last executing test programs: 13.344000701s ago: executing program 2 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7f, 0x0, r3, 0x9, '\x00', 0x0, r3, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40008014) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r5) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r5) 12.084807118s ago: executing program 2 (id=197): setresuid(0x0, 0xee00, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x670, 0x4b0, 0x3c0, 0xffffffff, 0x198, 0x3c0, 0x5a0, 0x5a0, 0xffffffff, 0x5a0, 0x5a0, 0x5, &(0x7f00000002c0), {[{{@ipv6={@local, @remote, [0xffffffff, 0xff, 0x0, 0xffff00], [0xff, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_hsr\x00', 'ipvlan0\x00', {}, {0xff}, 0x2f, 0x81, 0x1, 0x10}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@dst={{0x48}, {0xe, 0x7, 0x1, [0x9, 0x8, 0x0, 0x1, 0x7, 0x2, 0x2, 0x9, 0xa, 0x3ff, 0x2, 0x2df4, 0x9, 0xf800, 0x3, 0x8], 0x9}}, @common=@hbh={{0x48}, {0x2, 0x5, 0x0, [0x3, 0x8, 0x2, 0x0, 0x0, 0xc48, 0x6, 0x3, 0x8, 0x0, 0xfff9, 0x5, 0x6, 0x0, 0x2, 0x6], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0x0, 0xff000000, 0xffffff00, 0xff], 0x4e21, 0x4e24, 0x4e21, 0x4e22, 0x3, 0x2, 0x5, 0xb38, 0x4}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3a}, @remote, [0xff000000, 0xffffffff, 0xff], [0xff, 0xff000000, 0xffffff00, 0xffffffff], 'team_slave_1\x00', 'pim6reg0\x00', {0xff}, {}, 0x2, 0x2, 0x4, 0x28}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0xd2, [0xffffcbd8, 0x400000], 0xa, 0x20, 0xc, [@private2, @mcast1, @mcast2, @private2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @dev={0xfe, 0x80, '\x00', 0x44}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x34}], 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x3, @ipv4=@remote, @ipv4=@remote, @gre_key=0x9, @port=0x4e21}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x14, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, @ipv4=@multicast2, @icmp_id=0x65, @gre_key=0xfff7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0x0, 0xff000000, 0xff000000], [0xffffff00], 'vcan0\x00', 'ip6gre0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x3086f002fdeb4368}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x9, @ipv4=@remote, @ipv4=@rand_addr=0x64010100, @icmp_id=0x64, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x42, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xd5, 0x0, 0x71}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = gettid() ptrace$peek(0x3, r5, &(0x7f0000000000)) socket$nl_audit(0x10, 0x3, 0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioperm(0x0, 0x7fff, 0x15f9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000080)={{0x4, 0x0, 0x9, 0x1, 'syz1\x00', 0x7fffffff}, 0x0, 0x100, 0x400, r5, 0x0, 0x1, 'syz1\x00', 0x0}) r7 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0xbc52, 0x400, 0x40000, 0x115}, &(0x7f0000000400), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x20, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) r8 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) 11.039497193s ago: executing program 2 (id=201): socket$nl_route(0x10, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4], 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 11.022609054s ago: executing program 4 (id=202): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000380)="2fb656dd0144702d34c20b88792795062677b9d292afec906d0a69a64fe47314e7c04e193ffd8554a37ffa19541862875bc6f566bdc3b1b4a43ad1dbdad26b03cf1198f8ae64731dafb9a43b8a47951801bcefe2fa42cca46a9c54f2a6e8695059f3f7e84de0ac9bfd8f5d5e29fc876974cefefb33872e85da99c1cc486c90c561f8254c34900782089fa57622bc1cfda706a52db572e3c8c3b0bfc3171cdf3d362ad24638f12cea7f8ffd36a22ac2fd2147b18fe7fdd28f1c81a5707398a86c821d19590b1ef142342ecfda9df3a55bc9165464bba8a1042242bf1f02bd12029763f2d72c9ae52d35a13bf83f7931", 