245475][ T50] Bluetooth: hci3: command tx timeout [ 76.245573][ T4933] Bluetooth: hci1: command tx timeout [ 76.251186][ T5621] Bluetooth: hci2: command tx timeout [ 76.283604][ T5614] veth0_vlan: entered promiscuous mode [ 76.325498][ T5621] Bluetooth: hci4: command tx timeout [ 76.352746][ T5614] veth1_vlan: entered promiscuous mode [ 76.378429][ T5615] veth0_vlan: entered promiscuous mode [ 76.398673][ T5617] veth0_macvtap: entered promiscuous mode [ 76.409565][ T5617] veth1_macvtap: entered promiscuous mode [ 76.419888][ T5626] veth0_vlan: entered promiscuous mode [ 76.433825][ T5615] veth1_vlan: entered promiscuous mode [ 76.440339][ T425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.456205][ T425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.511638][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.520506][ T5626] veth1_vlan: entered promiscuous mode [ 76.530699][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.538466][ T5614] veth0_macvtap: entered promiscuous mode [ 76.544300][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.550276][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.580149][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 76.580164][ T29] audit: type=1400 audit(1780573824.275:152): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.VbVxci/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.582272][ T5614] veth1_macvtap: entered promiscuous mode [ 76.595912][ T29] audit: type=1400 audit(1780573824.285:153): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.633473][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.651614][ T425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.660930][ T29] audit: type=1400 audit(1780573824.285:154): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.VbVxci/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.690756][ T29] audit: type=1400 audit(1780573824.285:155): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.713038][ T29] audit: type=1400 audit(1780573824.285:156): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.VbVxci/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.741752][ T29] audit: type=1400 audit(1780573824.345:157): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.VbVxci/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.770337][ T425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.779747][ T425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.789550][ T29] audit: type=1400 audit(1780573824.345:158): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.790383][ T5615] veth0_macvtap: entered promiscuous mode [ 76.819132][ T29] audit: type=1400 audit(1780573824.365:159): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.825531][ T5615] veth1_macvtap: entered promiscuous mode [ 76.848386][ T29] audit: type=1400 audit(1780573824.365:160): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="gadgetfs" ino=8285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.850940][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.871953][ T29] audit: type=1400 audit(1780573824.365:161): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.901580][ T5626] veth0_macvtap: entered promiscuous mode [ 76.918256][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.928262][ T425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.958439][ T5626] veth1_macvtap: entered promiscuous mode [ 76.977866][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.003108][ T425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.032134][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.043396][ T425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.072592][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.081831][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.199918][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.231081][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.242610][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.253371][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.283356][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.294238][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.366030][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.737981][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.751311][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.814756][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.826372][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.852148][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.881857][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893997][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.904798][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.933591][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.941922][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.033118][ T5815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 78.097111][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.157507][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.229649][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.245611][ T5621] Bluetooth: hci0: command tx timeout [ 78.262841][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.325541][ T50] Bluetooth: hci2: command tx timeout [ 78.326005][ T4933] Bluetooth: hci3: command tx timeout [ 78.330966][ T5621] Bluetooth: hci1: command tx timeout [ 78.383673][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.393188][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.406332][ T5621] Bluetooth: hci4: command tx timeout [ 78.422425][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 78.562954][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.603085][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.782254][ T5827] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 78.789268][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.804459][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.823311][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.846416][ T5831] IPv4: Oversized IP packet from 127.202.26.0 [ 78.896819][ T5827] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001 [ 78.909225][ T9] IPVS: starting estimator thread 0... [ 78.988091][ T5835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10'. [ 79.007298][ T5832] IPVS: using max 36 ests per chain, 86400 per kthread [ 79.281227][ T5744] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.535006][ T5744] usb 4-1: Using ep0 maxpacket: 32 [ 79.637387][ T5744] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 79.735656][ T5723] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.762914][ T5744] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 79.837623][ T5744] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 79.865400][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.883759][ T5744] usb 4-1: Product: syz [ 79.892115][ T5744] usb 4-1: Manufacturer: syz [ 79.899483][ T5744] usb 4-1: SerialNumber: syz [ 80.045392][ T5805] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 80.136596][ T5835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.148725][ T5835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.176346][ T5835] input: syz0 as /devices/virtual/input/input5 [ 80.675398][ T5805] usb 1-1: device descriptor read/64, error -71 [ 80.791730][ T5744] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 80.822002][ T5744] usb 4-1: unit 255 not found! [ 80.998051][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 80.999574][ T5805] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 81.159962][ T5744] usb 4-1: disable ehci-hcd to run US-144 [ 81.186858][ T5805] usb 1-1: device descriptor read/64, error -71 [ 81.212841][ T5744] usb 4-1: disable ehci-hcd to run US-144 [ 81.262997][ T5744] usb 4-1: USB disconnect, device number 2 [ 81.328104][ T5805] usb usb1-port1: attempt power cycle [ 81.449232][ T5868] capability: warning: `syz.2.15' uses 32-bit capabilities (legacy support in use) [ 81.686841][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.837109][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 81.837143][ T29] audit: type=1400 audit(1780573829.465:223): avc: denied { create } for pid=5867 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.099634][ T5805] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 82.182137][ T29] audit: type=1400 audit(1780573829.465:224): avc: denied { bind } for pid=5867 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.242084][ T29] audit: type=1400 audit(1780573829.935:225): avc: denied { ioctl } for pid=5869 comm="syz.4.16" path="socket:[8010]" dev="sockfs" ino=8010 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.247200][ T5805] usb 1-1: device descriptor read/8, error -71 [ 82.358587][ T5873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16'. [ 82.456269][ T29] audit: type=1400 audit(1780573830.145:226): avc: denied { write } for pid=5854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.529593][ T5873] veth1_to_team: entered promiscuous mode [ 82.561296][ T29] audit: type=1400 audit(1780573830.145:227): avc: denied { create } for pid=5854 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.617159][ T5873] gretap0: entered promiscuous mode [ 82.662539][ T5873] hsr1: entered promiscuous mode [ 82.667671][ T29] audit: type=1400 audit(1780573830.145:228): avc: denied { write } for pid=5854 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=1928 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.792370][ T29] audit: type=1400 audit(1780573830.175:229): avc: denied { append } for pid=5854 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=1928 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.925343][ T29] audit: type=1400 audit(1780573830.245:230): avc: denied { name_bind } for pid=5881 comm="syz.2.18" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 83.165474][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.172533][ T5350] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 83.341670][ T29] audit: type=1400 audit(1780573830.525:231): avc: denied { create } for pid=5885 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.399919][ T29] audit: type=1400 audit(1780573830.545:232): avc: denied { bind } for pid=5885 