0xef, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0xd7, 0x4) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0xfffc, 0x0, 0x2, 0x80, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in=@loopback, {0x1000000000000004, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x101}, {0x200, 0x4}, 0x0, 0xfffffffd, 0x2, 0x4, 0x80}}, 0xf0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000013000100000002000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064caea64261f71a595e931a83d15756d6d7930b8449a9ae62f93bb996f57c78a971e3b0f82e91c147016ba13477281753009f09137f4e3e960c877c5704a253051e1f82fba8b7496f58e0023"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) statx(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x2000, 0x4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) keyctl$chown(0x4, r3, r7, r8) 10.416466692s ago: executing program 4 (id=203): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000270001000400000001000000ac1e0101000000000000000000000000fe8000000000000000010000000006bb0000000000000000000000a549770f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) write$binfmt_aout(r3, 0x0, 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0xf03d, 0x7, 0x2, 0xd, "a85c45a2c25cc646300200"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000440)='rpc_clnt_new_err\x00', r10}, 0xfffffffffffffd98) r11 = io_uring_setup(0x3eae, &(0x7f00000005c0)={0x0, 0x6d33, 0x1000, 0x0, 0x4000080}) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f0000000400)=[{&(0x7f0000001700)=""/4095, 0xfff}, {&(0x7f00000003c0)=""/17, 0x11}], 0x2) 10.035499752s ago: executing program 1 (id=204): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) creat(0x0, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) epoll_create(0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r7, @ANYBLOB="48c3631a47d56517b94c688325bcf0e151d7834014991af0a8575ff246cfb49c2ab49eacc1dac2ca71ce220da74a688b348217f77a8d0fcf5d077f95349bee02e92005506db583bae8aba83c749e6640c239bd9e7c669c64a550d11d4a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_emit_ethernet(0x3ad, &(0x7f00000006c0)={@local, @local, @void, {@ipv4={0x800, @gre={{0x23, 0x4, 0x2, 0x0, 0x39f, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @local, {[@noop, @noop, @end, @noop, @cipso={0x86, 0xd, 0x0, [{0x2, 0x4, "90d2"}, {0x2, 0x3, 'u'}]}, @timestamp_addr={0x44, 0x34, 0xdd, 0x1, 0x3, [{@loopback, 0x7fffffff}, {@remote, 0x5}, {@multicast1, 0x80000001}, {@private=0xa010100, 0x7460159f}, {@private=0xa010102, 0x8}, {@rand_addr=0x64010100, 0xff}]}, @timestamp_prespec={0x44, 0x1c, 0xf2, 0x3, 0x9, [{@multicast1, 0x4}, {@multicast2, 0x5b}, {@loopback, 0x1ff}]}, @noop, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x9, [{@empty, 0x5}, {@loopback, 0x9}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd5, 0x0, [0x5, 0x4], "a02b0d02847ff0a59754660dcf99ea6daa931dc487e8d362e4e72e5bdfd24703e7783aa47513c992acc01ef516f0e54fa411c8159e8206db07a8693c41ea18336609135256cd758857ff4ec6a9ad2da057e64db0de866ba02917e97031e9ad4284b792504407e2d89a1aa051e82369e17b280a68262913b611e64c9d16a310d4a2504ba397a74b92b23d5518c5b81b31743413e7417204ce6d30f4e8dd4aacc76bc08647ccb45941e2bd7822824d7518af5959d13b98edef8f36bc97a6ea25ebd7b638c17e748d7b36ea53d3f1d3e53f38a9abd22e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xc455, 0x2], "f30bba0e45fb103c5cfedc436a2498f5f61aee10b22673d03b8393476e4e1aaacfe77bd91a6c5d885da9bacbb213b3f922d6d54c04ec7fc8945602ec92217719137a0a54e57dbc727d8d49f5f5e2e560da4942f7e3e37b0188d25538520cdd4b664a23da2887cc348ad7d55bda66465a3cd2dbb655b90a381e73f722c5d2715e4f022a00a8e6c8fc81b8ea0bd6ea5b20ba8281de6dacc7e762ff90d7daf72f6ed28b3247d6c7bb35eed4812e51457d66798e5b76040895931f593d15fb938f36"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x7], "296335774a95c41d3367f44f7fa947030946ba6b7f1ba952bf7365d6a6c0e44a22b1edfe685da08cabf607c202b906078ba1ada02b17be339259dc4bf33f5a40053cc980e94aacd610beed2a23a740826036396a7a32c538a85e7110"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0xa8, 0x2, 0x1, 0x3, 0x5, 0x6}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x9, 0x3, 0x0, 0x1, 0x1, 0x8}, 0x2, {0xf, 0x1, 0x3, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "19b7726075397f4062def4a74bd79618f13cfa0a881c0e5fa2d292ea96d1f4c5bb1922dda4726be01ffe79aed80ff2e057cf71bc0d1438c478783e5aa2acf22077bfef674eb3f06dabb5e23734cb1db7e16f696f2a444f2f1eb6e4fb7fdcc305aec3c91674f2de654618bc748bfe5ed8270dfb12c01bf68d7fbb0ae10c981b0aa17a5fe8165a8ea5ae3fbc619acf5c4002f6a23a8813d023c01649ed6bee4c9eabdf2d7e334a9d9f3a5b0b3333990165a0d0f9f131c280c05ca5e1cf60ff6044b7e5fde59ebeb50fd9c3347d2c98100503eb"}}}}}}, 0x0) 10.015783622s ago: executing program 2 (id=205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES8=r0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000090}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="002b0295"], 0x18, 0x40}}], 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xc}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) lstat(&(0x7f0000001600)='./file1\x00', &(0x7f0000001640)) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) r10 = msgget$private(0x0, 0x214) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r12) msgsnd(r10, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000040)={{0x2, r12, 0xee00, 0xee01, r13, 0x173, 0x2}, 0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x8, 0x0, 0x5, 0x3ff, 0x1b, 0x1002, 0x0, r9}) r14 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)="a9aabd1a25b94caa84b29b7c9b933f680f4a01d77ca3", 0x16}, {&(0x7f0000000380)="e6e55dc7281d2edde6db8c2aebc967153db50e190413549885ec9ffeeeacfa30347ffc854cae8b5e76280b217ce4b10bbf00fa0e577644b02c72901cbdaadccb68a25925bcd682d184bd0e949a8ec32b6bc1b4e979072316d44dc7bc3c84dc0cb3e074e6118e7940d31f79d54291a19a548437bdb5efe5692b5690d3eeb2126acccb16725149661dae406d27dc347a70c718988c3f32978c269a1191b08db69dbf5f7496983d725c20438bcfef97d776cef201a20a72faa229a72138c5665f39001c2b4bc7dde828416871bf38d2a474b28096a1451910169edad522c76505e2fa9f3d8dcea16699b7b840af04734a", 0xfffffffffffffdf6}, {&(0x7f0000000280)="a6a67d1f697338abacf1", 0xa}, {&(0x7f0000000540)="d40700dec8bcd5ecfcd7a0d162e8e835a5229d94bd7e8cf7302c81a1a032d67c29e8fbe8222b3edac049e30c016c3e054837e5277f914f9153916beb013a31a6b087c47f5c11c9f5ce058a2753a4e1e2fe089f8875a487cdbf17d0751f83584c2624294e0acf6cc3320c6b5269570362c7af2ab6f55a9c50a653db2d622c1e0d0147b6c6c54b5e723d7c3e25c4f84296a6a0e37207d523f4", 0x98}, {&(0x7f0000000800)="86784f60eacf5ea5a6415a42d3b23e5091e7dd05c6e13417bfacf1f5008e0808a960bc41373dc570e6606a0dcae994ecca88b843a57317916179583bbadcb07730a6790af317bd0913e698c189360682dde20ed6546b8f5adbeeb228bd0db505095a698a00fb513023cc6fd7264c36168d667402a25e022b44d1936cbaf21936e32c8ac67603075b2073283f5d0a56855b1daa934ae53a51", 0x98}, {&(0x7f00000008c0)="c6f2b1c4e8b4fc7bb4157cadd256b807a8f93b10ac97a44ee4b5584c0360139b7ad840d0dc07cb5ff6d0c8e46667b092d264b39ba3fa60e8eb6d8adb3343521d2405491eac69411552349747abaf02a4e5fbc7cf5ffca947de2acc0241c51e3c8f0f9fb00c5ae26ed40eff48f9092fde58f578f8ff2d2107128c5690138e1f487d59a700060ccd6bba117ac2a8fed03a6a35d3ad82ddecf25edb8cc1fd", 