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.719596][ T5878] FAULT_INJECTION: forcing a failure. [ 83.719596][ T5878] name failslab, interval 1, probability 0, space 0, times 1 [ 84.005493][ T5350] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 84.147427][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 84.147454][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.147471][ T5878] Call Trace: [ 84.147478][ T5878] [ 84.147485][ T5878] dump_stack_lvl+0x100/0x190 [ 84.147515][ T5878] should_fail_ex.cold+0x5/0xa [ 84.147544][ T5878] should_failslab+0xc2/0x120 [ 84.147575][ T5878] __kmalloc_node_noprof+0xe6/0x850 [ 84.147605][ T5878] ? alloc_slab_obj_exts+0xae/0x270 [ 84.147629][ T5878] ? __lock_acquire+0x4a5/0x2630 [ 84.147658][ T5878] alloc_slab_obj_exts+0xae/0x270 [ 84.147688][ T5878] __memcg_slab_post_alloc_hook+0x3c2/0xff0 [ 84.147719][ T5878] ? __kvmalloc_node_noprof+0x282/0xa00 [ 84.147752][ T5878] ? kasan_unpoison+0x27/0x60 [ 84.147785][ T5878] __kvmalloc_node_noprof+0x78f/0xa00 [ 84.147815][ T5878] ? traverse.part.0.constprop.0+0x397/0x650 [ 84.147849][ T5878] traverse.part.0.constprop.0+0x397/0x650 [ 84.147883][ T5878] seq_read_iter+0x93f/0x1270 [ 84.147921][ T5878] seq_read+0x33b/0x4c0 [ 84.147946][ T5878] ? __pfx_seq_read+0x10/0x10 [ 84.147978][ T5878] ? avc_policy_seqno+0x9/0x20 [ 84.147998][ T5878] ? selinux_file_permission+0x8f/0x6d0 [ 84.148035][ T5878] ? rw_verify_area+0xce/0x6d0 [ 84.148054][ T5878] ? __pfx_seq_read+0x10/0x10 [ 84.148078][ T5878] vfs_read+0x1e4/0xb30 [ 84.148104][ T5878] ? __pfx_vfs_read+0x10/0x10 [ 84.148123][ T5878] ? find_held_lock+0x2b/0x80 [ 84.148141][ T5878] ? __fget_files+0x215/0x3d0 [ 84.148166][ T5878] ? __fget_files+0x215/0x3d0 [ 84.148195][ T5878] ? __fget_files+0x21f/0x3d0 [ 84.148230][ T5878] __x64_sys_pread64+0x1eb/0x250 [ 84.148255][ T5878] ? __pfx___x64_sys_pread64+0x10/0x10 [ 84.148281][ T5878] ? rcu_is_watching+0x12/0xc0 [ 84.148314][ T5878] do_syscall_64+0x115/0x870 [ 84.148340][ T5878] ? clear_bhb_loop+0x40/0x90 [ 84.148365][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.148385][ T5878] RIP: 0033:0x7fe12139ce59 [ 84.148407][ T5878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.148425][ T5878] RSP: 002b:00007fe12223c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 84.148448][ T5878] RAX: ffffffffffffffda RBX: 00007fe121615fa0 RCX: 00007fe12139ce59 [ 84.148462][ T5878] RDX: 000000000000000f RSI: 0000200000000140 RDI: 0000000000000005 [ 84.148474][ T5878] RBP: 00007fe12223c090 R08: 0000000000000000 R09: 0000000000000000 [ 84.148485][ T5878] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 84.148496][ T5878] R13: 00007fe121616038 R14: 00007fe121615fa0 R15: 00007ffc0a4dc0e8 [ 84.148525][ T5878] [ 84.622312][ T5911] xt_policy: output policy not valid in PREROUTING and INPUT [ 85.197136][ T5723] usb 5-1: device descriptor read/64, error -110 [ 85.402396][ T5910] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 85.409658][ T5910] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.449459][ T804] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 85.495298][ T5723] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.538933][ T5910] vhci_hcd vhci_hcd.0: Device attached [ 85.579327][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 85.614748][ T5930] veth1_macvtap: left promiscuous mode [ 85.632499][ T5930] macsec0: entered promiscuous mode [ 85.642552][ T804] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 85.644032][ T5930] macsec0: entered allmulticast mode [ 85.658164][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 85.675461][ T5723] usb 5-1: device descriptor read/64, error -32 [ 85.682597][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.706067][ T804] usb 2-1: Product: syz [ 85.710399][ T5903] openvswitch: netlink: Flow actions attr not present in new flow. [ 85.760919][ T804] usb 2-1: Manufacturer: syz [ 85.778681][ T5931] Zero length message leads to an empty skb [ 85.792620][ T804] usb 2-1: SerialNumber: syz [ 85.815628][ T5723] usb usb5-port1: attempt power cycle [ 85.835464][ T5744] usb 42-1: SetAddress Request (2) to port 0 [ 85.850668][ T5744] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 85.866087][ T5920] vhci_hcd: connection closed [ 85.874360][ T425] vhci_hcd vhci_hcd.4: stop threads [ 85.922840][ T425] vhci_hcd vhci_hcd.4: release socket [ 85.947101][ T425] vhci_hcd vhci_hcd.4: disconnect device [ 86.106787][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.195413][ T5723] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.249407][ T5723] usb 5-1: device descriptor read/8, error -32 [ 86.271271][ T804] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 86.282345][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 86.301479][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.328046][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.354073][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.385373][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.397414][ T5723] raw-gadget.1 gadget.4: failed to queue suspend event [ 86.413608][ T5723] raw-gadget.1 gadget.4: failed to queue reset event [ 86.427079][ T46] usb 4-1: config 0 descriptor?? [ 86.496266][ T46] hub 4-1:0.0: USB hub found [ 86.505503][ T5723] raw-gadget.1 gadget.4: failed to queue resume event [ 86.642080][ T5723] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.826305][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 86.834583][ T5723] usb 5-1: device descriptor read/8, error -32 [ 86.891504][ T24] cfg80211: failed to load regulatory.db [ 86.910235][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.916910][ T46] hub 4-1:0.0: 1 port detected [ 86.948665][ T5723] raw-gadget.1 gadget.4: failed to queue suspend event [ 86.967151][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.079945][ T5723] usb usb5-port1: unable to enumerate USB device [ 87.135545][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 87.135565][ T29] audit: type=1400 audit(87.090:245): avc: denied { create } for pid=5949 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.238374][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.267271][ T5350] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 87.378403][ T5350] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 87.484192][ T29] audit: type=1400 audit(87.130:246): avc: denied { listen } for pid=5949 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.735556][ T29] audit: type=1400 audit(87.140:247): avc: denied { accept } for pid=5949 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.771894][ T29] audit: type=1400 audit(87.490:248): avc: denied { write } for pid=5938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.801887][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.853483][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.866877][ T29] audit: type=1400 audit(87.830:249): avc: denied { write } for pid=5961 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.907385][ T29] audit: type=1400 audit(87.830:250): avc: denied { mounton } for pid=5960 comm="syz.0.32" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 87.957830][ T29] audit: type=1400 audit(87.870:251): avc: denied { ioctl } for pid=5960 comm="syz.0.32" path="socket:[8086]" dev="sockfs" ino=8086 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.022063][ T29] audit: type=1400 audit(87.910:252): avc: denied { read } for pid=5913 comm="syz.1.25" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.047833][ T24] hub 4-1:0.0: activate --> -90 [ 88.053091][ T5948] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 88.081521][ T29] audit: type=1400 audit(87.910:253): avc: denied { open } for pid=5913 comm="syz.1.25" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.180325][ T5969] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 88.186877][ T5969] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 88.195885][ T5969] vhci_hcd vhci_hcd.0: Device attached [ 88.235314][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.284413][ T29] audit: type=1400 audit(87.950:254): avc: denied { ioctl } for pid=5913 comm="syz.1.25" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.347858][ T5969] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 88.908836][ T5970] vhci_hcd: connection reset by peer [ 89.100907][ T12] vhci_hcd vhci_hcd.4: stop threads [ 89.160059][ T12] vhci_hcd vhci_hcd.4: release socket [ 89.228732][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 89.331445][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 89.342727][ T5977] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.411762][ T5975] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 89.418325][ T5975] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.427586][ T5975] vhci_hcd vhci_hcd.0: Device attached [ 89.551838][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 89.699666][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.862954][ T5350] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 89.870797][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.884252][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.971529][ T5350] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 90.069278][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.149429][ T5745] usb 38-1: SetAddress Request (2) to port 0 [ 90.191427][ T5976] vhci_hcd: connection closed [ 90.222738][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.298948][ T5745] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 90.381557][ T12] vhci_hcd vhci_hcd.2: stop threads [ 90.387170][ T12] vhci_hcd vhci_hcd.2: release socket [ 90.481639][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 90.677824][ T24] usb 2-1: USB disconnect, device number 2 [ 90.698700][ T5730] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 90.739646][ T5983] Invalid logical block size (4608) [ 90.895340][ T46] usb 1-1: config 0 descriptor?? [ 90.902604][ T24] usblp0: removed [ 90.987253][ T5744] usb 42-1: device descriptor read/8, error -110 [ 91.054237][ T5730] usb 4-1: USB disconnect, device number 3 [ 91.237674][ T5999] tipc: Started in network mode [ 91.243349][ T5999] tipc: Node identity 4, cluster identity 4711 [ 91.250561][ T5999] tipc: Node number set to 4 [ 91.302253][ T46] usb 1-1: can't set config #0, error -71 [ 91.400249][ T46] usb 1-1: USB disconnect, device number 6 [ 91.529639][ T6001] netlink: 44 bytes leftover after parsing attributes in process `syz.3.38'. [ 91.567259][ T5744] usb usb42-port1: attempt power cycle [ 91.667073][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.676622][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.958762][ T6015] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 91.965327][ T6015] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 91.974387][ T6015] vhci_hcd vhci_hcd.0: Device attached [ 92.020828][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 92.029685][ T6015] openvswitch: netlink: Flow actions attr not present in new flow. [ 92.219940][ T5744] usb usb42-port1: unable to enumerate USB device [ 92.715763][ T6016] vhci_hcd: connection reset by peer [ 92.725485][ T5350] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 92.731671][ T5350] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 92.732247][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.794263][ T48] vhci_hcd vhci_hcd.2: stop threads [ 92.887952][ T48] vhci_hcd vhci_hcd.2: release socket [ 93.021236][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 93.860855][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 93.860889][ T29] audit: type=1400 audit(93.530:268): avc: denied { bind } for pid=6018 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.945659][ T29] audit: type=1400 audit(93.530:269): avc: denied { name_bind } for pid=6018 comm="syz.0.42" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.989605][ T29] audit: type=1400 audit(93.530:270): avc: denied { node_bind } for pid=6018 comm="syz.0.42" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 94.613569][ T29] audit: type=1400 audit(93.540:271): avc: denied { listen } for pid=6018 comm="syz.0.42" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.634244][ T29] audit: type=1400 audit(93.540:272): avc: denied { write } for pid=6018 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.654575][ T29] audit: type=1400 audit(93.550:273): avc: denied { connect } for pid=6018 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.678686][ T29] audit: type=1400 audit(93.550:274): avc: denied { name_connect } for pid=6018 comm="syz.0.42" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 94.701354][ T29] audit: type=1400 audit(93.900:275): avc: denied { create } for pid=6018 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.721375][ T29] audit: type=1400 audit(93.910:276): avc: denied { ioctl } for pid=6018 comm="syz.0.42" path="socket:[8175]" dev="sockfs" ino=8175 ioctlcmd=0x42d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.749282][ T29] audit: type=1400 audit(93.950:277): avc: denied { search } for pid=6032 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.840731][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.997170][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.212915][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.265713][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.370780][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.746731][ T5745] usb 38-1: device descriptor read/8, error -110 [ 95.759642][ T5350] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 95.774891][ T5350] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 96.201952][ T5745] usb usb38-port1: attempt power cycle [ 96.595526][ T6081] Cannot find del_set index 1 as target [ 97.303395][ T6094] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 97.309934][ T6094] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.373996][ T6094] vhci_hcd vhci_hcd.0: Device attached [ 97.446615][ T5745] usb 38-1: SetAddress Request (5) to port 0 [ 97.473656][ T5745] usb 38-1: new SuperSpeed USB device number 5 using vhci_hcd [ 97.572197][ T6089] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.586439][ T6096] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 97.586502][ T6095] vhci_hcd: connection closed [ 97.629312][ T48] vhci_hcd vhci_hcd.2: stop threads [ 97.790777][ T48] vhci_hcd vhci_hcd.2: release socket [ 97.800435][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 98.333179][ T6111] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 99.707112][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 99.745372][ T29] audit: type=1400 audit(99.618:306): avc: denied { name_connect } for pid=6109 comm="syz.3.59" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 100.251100][ T29] audit: type=1400 audit(100.218:307): avc: denied { create } for pid=6099 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.269252][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.332819][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 100.396678][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.462106][ T29] audit: type=1400 audit(100.408:308): avc: denied { ioctl } for pid=6122 comm="syz.0.62" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 100.724412][ T6133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.60'. [ 101.565294][ T29] audit: type=1400 audit(101.498:309): avc: denied { write } for pid=6104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.692169][ T29] audit: type=1400 audit(101.658:310): avc: denied { write } for pid=6136 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.796263][ T5845] raw-gadget.1 gadget.4: failed to queue disconnect event [ 102.048534][ T6126] veth1_macvtap: left promiscuous mode [ 102.057867][ T29] audit: type=1800 audit(102.028:311): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.1.58" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 102.059198][ T6108] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 102.088393][ T6108] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 102.098599][ T6108] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 102.109545][ T29] audit: type=1400 audit(102.028:312): avc: denied { firmware_load } for pid=6102 comm="syz.1.58" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 102.113402][ T6126] macsec0: entered promiscuous mode [ 102.142104][ T6126] macsec0: entered allmulticast mode [ 102.157399][ T29] audit: type=1400 audit(102.068:313): avc: denied { firmware_load } for pid=6102 comm="syz.1.58" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 102.187928][ T6133] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 102.197334][ T6133] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 102.206937][ T6133] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 102.260900][ T29] audit: type=1800 audit(102.158:314): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.3.60" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 102.302697][ T29] audit: type=1400 audit(102.268:315): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 102.992342][ T5745] usb 38-1: device descriptor read/8, error -110 [ 103.032869][ T6147] Cannot find del_set index 1 as target [ 103.651018][ T6154] netlink: 48 bytes leftover after parsing attributes in process `syz.4.66'. [ 104.330924][ T6154] syz.4.66 (6154) used greatest stack depth: 18800 bytes left [ 104.622364][ T5745] usb usb38-port1: unable to enumerate USB device [ 105.097770][ T5745] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.639245][ T5745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.795299][ T5745] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.878025][ T5745] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.893329][ T5745] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 105.902665][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.915431][ T5745] usb 3-1: Product: syz [ 105.924927][ T5745] usb 3-1: Manufacturer: syz [ 105.933039][ T5745] usb 3-1: SerialNumber: syz [ 105.952270][ T5745] usb 3-1: config 0 descriptor?? [ 106.046097][ T5745] adutux 3-1:0.0: interrupt endpoints not found [ 106.054477][ T6175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 106.061011][ T6175] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 106.069044][ T6175] vhci_hcd vhci_hcd.0: Device attached [ 106.078813][ T6175] openvswitch: netlink: Flow actions attr not present in new flow. [ 106.270755][ T6178] vhci_hcd: connection closed [ 106.276588][ T13] vhci_hcd vhci_hcd.1: stop threads [ 106.323974][ T13] vhci_hcd vhci_hcd.1: release socket [ 106.753225][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 106.761685][ T29] audit: type=1400 audit(106.728:316): avc: denied { create } for pid=6183 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.785384][ T5731] usb 36-1: SetAddress Request (2) to port 0 [ 106.792282][ T6186] netlink: 52 bytes leftover after parsing attributes in process `syz.3.75'. [ 106.803718][ T5731] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 106.835872][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.866001][ T5731] usb 36-1: enqueue for inactive port 0 [ 106.902733][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.607186][ T5731] usb usb36-port1: attempt power cycle [ 107.902082][ T6198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.78'. [ 107.923246][ T29] audit: type=1400 audit(107.588:317): avc: denied { create } for pid=6194 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.953556][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.961495][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.984716][ T29] audit: type=1400 audit(107.588:318): avc: denied { write } for pid=6194 comm="syz.3.77" path="socket:[10809]" dev="sockfs" ino=10809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.100802][ T5744] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.171519][ T5730] usb 3-1: USB disconnect, device number 2 [ 109.408361][ T5731] usb usb36-port1: unable to enumerate USB device [ 109.425301][ T5744] usb 5-1: Using ep0 maxpacket: 32 [ 109.439918][ T5744] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 44032, setting to 1024 [ 109.455002][ T5744] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 109.465131][ T5744] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.473961][ T5744] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 109.536077][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.567684][ T29] audit: type=1400 audit(109.532:319): avc: denied { connect } for pid=6213 comm="syz.3.82" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.614995][ T5744] usb 5-1: Product: syz [ 109.643080][ T5744] usb 5-1: Manufacturer: syz [ 109.662373][ T5744] usb 5-1: SerialNumber: syz [ 109.690245][ T6219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 109.760536][ T5744] usb 5-1: config 0 descriptor?? [ 109.787522][ T6202] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 109.848413][ T6219] veth1_to_team: entered promiscuous mode [ 109.860634][ T6219] gretap0: entered promiscuous mode [ 109.867610][ T6219] debugfs: 'hsr1' already exists in 'hsr' [ 109.873854][ T6219] Cannot create hsr debugfs directory [ 109.890295][ T6219] hsr1: entered promiscuous mode [ 111.225258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.255244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.359985][ T5744] gs_usb 5-1:0.0: Couldn't get device config: (err=-110) [ 111.422822][ T5744] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 111.467915][ T5744] usb 5-1: USB disconnect, device number 6 [ 111.988880][ T29] audit: type=1400 audit(111.952:320): avc: denied { create } for pid=6232 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.130559][ T29] audit: type=1400 audit(112.082:321): avc: denied { setopt } for pid=6232 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.270625][ T6233] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 113.460365][ T6247] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 113.466920][ T6247] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 113.474836][ T6247] vhci_hcd vhci_hcd.0: Device attached [ 113.532198][ T6247] openvswitch: netlink: Flow actions attr not present in new flow. [ 113.765719][ T5709] usb 34-1: SetAddress Request (2) to port 0 [ 113.829751][ T5709] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 114.219512][ T6248] vhci_hcd: connection reset by peer [ 114.235904][ T5716] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.288605][ T140] vhci_hcd vhci_hcd.0: stop threads [ 114.376715][ T140] vhci_hcd vhci_hcd.0: release socket [ 114.442590][ T140] vhci_hcd vhci_hcd.0: disconnect device [ 114.543840][ T5716] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.641590][ T5716] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.788606][ T5716] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.805554][ T6255] process 'syz.4.92' launched './file0' with NULL argv: empty string added [ 114.819368][ T29] audit: type=1400 audit(114.772:322): avc: denied { execute } for pid=6253 comm="syz.4.92" name="file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.846127][ T29] audit: type=1400 audit(114.772:323): avc: denied { execute_no_trans } for pid=6253 comm="syz.4.92" path="/12/file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.850250][ T5716] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 114.918936][ T29] audit: type=1400 audit(114.882:324): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.925654][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.965455][ T29] audit: type=1400 audit(114.882:325): avc: denied { open } for pid=5617 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.984300][ T5716] usb 2-1: Product: syz [ 115.008178][ T5716] usb 2-1: Manufacturer: syz [ 115.009726][ T29] audit: type=1400 audit(114.882:326): avc: denied { ioctl } for pid=5617 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.020105][ T5716] usb 2-1: SerialNumber: syz [ 115.071489][ T5716] usb 2-1: config 0 descriptor?? [ 115.086956][ T5716] adutux 2-1:0.0: interrupt endpoints not found [ 115.125479][ T5744] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.255512][ T5731] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.295494][ T5744] usb 1-1: Using ep0 maxpacket: 32 [ 115.302491][ T5744] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.302518][ T5744] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.302553][ T5744] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.302577][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.434444][ T5744] usb 1-1: config 0 descriptor?? [ 115.495512][ T5731] usb 3-1: Using ep0 maxpacket: 8 [ 115.497103][ T5731] usb 3-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 115.497146][ T5731] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.497176][ T5731] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.497199][ T5731] usb 3-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 115.497227][ T5731] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.497258][ T5731] usb 3-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 115.497282][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.517373][ T5731] usb 3-1: config 0 descriptor?? [ 115.640771][ T6265] FAULT_INJECTION: forcing a failure. [ 115.640771][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 115.640818][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: syz.4.95 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.640834][ T6265] Tainted: [L]=SOFTLOCKUP [ 115.640837][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.640844][ T6265] Call Trace: [ 115.640848][ T6265] [ 115.640852][ T6265] dump_stack_lvl+0x100/0x190 [ 115.640872][ T6265] should_fail_ex.cold+0x5/0xa [ 115.640888][ T6265] ? io_cache_alloc_new+0x45/0xe0 [ 115.640901][ T6265] should_failslab+0xc2/0x120 [ 115.640914][ T6265] __kmalloc_noprof+0xe0/0x850 [ 115.640934][ T6265] io_cache_alloc_new+0x45/0xe0 [ 115.640946][ T6265] io_rsrc_node_alloc+0x221/0x2b0 [ 115.640965][ T6265] io_sqe_files_register+0x2a7/0x970 [ 115.640978][ T6265] ? __pfx_io_sqe_files_register+0x10/0x10 [ 115.640995][ T6265] __do_sys_io_uring_register+0xf8e/0x1bd0 [ 115.641015][ T6265] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 115.641032][ T6265] ? __fget_files+0x21f/0x3d0 [ 115.641054][ T6265] ? fput+0x79/0x100 [ 115.641069][ T6265] ? ksys_write+0x1ac/0x250 [ 115.641081][ T6265] ? __pfx_ksys_write+0x10/0x10 [ 115.641095][ T6265] ? rcu_is_watching+0x12/0xc0 [ 115.641114][ T6265] do_syscall_64+0x115/0x870 [ 115.641128][ T6265] ? clear_bhb_loop+0x40/0x90 [ 115.641144][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.641162][ T6265] RIP: 0033:0x7f5ea199ce59 [ 115.641179][ T6265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.641195][ T6265] RSP: 002b:00007f5ea27b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 115.641206][ T6265] RAX: ffffffffffffffda RBX: 00007f5ea1c15fa0 RCX: 00007f5ea199ce59 [ 115.641213][ T6265] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000005 [ 115.641220][ T6265] RBP: 00007f5ea27b9090 R08: 0000000000000000 R09: 0000000000000000 [ 115.641226][ T6265] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 115.641232][ T6265] R13: 00007f5ea1c16038 R14: 00007f5ea1c15fa0 R15: 00007ffc20405ce8 [ 115.641248][ T6265] [ 115.824716][ T6268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.259683][ T5731] wacom 0003:056A:010E.0001: unbalanced collection at end of report description [ 116.272953][ T6268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.281429][ T5731] wacom 0003:056A:010E.0001: parse failed [ 116.296785][ T5731] wacom 0003:056A:010E.0001: probe with driver wacom failed with error -22 [ 116.311770][ T29] audit: type=1400 audit(116.272:327): avc: denied { read write } for pid=6273 comm="syz.3.97" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 116.338119][ T6274] 9p: Bad value for 'rfdno' [ 116.347213][ T29] audit: type=1400 audit(116.272:328): avc: denied { open } for pid=6273 comm="syz.3.97" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 116.348729][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.381942][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 116.397539][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.613331][ T6275] ISOFS: Unable to identify CD-ROM format. [ 116.905325][ T29] audit: type=1400 audit(116.842:329): avc: denied { watch watch_reads } for pid=6280 comm="syz.4.98" path="/15" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.118066][ T5731] usb 3-1: USB disconnect, device number 3 [ 117.390799][ T5805] usb 2-1: USB disconnect, device number 3 [ 117.485940][ T5745] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.843844][ T5716] usb 1-1: USB disconnect, device number 7 [ 117.861977][ T5745] usb 4-1: Using ep0 maxpacket: 32 [ 117.946150][ T6302] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 117.952694][ T6302] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.960625][ T6302] vhci_hcd vhci_hcd.0: Device attached [ 118.018659][ T6302] openvswitch: netlink: Flow actions attr not present in new flow. [ 118.051361][ T5745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.179866][ T5745] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 118.307144][ T5745] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 118.411401][ T5731] usb 42-1: SetAddress Request (6) to port 0 [ 118.479695][ T5731] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 118.535065][ T5745] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 118.628007][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.717232][ T5745] usb 4-1: Product: syz [ 118.751141][ T6303] vhci_hcd: connection reset by peer [ 118.769044][ T5745] usb 4-1: Manufacturer: syz [ 118.836838][ T5745] usb 4-1: SerialNumber: syz [ 118.965343][ T5709] usb 34-1: device descriptor read/8, error -110 [ 118.972944][ T48] vhci_hcd vhci_hcd.4: stop threads [ 119.008974][ T48] vhci_hcd vhci_hcd.4: release socket [ 119.600050][ T48] vhci_hcd vhci_hcd.4: disconnect device [ 119.859609][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.005927][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.061457][ T29] audit: type=1400 audit(120.022:330): avc: denied { write } for pid=6319 comm="syz.2.106" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.210738][ T6323] netlink: 'syz.0.107': attribute type 3 has an invalid length. [ 120.218730][ T6323] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 120.226487][ T6323] netlink: 224 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.495815][ T5709] usb usb34-port1: attempt power cycle [ 120.564685][ T5745] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 120.579032][ T5745] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 120.766085][ T6328] Invalid logical