0x9d}, {&(0x7f00000012c0)="5076f63f25bfb93bcbad713e2d04b2c3bf58691c1e9f0ddaf37abb30569653192f4eb0d018148d6fc47413cb03f1742c2585dd5040d5f9f24100cfed52d22d3e6a7950f3584e53cdd33ba37a2d770c", 0x4f}], 0x7, 0x0, 0x0, 0x4000004}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="8c3855fce52ca72283af75448578de81b0035faa6a0498b86fc5216a875379d4d8701b32e7bd9d43bae6b8bc592acc1ce98876b0e0a13eefb3949cf3667823e53d8a0290343d442d3765145686c4566e91f8e44f2c2badd57f1b9a6b7c6e2b415235388d32", 0x65}, {&(0x7f0000000600)="dbed8eb290819ed6e7325e1429d85fffc351d3179fd16fadb6ab180c496e1fb0795338b180de1d5e8c0baf6512536f64d1ce81c0a4799d", 0x37}], 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES8=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="1c000002000000ac08195b4cbc9cde87c123768239ae0337cac6f6a40e29512e459e8c1a277e3f302bd25ee6ab459c763435b3a05b898637bb3705f4555ac9f179b1aa2bab8b1e68e2701852c693ea51c5f32332bc1c16dee5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x48000}}, {{&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000d40)="3748b6ba3cdfb6f8e422e2eca2a19966517538fa810a7f68e1d84c1f9d6e5dbc0bf51ec63c99ca78c4e30009a66689139b4012ea086994a5e933b491ba57a2d9bb75bc9c1f700b16f5a25740abe8bb1a6b05ec856995c24cf1913073032f8790a5d017af95", 0x65}, {&(0x7f0000000dc0)="f8e70dd94c86492687f72954abf653fe9d06c88fc65db8a37d5a3ec1696db50e67d08ecf09dc", 0x26}, {&(0x7f0000000e00)="c92471f63b833a2a3e07587ea0cea3c9c2f4b6017fec19709262248fcd48a20d4ebde93eab32a9558f8b3ee6cff6d9440d18af94d90e0b5ae1d38c9650f91d0e404a312025d89a47f7c3f0ab2eda593efe518b9e5a4325c3a1dd26c4ed111a6315b9b320345877d3ff4d2370b5e99d42c78190afefc721a0d6decb17f493bc117e4ac2a3cbf79132bdd3e2bfcedf9ebc5b4c0bf153a4de6db9e17d9d31f00dfea1", 0xa1}, {&(0x7f0000000ec0)="6fc7e36b02de1e16beaa8fef20066723eb6262c004f0b67eecfafce3609d3aaf1e9196c7e1b5b38dc403020c5576842e1443bb5450159e56b6f9f50abd0db8420d3d40bdc87c2c81c59816744c1363c8f4c198d976b3cede15d391", 0x5b}, {&(0x7f0000003e40)="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"/4096, 0x1000}, {&(0x7f0000000f40)="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", 0xff}, {&(0x7f0000001040)="7b144368c7015cccf0b7af8c9d5cd0268333f5d26cbdc7c777c940e22e42621a9cbf24a315e4ee1ae4408988979dd8a366075e7a5e30cd8d67805de802f3a531e6d1d98f8d2dfcd40dc8878d6b3afba284e3cb0e16d9a827318ba71739cfde24593beb719cccb0606eed7de3100972c57fdff45f808a7b43", 0x78}, {&(0x7f00000010c0)="5559a58c8bbfb2", 0x7}, {&(0x7f0000001100)="9f1ff4751190006d61bfe5b2ff8f842c44187d8add8acf54b24be3ca13aa01dd2f86e3d7039ec4eaf070bfaf280b2804f6552f88bd5763d3138dc125ca10f1bf2df34dbd0f37a2892d997c806d0db287b952d67ec2a135ecc6de71d0f9047dace95ea5d6e098e7a86eeb4203e44e5a946a597175c609288d6bb2f23ceefcdac82126bc943ad5bf0c094808d087696145162a596289337b44e6b701eeebc6297418d3407012803d888f000a32b9fc9caa071221d1db22a39eedaa33a85708fce314a0d66d84673adba69c61e7d21a1425d6470d7f86cfde", 0xd7}], 0x9, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x40, 0x4008050}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000c00)="9b92a2698ed284cb0783988333dc10085b69a4af431fb6a97c19c28b73c4ab361bf1a6b4a63ac8e9cab53949d252c16c9c932b83bd097f664395cac13bb03412ad899f78deb6ffaf64ddcb4d455d1029ca947246fd6cd372d47647c380cd7c397cb6fd70a527d09eb19d0da1d2a6d03e84eaae44b101b6a5a53377ad4baa8dcd", 0x80}], 0x1, &(0x7f0000001a40)=ANY=[@ANYBLOB="1800088e000010020000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRESHEX=r8, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYBLOB="44e13c0190eb086d1d485f8ed04e31533bf12cba1252dc17ed0809b111957facef80ab2d3121cd0b94b46d7e237a468c8664b31600361d2f981126dd9883eec55374486e92add468716bb07d8f165604729744b2a85abd9fe841fbd20e0611c468579a222559caf8952af401c9ed7a4ce08edc33d098246929f9ec02c99b08972912d94834075f5f8eee941d08d0505a6112cf9495434705787be686dbe61f890afd2657dc66db5f9c1623ad1d15d96a80ca5fa606e16abbe99e3caeb64e900444993de576b5db182e4e6f67b6707b6aca585d30e09319be4e05f5e3fc314d", @ANYBLOB="47b57124f7162baa16e75f5e2170ce7892976e40eae3aa505364360a66dccfb64a06f30db7b692f5af8da1a14a7896599b86cab472c294ae333e06f1b352372465f6f4313c42", @ANYRES32=0xee01, @ANYBLOB="000000001c000000e9ff00000100000001000000", @ANYRES32=r14, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x8000}}], 0x4, 0x20000801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xfff1, 0xffff}, {0xfff3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100013042cbd7000f9dbdf25ac1414bb000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000001000000003200000020010000000000000000000000000001000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000200a2000000000000004c00120072660f343130362867636d2861657329290000000000000000000000000000000000000000000000000000eeff0000000000000000000000000000000000000000000000600000001c0017"], 0x158}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/vlan/vlan1\x00') syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) 9.048333329s ago: executing program 4 (id=207): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x9) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @private=0xa0100ff}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x20e2eea24ac2027e}}, 0x24, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 'pim6reg1\x00'}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) 8.631995534s ago: executing program 4 (id=208): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket(0x2, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x401, 0xf, {{0xa, 0x4, 0x2, 0x3f, 0x28, 0x67, 0x0, 0x24, 0x2f, 0x0, @private=0xa010100, @remote, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x1d}, @timestamp={0x44, 0xc, 0x7, 0x0, 0x2, [0xfff, 0x3]}, @end]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="fa80c25cc8a92a1b861569494fb870fbbb1cd924f6bbcaa64dbb848fb0c27015f16ae3c794c497c88af53f2648adb6480fe8b5d31cc36ced04b734fd3b7505bea68ecda6dc928f10bb17b0ff8986a792169eba78b3361580588b127ba0629ce0d3aa55a2fc12e925b85378691e0c", 0x6e, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', 0x8b7b4c84f84163cf) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r4 = syz_open_dev$radio(&(0x7f00000005c0), 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000600)={0x4, 0x9, 0xd77b}) 8.468463772s ago: executing program 1 (id=209): munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x50, 0x0, &(0x7f0000000300)=0x11) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "33b2159236547f190fee20392ef4f29c36cb4fe7d375474eced96c577b73993b", 0x400, 0x3, 0x5, 0x1}, 0x3c) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$kcm(0xa, 0xa, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fanotify_init(0x40, 0x800) fanotify_mark(r8, 0x21, 0x20, r5, 0x0) write(r7, &(0x7f0000000240)="e6", 0x1) tee(r6, r5, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.68513579s ago: executing program 4 (id=210): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1a30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x90, 0x40, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0xad76, 0x1, 0x1, {0x22, 0x961}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x7, 0x1, 0x40, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc04}}, {0x99, &(0x7f00000001c0)=@string={0x99, 0x3, "700c502d27d5e8f6c3be6a647a41520d9ae139caedaef4c294750a6c2b4fb64b4d2de4f163eabe2654fcc24581cd4baae21b46d9b186a384a7107dc95e2bf86996f30c015ee0db373d5264667394b738f921a146e5edc7cc2913cd88cdf6b2993cd852fe41c6f6334b9158c6ecb24fd8a324a2446fc1cb45c29101707820b46d4d1ee7386d1bba21620cffe106fb21f82751f657abb5c8"}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x437}, 