block size (4608) [ 120.795349][ T29] audit: type=1400 audit(120.742:331): avc: denied { read } for pid=6330 comm="syz.4.110" name="usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.833117][ T29] audit: type=1400 audit(120.742:332): avc: denied { open } for pid=6330 comm="syz.4.110" path="/dev/usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.864014][ T29] audit: type=1400 audit(120.742:333): avc: denied { ioctl } for pid=6330 comm="syz.4.110" path="/dev/usbmon7" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.912274][ T5745] usb 4-1: USB disconnect, device number 4 [ 121.124064][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.193057][ T5709] usb usb34-port1: unable to enumerate USB device [ 121.430890][ T29] audit: type=1400 audit(121.392:334): avc: denied { write } for pid=6342 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.727574][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.735165][ T5716] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 123.657384][ T5731] usb 42-1: device descriptor read/8, error -110 [ 123.671577][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.718433][ T5716] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.731396][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.735532][ T5730] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.740497][ T5716] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.775693][ T5716] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.794822][ T9] usb 5-1: string descriptor 0 read error: -71 [ 123.801349][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.813382][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.828244][ T5716] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 123.853889][ T9] usb 5-1: can't set config #1, error -71 [ 123.862544][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.876422][ T9] usb 5-1: USB disconnect, device number 7 [ 123.882751][ T5716] usb 1-1: Product: syz [ 123.890031][ T5716] usb 1-1: Manufacturer: syz [ 123.902884][ T5716] usb 1-1: SerialNumber: syz [ 123.925591][ T5730] usb 4-1: Using ep0 maxpacket: 32 [ 123.932151][ T5716] usb 1-1: config 0 descriptor?? [ 123.972682][ T5730] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.053237][ T29] audit: type=1400 audit(123.992:335): avc: denied { ioctl } for pid=6352 comm="syz.2.117" path="socket:[9768]" dev="sockfs" ino=9768 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.096291][ T5730] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.143307][ T5731] usb usb42-port1: attempt power cycle [ 124.173260][ T5730] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.250291][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.394797][ T6357] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 124.401362][ T6357] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 124.411151][ T6357] vhci_hcd vhci_hcd.0: Device attached [ 124.459006][ T5716] usb 1-1: can't set config #0, error -71 [ 124.491447][ T6357] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.545326][ T5731] usb 42-1: SetAddress Request (8) to port 0 [ 124.693403][ T5716] usb 1-1: USB disconnect, device number 8 [ 124.859174][ T6358] vhci_hcd: connection closed [ 124.901316][ T13] vhci_hcd vhci_hcd.4: stop threads [ 125.057717][ T13] vhci_hcd vhci_hcd.4: release socket [ 125.142091][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 125.332021][ T5731] usb 42-1: new SuperSpeed USB device number 8 using vhci_hcd [ 125.354486][ T5730] usb 4-1: config 0 descriptor?? [ 125.359588][ T5731] usb 42-1: enqueue for inactive port 0 [ 125.367221][ T5730] usb 4-1: can't set config #0, error -71 [ 125.380779][ T5730] usb 4-1: USB disconnect, device number 5 [ 125.400358][ T6364] ======================================================= [ 125.400358][ T6364] WARNING: The mand mount option has been deprecated and [ 125.400358][ T6364] and is ignored by this kernel. Remove the mand [ 125.400358][ T6364] option from the mount to silence this warning. [ 125.400358][ T6364] ======================================================= [ 125.448186][ T6364] FAT-fs (nullb0): bogus number of reserved sectors [ 125.455548][ T6364] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 125.471604][ T29] audit: type=1400 audit(125.432:336): avc: denied { mount } for pid=6363 comm="syz.2.121" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 125.563174][ T29] audit: type=1400 audit(125.472:337): avc: denied { mounton } for pid=6363 comm="syz.2.121" path="/27/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 125.640708][ T29] audit: type=1400 audit(125.602:338): avc: denied { append } for pid=6363 comm="syz.2.121" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.731485][ T29] audit: type=1400 audit(125.662:339): avc: denied { block_suspend } for pid=6363 comm="syz.2.121" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.761036][ T5731] usb usb42-port1: unable to enumerate USB device [ 126.176745][ T5730] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.495457][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 128.506901][ T5730] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 44032, setting to 1024 [ 128.527158][ T5730] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 128.555353][ T5730] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.564969][ T29] audit: type=1400 audit(128.522:340): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 128.577794][ T5730] usb 1-1: string descriptor 0 read error: -71 [ 128.614028][ T5730] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 128.633587][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.664846][ T5730] usb 1-1: config 0 descriptor?? [ 128.694562][ T5730] usb 1-1: can't set config #0, error -71 [ 128.738842][ T6394] FAULT_INJECTION: forcing a failure. [ 128.738842][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.752563][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.3.129 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.752590][ T6394] Tainted: [L]=SOFTLOCKUP [ 128.752597][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.752607][ T6394] Call Trace: [ 128.752613][ T6394] [ 128.752619][ T6394] dump_stack_lvl+0x100/0x190 [ 128.752647][ T6394] should_fail_ex.cold+0x5/0xa [ 128.752676][ T6394] _copy_from_user+0x2e/0xd0 [ 128.752703][ T6394] io_sqe_files_register+0x219/0x970 [ 128.752728][ T6394] ? __pfx_io_sqe_files_register+0x10/0x10 [ 128.752758][ T6394] __do_sys_io_uring_register+0xf8e/0x1bd0 [ 128.752795][ T6394] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 128.752826][ T6394] ? __fget_files+0x21f/0x3d0 [ 128.752858][ T6394] ? fput+0x79/0x100 [ 128.752885][ T6394] ? ksys_write+0x1ac/0x250 [ 128.752907][ T6394] ? __pfx_ksys_write+0x10/0x10 [ 128.752932][ T6394] ? rcu_is_watching+0x12/0xc0 [ 128.752964][ T6394] do_syscall_64+0x115/0x870 [ 128.752989][ T6394] ? clear_bhb_loop+0x40/0x90 [ 128.753013][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.753034][ T6394] RIP: 0033:0x7fe12139ce59 [ 128.753051][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.753070][ T6394] RSP: 002b:00007fe12223c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 128.753088][ T6394] RAX: ffffffffffffffda RBX: 00007fe121615fa0 RCX: 00007fe12139ce59 [ 128.753101][ T6394] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000005 [ 128.753113][ T6394] RBP: 00007fe12223c090 R08: 0000000000000000 R09: 0000000000000000 [ 128.753131][ T6394] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 128.753142][ T6394] R13: 00007fe121616038 R14: 00007fe121615fa0 R15: 00007ffc0a4dc0e8 [ 128.753171][ T6394] [ 128.774725][ T5730] usb 1-1: USB disconnect, device number 9 [ 129.135317][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.145572][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 129.298073][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.336014][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 129.358040][ T6403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.383321][ T6401] ISOFS: Unable to identify CD-ROM format. [ 129.387601][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.439489][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 129.443457][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.520893][ T29] audit: type=1400 audit(129.482:341): avc: denied { bind } for pid=6402 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.546752][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 129.557652][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.565355][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.576498][ T29] audit: type=1400 audit(129.512:342): avc: denied { write } for pid=6402 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.604892][ T24] usb 5-1: Product: syz [ 129.628212][ T24] usb 5-1: Manufacturer: syz [ 129.658905][ T24] usb 5-1: SerialNumber: syz [ 129.710894][ T24] usb 5-1: config 0 descriptor?? [ 129.739703][ T24] adutux 5-1:0.0: interrupt endpoints not found [ 129.766587][ T29] audit: type=1400 audit(129.722:343): avc: denied { write } for pid=6406 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.851326][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.090607][ T29] audit: type=1400 audit(130.052:344): avc: denied { create } for pid=6413 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 130.110147][ T6416] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 130.119107][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.083666][ T29] audit: type=1400 audit(130.072:345): avc: denied { write } for pid=6413 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 131.471635][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.552278][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.667439][ T29] audit: type=1400 audit(131.552:346): avc: denied { read } for pid=6415 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.802325][ T6416] bond1: entered promiscuous mode [ 131.827921][ T6416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.023106][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.054266][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.069457][ T6421] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 132.079022][ T6421] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 132.088659][ T6421] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 132.120923][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.134194][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.144198][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.309860][ T6425] sit1: entered allmulticast mode [ 132.322725][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.331254][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.341187][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.352403][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.363763][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.649045][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.149226][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160255][ T6422] bond1: (slave bridge1): making interface the new active one [ 134.393742][ T6422] bridge1: entered promiscuous mode [ 134.414417][ T5621] Bluetooth: hci3: command tx timeout [ 134.433362][ T5730] usb 5-1: USB disconnect, device number 8 [ 134.442355][ T6422] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 134.526562][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.132615][ T13] bridge_slave_1: left allmulticast mode [ 136.401906][ T13] bridge_slave_1: left promiscuous mode [ 136.435509][ T5805] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.483895][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.560551][ T5621] Bluetooth: hci3: command tx timeout [ 136.649615][ T13] bridge_slave_0: left allmulticast mode [ 136.675326][ T13] bridge_slave_0: left promiscuous mode [ 136.685125][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.735716][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 136.752078][ T5805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.773099][ T5805] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.794588][ T29] audit: type=1400 audit(136.752:347): avc: denied { map } for pid=6470 comm="syz.3.148" path="socket:[10150]" dev="sockfs" ino=10150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.841550][ T5805] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.855840][ T29] audit: type=1400 audit(136.752:348): avc: denied { read } for pid=6470 comm="syz.3.148" path="socket:[10150]" dev="sockfs" ino=10150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.886584][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.910288][ T5805] usb 5-1: config 0 descriptor?? [ 136.948570][ T5805] hub 5-1:0.0: bad descriptor, ignoring hub [ 136.960123][ T5805] hub 5-1:0.0: probe with driver hub failed with error -5 [ 136.991107][ T5805] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 137.190452][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 137.428973][ T29] audit: type=1400 audit(137.322:349): avc: denied { create } for pid=6478 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 137.519653][ T29] audit: type=1400 audit(137.332:350): avc: denied { setopt } for pid=6478 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 137.943268][ T6498] xt_policy: output policy not valid in PREROUTING and INPUT [ 138.647215][ T5621] Bluetooth: hci3: command tx timeout [ 138.720585][ T29] audit: type=1400 audit(138.682:351): avc: denied { write } for pid=6469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.588237][ T29] audit: type=1400 audit(140.552:352): avc: denied { write } for pid=6509 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.589808][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.679215][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.688417][ T5744] usb 5-1: USB disconnect, device number 9 [ 140.717950][ T13] bond0 (unregistering): Released all slaves [ 140.736697][ T5621] Bluetooth: hci3: command tx timeout [ 140.771066][ T6497] tipc: Started in network mode [ 140.776053][ T6497] tipc: Node identity 4, cluster identity 4711 [ 140.782205][ T6497] tipc: Node number set to 4 [ 140.825143][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 140.887533][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'. [ 141.045309][ T29] audit: type=1400 audit(140.982:353): avc: denied { create } for pid=6515 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.722933][ T29] audit: type=1400 audit(141.682:354): avc: denied { ioctl } for pid=6515 comm="syz.0.155" path="socket:[10193]" dev="sockfs" ino=10193 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.074847][ T29] audit: type=1400 audit(142.032:355): avc: denied { append } for pid=6529 comm="syz.1.157" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 142.267564][ T29] audit: type=1400 audit(142.032:356): avc: denied { create } for pid=6529 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 142.425013][ T6516] netlink: 68 bytes leftover after parsing attributes in process `syz.0.155'. [ 142.441558][ T29] audit: type=1400 audit(142.062:357): avc: denied { bind } for pid=6529 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.580368][ T29] audit: type=1400 audit(142.382:358): avc: denied { write } for pid=6515 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.712127][ T29] audit: type=1400 audit(142.382:359): avc: denied { nlmsg_write } for pid=6515 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.990004][ T6539] netlink: 'syz.4.154': attribute type 3 has an invalid length. [ 143.045186][ T6539] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 143.090739][ T6539] netlink: 232 bytes leftover after parsing attributes in process `syz.4.154'. [ 143.234695][ T29] audit: type=1400 audit(143.192:360): avc: denied { write } for pid=6522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.342494][ T6551] xt_policy: output policy not valid in PREROUTING and INPUT [ 143.747575][ T29] audit: type=1400 audit(143.712:361): avc: denied { write } for pid=6552 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.101146][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 144.354808][ T29] audit: type=1400 audit(144.312:362): avc: denied { ioctl } for pid=6565 comm="syz.4.161" path="socket:[12314]" dev="sockfs" ino=12314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.395872][ T5744] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 144.407100][ T13] hsr_slave_0: left promiscuous mode [ 144.423218][ T13] hsr_slave_1: left promiscuous mode [ 144.434517][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.446562][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.462392][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.470473][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.573125][ T13] veth0_macvtap: left promiscuous mode [ 144.582422][ T5744] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 144.595983][ T13] veth1_vlan: left promiscuous mode [ 144.601475][ T5744] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 144.612722][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.622655][ T13] veth0_vlan: left promiscuous mode [ 144.633440][ T5744] usb 1-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 144.647200][ T5745] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 144.679275][ T5744] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 144.700537][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.719006][ T5744] usb 1-1: SerialNumber: syz [ 144.749580][ T5744] cdc_acm 1-1:253.0: Zero length descriptor references [ 144.759946][ T5744] cdc_acm 1-1:253.0: probe with driver cdc_acm failed with error -22 [ 144.777913][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.789572][ T5744] usb-storage 1-1:253.0: USB Mass Storage device detected [ 144.799587][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.819124][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 144.822369][ T5745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.844087][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.854881][ T5745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.875838][ T24] usb 4-1: config 0 descriptor?? [ 144.887568][ T5744] usb-storage 1-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 144.900378][ T5745] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 144.911962][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.926207][ T5745] usb 5-1: config 0 descriptor?? [ 144.954142][ T29] audit: type=1400 audit(144.912:363): avc: denied { write } for pid=6556 comm="syz.0.160" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.104102][ T29] audit: type=1400 audit(145.062:364): avc: denied { create } for pid=6574 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.199691][ T6557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.218990][ T6557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.278070][ T13] team0 (unregistering): Port device team_slave_1 removed [ 145.337152][ T24] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 145.357718][ T5745] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 145.368739][ T5745] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 145.369582][ T13] team0 (unregistering): Port device team_slave_0 removed [ 145.378924][ T5745] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 145.391985][ T5745] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 145.400514][ T5745] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 5/7 [ 145.413700][ T5745] arvo 0003:1E7D:30D4.0003: parse failed [ 145.419926][ T5745] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22 [ 145.513952][ T24] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 145.540399][ T24] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 145.597573][ T24] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -71 [ 145.633521][ T24] usb 4-1: USB disconnect, device number 6 [ 145.809182][ T5745] usb 1-1: USB disconnect, device number 10 [ 146.599179][ T5731] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.015242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 147.049156][ T5731] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 147.065969][ T5731] usb 4-1: config 1 has no interface number 0 [ 147.072880][ T5731] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 147.089796][ T5731] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 147.588365][ T5731] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.630606][ T5731] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 