0x20}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000004280)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xc3, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0x18}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x4, 0x1, 0x7f6, 0x1, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8a9, 0x5, 0x5, "dab53502"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xc, 0x4}, @as_header={0x7, 0x24, 0x1, 0x4, 0x6}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0xf, "", "2b15"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x8, 0x0, {0x7, 0x25, 0x1, 0x1, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x8, "672072c6"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x3, 0x1}, @as_header={0x7, 0x24, 0x1, 0x40, 0xb, 0x1}, @as_header={0x7, 0x24, 0x1, 0x6, 0x5, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x10, 0x8, 0x2, {0x7, 0x25, 0x1, 0x81, 0xc0, 0x1ff}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0xc, 0x6, 0xff, 0x10, 0x10}, 0x62, &(0x7f0000000500)={0x5, 0xf, 0x62, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0x2, 0x8}, @generic={0x3e, 0x10, 0x3, "e71c42537413a8a3eb2396a75076c870dc4fa770aa71032715b136d1bfaa3f0c74973194be83bd898565ffc2686796e7ca85b1547708dfd012b28b"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4, 0x5, 0x6, 0xaf}, @ptm_cap={0x3}]}, 0x1, [{0xd2, &(0x7f0000000580)=@string={0xd2, 0x3, "8ce69080cb51f45407a83c7a5d78f7ba11137caaa5c3cf186c3a531c45279ace5e9bf1ed5bf0bd43299e72b143f345b45dcc10609c737cbb807a234fe550e94f8fe34ae7c66c6cd1823dee90684b3d871776e6771e6d875222504335ee390970862932ce95248b7f608d28be9b31b25dfc3d57ceeb2da4dd2027d0251698ceac270e5eedb4750fdb7ae93e0850162d691fb0fe4759565a9066f5da3e42515167fb600843674c0bff3d26d5afa88d3438bab19dc0947ec355551d1adae87636cdb2e70152e647b17c8d77c6050c6c6d15"}}]}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="2139250e851d0eb7a94c1616462b94dc195dacb0f8d5cfbe066b48ff98467e5973dcbca697e19ad1363c1264cee57d6370f799349f913f54b87b7213ef9f9f3c558bc2364ab03d2be2c0319958fd1d0bc0ed476b02710cfb6a8216507e194c86dcfee6d90431a400b81e1d216ab3cbe88736"], 0xa) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0xcbf4, 0x0) read$msr(r5, &(0x7f0000000300)=""/30, 0x1e) 7.647679031s ago: executing program 1 (id=211): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304, 0x36}, "7b8bdfd668e040b5", "89e73c8e9aa7e7aa844ee902749b141eb57bda9660b3563988c3ddb6cb7405a5", "e01bfca4", "b914d9d2ad0d05dc"}, 0x38) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2c, 0x200000, {0xa, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@RTA_IIF={0x8, 0x3, r3}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000001e40)=[{{&(0x7f0000000140)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f00000003c0)=""/82, 0x52}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/60, 0x3c}], 0x4}, 0x4}, {{&(0x7f0000001440)=@isdn, 0x80, &(0x7f0000000280)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000001540)=""/96, 0x60}], 0x2, &(0x7f00000015c0)=""/230, 0xe6}, 0xfff}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000016c0)=""/110, 0x6e}], 0x1, &(0x7f0000001740)=""/29, 0x1d}, 0x33a5}, {{&(0x7f0000001780)=@generic, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001800)=""/37, 0x25}, {&(0x7f0000003000)=""/190, 0xbe}, {&(0x7f0000001900)=""/91, 0x5b}, {&(0x7f0000001980)=""/47, 0x2f}, {&(0x7f00000019c0)=""/217, 0xd9}], 0x5, &(0x7f0000001b40)=""/204, 0xcc}, 0x7}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/246, 