147.642605][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.651610][ T5731] usb 4-1: Product: syz [ 147.656327][ T5731] usb 4-1: Manufacturer: syz [ 147.661445][ T5731] usb 4-1: SerialNumber: syz [ 147.671846][ T5810] usb 5-1: USB disconnect, device number 10 [ 147.739063][ T6589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.221926][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 148.231989][ T6616] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.376846][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.384770][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 149.384786][ T29] audit: type=1400 audit(149.232:368): avc: denied { remount } for pid=6588 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.425951][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.518514][ T6429] bridge_slave_0: entered allmulticast mode [ 149.535239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 149.579158][ T5731] usb 4-1: Error in usbnet_get_endpoints (-71) [ 149.895249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 149.921041][ T29] audit: type=1400 audit(149.232:369): avc: denied { mounton } for pid=6588 comm="syz.3.165" path="/32/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 149.956742][ T6429] bridge_slave_0: entered promiscuous mode [ 149.987403][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.994579][ T29] audit: type=1400 audit(149.942:370): avc: denied { write } for pid=6584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.025375][ T5731] usb 4-1: USB disconnect, device number 7 [ 150.060819][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.092388][ T6429] bridge_slave_1: entered allmulticast mode [ 150.156688][ T6429] bridge_slave_1: entered promiscuous mode [ 150.354035][ T29] audit: type=1400 audit(150.312:371): avc: denied { write } for pid=6631 comm="syz.3.170" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.498921][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.523487][ T29] audit: type=1400 audit(150.432:372): avc: denied { write } for pid=6630 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.137099][ T29] audit: type=1400 audit(150.512:373): avc: denied { map } for pid=6632 comm="syz.4.171" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 151.189459][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.971025][ T29] audit: type=1400 audit(150.662:374): avc: denied { read write } for pid=6632 comm="syz.4.171" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.029344][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 152.075741][ T29] audit: type=1400 audit(150.662:375): avc: denied { open } for pid=6632 comm="syz.4.171" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.097478][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 152.144195][ T6429] team0: Port device team_slave_0 added [ 152.164204][ T29] audit: type=1400 audit(151.062:376): avc: denied { read append } for pid=6632 comm="syz.4.171" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.189803][ T6651] netlink: 11 bytes leftover after parsing attributes in process `syz.0.174'. [ 152.208942][ T6429] team0: Port device team_slave_1 added [ 152.261079][ T29] audit: type=1400 audit(151.062:377): avc: denied { open } for pid=6632 comm="syz.4.171" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.915378][ T5805] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 152.946483][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.975876][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.036329][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.071595][ T6659] Cannot find del_set index 1 as target [ 153.079890][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.100022][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.144352][ T5805] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.157046][ T5805] usb 1-1: config 0 has no interface number 0 [ 153.173562][ T5805] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 153.195104][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.206461][ T5805] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 153.234115][ T5805] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 153.264751][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.298414][ T5805] usb 1-1: config 0 descriptor?? [ 153.324877][ T6653] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.371129][ T5805] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 153.401457][ T6429] hsr_slave_0: entered promiscuous mode [ 153.436752][ T6429] hsr_slave_1: entered promiscuous mode [ 153.470883][ T6429] debugfs: 'hsr0' already exists in 'hsr' [ 153.485487][ T6429] Cannot create hsr debugfs directory [ 153.618347][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 153.692781][ T5805] usb 1-1: USB disconnect, device number 11 [ 154.064691][ T6675] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 154.071247][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 154.107731][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 154.271254][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 154.281108][ T6675] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.510674][ T6676] vhci_hcd: connection closed [ 155.574454][ T3369] vhci_hcd vhci_hcd.4: stop threads [ 155.627295][ T3369] vhci_hcd vhci_hcd.4: release socket [ 155.651319][ T3369] vhci_hcd vhci_hcd.4: disconnect device [ 156.430286][ T6685] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 156.436833][ T6685] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 156.446488][ T6685] vhci_hcd vhci_hcd.0: Device attached [ 156.525561][ T6688] vhci_hcd: connection closed [ 156.547650][ T48] vhci_hcd vhci_hcd.1: stop threads [ 156.850893][ T48] vhci_hcd vhci_hcd.1: release socket [ 157.041042][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 157.672046][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 157.672079][ T29] audit: type=1400 audit(157.632:382): avc: denied { write } for pid=6662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.884596][ T6699] xt_policy: output policy not valid in PREROUTING and INPUT [ 158.684298][ T6429] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.759508][ T6429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.806216][ T6429] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.898536][ T29] audit: type=1400 audit(158.832:383): avc: denied { write } for pid=6703 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.822223][ T6429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.876349][ T6429] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.958273][ T6429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.011564][ T6429] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.099494][ T6429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.127723][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 160.134399][ T6724] Cannot find del_set index 1 as target [ 160.529545][ T5810] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 161.034082][ T6745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.191'. [ 162.285239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 162.344673][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 162.386564][ T5810] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 44032, setting to 1024 [ 162.436740][ T5810] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 162.446846][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.465090][ T5810] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 162.490454][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.529343][ T5810] usb 1-1: Product: syz [ 162.538011][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.539031][ T29] audit: type=1400 audit(162.492:384): avc: denied { ioctl } for pid=6749 comm="syz.4.192" path="socket:[11793]" dev="sockfs" ino=11793 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.546251][ T5810] usb 1-1: Manufacturer: syz [ 162.575234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 162.670764][ T5810] usb 1-1: SerialNumber: syz [ 162.743257][ T5810] usb 1-1: config 0 descriptor?? [ 162.806716][ T29] audit: type=1400 audit(162.742:385): avc: denied { bind } for pid=6749 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.816549][ T6737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.869827][ T29] audit: type=1400 audit(162.752:386): avc: denied { node_bind } for pid=6749 comm="syz.4.192" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 163.115241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 163.165242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 163.264856][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.463113][ T5810] usb 1-1: can't set config #0, error -71 [ 163.489094][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.496990][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.512533][ T5810] usb 1-1: USB disconnect, device number 12 [ 163.534417][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.542293][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.721232][ T29] audit: type=1400 audit(163.682:387): avc: denied { load_policy } for pid=6758 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 163.803363][ T6760] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 163.832886][ T6763] loop2: detected capacity change from 0 to 7 [ 163.851348][ T6760] SELinux: failed to load policy [ 163.979628][ T6763] Dev loop2: unable to read RDB block 7 [ 164.026147][ T6763] loop2: unable to read partition table [ 164.046386][ T6763] loop2: partition table beyond EOD, truncated [ 164.054114][ T6763] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.058602][ T6759] warning: `syz.1.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 164.121188][ T6772] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 164.162703][ T6772] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.197'. [ 165.460908][ T6787] netlink: 48 bytes leftover after parsing attributes in process `syz.3.199'. [ 165.995240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.048735][ T29] audit: type=1400 audit(167.012:388): avc: denied { read } for pid=6794 comm="syz.3.201" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.240709][ T6797] raw_sendmsg: syz.3.201 forgot to set AF_INET. Fix it! [ 167.448675][ T29] audit: type=1400 audit(167.012:389): avc: denied { open } for pid=6794 comm="syz.3.201" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.814710][ T29] audit: type=1400 audit(167.052:390): avc: denied { ioctl } for pid=6794 comm="syz.3.201" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.839739][ T29] audit: type=1400 audit(167.052:391): avc: denied { set_context_mgr } for pid=6794 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 167.882362][ T29] audit: type=1400 audit(167.152:392): avc: denied { map } for pid=6794 comm="syz.3.201" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.948634][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.957043][ T29] audit: type=1400 audit(167.192:393): avc: denied { call } for pid=6794 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 167.957092][ T29] audit: type=1400 audit(167.332:394): avc: denied { setopt } for pid=6785 comm="syz.1.200" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.399955][ T29] audit: type=1400 audit(168.362:395): avc: denied { write } for pid=6811 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.581117][ T6813] wg1 speed is unknown, defaulting to 1000 [ 168.598069][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 168.612325][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.204'. [ 273.705249][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 273.712258][ C0] rcu: 1-...!: (1 GPs behind) idle=2904/1/0x4000000000000000 softirq=22289/22289 fqs=0 [ 273.722675][ C0] rcu: (detected by 0, t=10505 jiffies, g=20257, q=505 ncpus=2) [ 273.730415][ C0] Sending NMI from CPU 0 to CPUs 1: [ 273.730459][ C1] NMI backtrace for cpu 1 [ 273.730485][ C1] CPU: 1 UID: 0 PID: 6821 Comm: syz.1.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.730509][ C1] Tainted: [L]=SOFTLOCKUP [ 273.730516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.730531][ C1] RIP: 0010:__remove_hrtimer+0x130/0x440 [ 273.730570][ C1] Code: 48 8d 75 58 48 89 df 4c 8b 73 18 e8 da 51 90 09 31 ff 41 89 c7 89 c6 e8 ce 31 14 00 45 84 ff 0f 85 8e 00 00 00 e8 70 37 14 00 <48> 8d 45 08 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df [ 273.730587][ C1] RSP: 0018:ffffc90000a08e40 EFLAGS: 00000046 [ 273.730601][ C1] RAX: 0000000080010002 RBX: ffff88802b6bc300 RCX: ffffffff81f478e2 [ 273.730613][ C1] RDX: ffff888028530000 RSI: ffffffff81f478f0 RDI: ffff888028530000 [ 273.730638][ C1] RBP: ffff8880b8528600 R08: 0000000000000001 R09: 0000000000000000 [ 273.730648][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 273.730659][ C1] R13: ffff8880b85284c0 R14: 0000000000000000 R15: 0000000000000000 [ 273.730670][ C1] FS: 00007f799963f6c0(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 273.730687][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.730699][ C1] CR2: 0000000000000000 CR3: 00000000663fd000 CR4: 00000000003526f0 [ 273.730710][ C1] Call Trace: [ 273.730716][ C1] [ 273.730733][ C1] __hrtimer_run_queues+0x359/0xa00 [ 273.730768][ C1] hrtimer_interrupt+0x3e5/0x940 [ 273.730800][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 273.730826][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 273.730849][ C1] [ 273.730855][ C1] [ 273.730861][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.730881][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 273.730903][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 2d 58 f6 48 89 df e8 9e 7d 58 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 49 48 f6 65 8b 05 9e 6d 7d 08 85 c0 74 16 5b [ 273.730919][ C1] RSP: 0018:ffffc900037b7cf0 EFLAGS: 00000246 [ 273.730933][ C1] RAX: 0000000000000002 RBX: ffffffff8f5402b8 RCX: 0000000000000000 [ 273.730944][ C1] RDX: 0000000000000000 RSI: ffffffff8df0f8f1 RDI: ffffffff8c1c4680 [ 273.730955][ C1] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 273.730965][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000010 [ 273.730975][ C1] R13: 0000000000000202 R14: 0000000077359357 R15: 00000000192e9d92 [ 273.730994][ C1] add_device_randomness+0xb7/0xf0 [ 273.731019][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 273.731043][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.731070][ C1] do_settimeofday64+0x3ef/0x4d0 [ 273.731092][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 273.731111][ C1] ? security_capable+0x80/0x260 [ 273.731132][ C1] ? hidraw_read+0x908/0xae0 [ 273.731157][ C1] ? capable+0xd3/0xf0 [ 273.731181][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 273.731203][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 273.731232][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 273.731260][ C1] ? rcu_is_watching+0x12/0xc0 [ 273.731288][ C1] do_syscall_64+0x115/0x870 [ 273.731310][ C1] ? clear_bhb_loop+0x40/0x90 [ 273.731330][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.731347][ C1] RIP: 0033:0x7f799879ce59 [ 273.731365][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.731382][ C1] RSP: 002b:00007f799963f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 273.731397][ C1] RAX: ffffffffffffffda RBX: 00007f7998a15fa0 RCX: 00007f799879ce59 [ 273.731409][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 273.731419][ C1] RBP: 00007f7998832d6f R08: 0000000000000000 R09: 0000000000000000 [ 273.731430][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.731440][ C1] R13: 00007f7998a16038 R14: 00007f7998a15fa0 R15: 00007fff337661b8 [ 273.731459][ C1] [ 273.732449][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g20257 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 274.136205][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 274.146164][ C0] rcu: RCU grace-period kthread stack dump: [ 274.152043][ C0] task:rcu_preempt state:R running task stack:26584 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 274.165549][ C0] Call Trace: [ 274.168815][ C0] [ 274.171741][ C0] __schedule+0x1295/0x67a0 [ 274.176266][ C0] ? __pfx___schedule+0x10/0x10 [ 274.181110][ C0] ? find_held_lock+0x2b/0x80 [ 274.185788][ C0] ? schedule+0x2bf/0x390 [ 274.190119][ C0] schedule+0xdd/0x390 [ 274.194184][ C0] schedule_timeout+0x127/0x280 [ 274.199034][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 274.204398][ C0] ? __pfx_process_timeout+0x10/0x10 [ 274.209681][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 274.215489][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 274.220950][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 274.225711][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 274.231001][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 274.235934][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 274.241133][ C0] rcu_gp_kthread+0x179/0x230 [ 274.245805][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.250995][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 274.256802][ C0] ? __kthread_parkme+0x18c/0x230 [ 274.261834][ C0] ? kthread+0x13a/0x450 [ 274.266088][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.271280][ C0] kthread+0x370/0x450 [ 274.275345][ C0] ? __pfx_kthread+0x10/0x10 [ 274.279935][ C0] ret_from_fork+0x72b/0xd50 [ 274.284523][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 274.289631][ C0] ? __switch_to+0x800/0x1100 [ 274.294313][ C0] ? __pfx_kthread+0x10/0x10 [ 274.298906][ C0] ret_from_fork_asm+0x1a/0x30 [ 274.303698][ C0] [ 274.306803][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 274.313114][ C0] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.323955][ C0] Tainted: [L]=SOFTLOCKUP [ 274.328264][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.338412][ C0] Workqueue: events_unbound toggle_allocation_gate [ 274.344917][ C0] RIP: 0010:smp_call_function_many_cond+0x58e/0x1700 [ 274.351591][ C0] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 39 84 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 41 [ 274.371189][ C0] RSP: 0018:ffffc90000b97870 EFLAGS: 00000293 [ 274.377250][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fc2c4d [ 274.385209][ C0] RDX: ffff88801bb62540 RSI: ffffffff81fc2c27 RDI: ffff88801bb62540 [ 274.393179][ C0] RBP: ffff8880b8540f80 R08: 0000000000000005 R09: 0000000000000000 [ 274.401141][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 274.409189][ C0] R13: ffffed10170a81f1 R14: 0000000000000001 R15: ffff8880b843c600 [ 274.417195][ C0] FS: 0000000000000000(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 274.426131][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.432712][ C0] CR2: 000000110c336100 CR3: 000000000e596000 CR4: 00000000003526f0 [ 274.440681][ C0] Call Trace: [ 274.443960][ C0] [ 274.446893][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 274.451938][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 274.458367][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 274.463760][ C0] ? __pfx___text_poke+0x10/0x10 [ 274.468709][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 274.473743][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 274.478857][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 274.485358][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 274.491091][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 274.497345][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 274.503576][ C0] ? find_held_lock+0x2b/0x80 [ 274.508253][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 274.514228][ C0] jump_label_update+0x37a/0x550 [ 274.519165][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 274.525056][ C0] static_key_enable+0x1a/0x20 [ 274.529819][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 274.535106][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 274.540994][ C0] ? rcu_is_watching+0x12/0xc0 [ 274.545767][ C0] process_one_work+0xa0e/0x1980 [ 274.550722][ C0] ? __pfx_process_one_work+0x10/0x10 [ 274.556105][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 274.562089][ C0] worker_thread+0x5ef/0xe50 [ 274.566690][ C0] ? kthread+0x13a/0x450 [ 274.570935][ C0] ? __pfx_worker_thread+0x10/0x10 [ 274.576046][ C0] kthread+0x370/0x450 [ 274.580113][ C0] ? __pfx_kthread+0x10/0x10 [ 274.584711][ C0] ret_from_fork+0x72b/0xd50 [ 274.589307][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 274.594418][ C0] ? __switch_to+0x800/0x1100 [ 274.599100][ C0] ? __pfx_kthread+0x10/0x10 [ 274.603692][ C0] ret_from_fork_asm+0x1a/0x30 [ 274.608482][ C0]