0xf6}], 0x1, &(0x7f0000001d80)=""/131, 0x83}, 0xffff0001}], 0x5, 0x4c42bb4f92, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 7.399145821s ago: executing program 3 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0xd, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/183, 0x22000, 0x1000, 0x129, 0x1}, 0x20) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x40082, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00', 0x0, [0x7f, 0x0, 0xfffffffb, 0x7, 0x6]}, &(0x7f0000000240)=0x54) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', r4, 0x2f, 0xd3, 0x5, 0x4, 0x70, @local, @mcast2, 0x7800, 0x700, 0x0, 0xffff}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x1, 0x8}, &(0x7f0000000480)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000004c0)={r6, 0x6}, 0x8) write$P9_RVERSION(r3, &(0x7f0000000500)={0x15, 0x65, 0xffff, 0x3ff, 0x8, '9P2000.u'}, 0x15) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, &(0x7f0000000540)="244d6744e3e42b988a0e61b24b2263a41ef188f595087e54d8eafc9c861bb7acea7d39c3952e03a41d250ba82e266a71b3c5cebadcf62eaea5bfcb43ab7a9b183b0792e2767b46ff9232a20595fe4d7ab8ec16963f47c141a4c2b32c2e5efa16ba02e95bedccbc2142b1eec9749f335a2fb943827e84a80b7010e9e2f0f572fd2e2aa1c970c50d1d00916d7eee0005f89f5b7cb2be541e7880872e91945423df5de4ee8c3849f7a8338347c0de9526d421cafde716aa0428c4c3bdd2c06299472cd5801331d81699", 0xc8, 0x4000000, &(0x7f0000000640)={0x2, 0x4e20, @empty}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) sendto$inet(r7, &(0x7f0000000700)="c6f931401e085065b9300fe0a25c00a5ee63c911eb0f70ccaa11b365e5cd", 0x1e, 0x8824, &(0x7f0000000740)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$pppl2tp(r3, &(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x1, 0x3, {0xa, 0x4e21, 0x800, @remote, 0x10}}}, 0x3a) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r8) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r9, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) write$binfmt_script(r8, &(0x7f0000000900)={'#! ', './file0', [{0x20, '\''}, {0x20, '*/+'}, {0x20, 'nl80211\x00'}, {0x20, '($'}, {0x20, '\x00'}, {0x20, 'raw\x00'}, {0x20, '*--!'}]}, 0x29) write$tun(0xffffffffffffffff, &(0x7f0000000940)={@val={0x0, 0x8808}, @void, @mpls={[{}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv4=@icmp={{0x10, 0x4, 0x0, 0x1, 0x48, 0x65, 0x0, 0x6, 0x1, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x14, 0x9a, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x6}, {@loopback, 0xd4}]}, @timestamp={0x44, 0x18, 0xf7, 0x0, 0x2, [0x2, 0x100, 0xa0, 0xffffa6f2, 0x591854a0]}]}}, @info_request={0xf, 0x0, 0x0, 0x100, 0xb}}}}, 0x60) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000009c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x11, 0x0, "2a0c0ad974548e817242d5ea0782f15428947f261d0f1be994bb2a8be4ddfaf9a3006973aff9e71f9363664b47befb1fccd270d16aaffbc3081b619228630eca4ae3b9ebdf82e428ba06e86d3008736f"}, 0xd8) sendto$inet(r2, &(0x7f0000000ac0)="33cf719c4a", 0x5, 0x40040, &(0x7f0000000b00)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000000d00)={&(0x7f0000000b40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xcc, r10, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc9442cd4e8c6c72}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xcc}}, 0x4000000) sendto$inet_nvme_of_msg(r3, &(0x7f0000000d40)={@icresp={{0x1, 0x9, 0x80, 0xf2, 0x3}, 0x0, 0x0, 0x2, 0xfffffd7c}, @void}, 0x80, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) 7.270398236s ago: executing program 1 (id=214): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r3, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r3, &(0x7f0000000140)='./control\x00', 0x200) 7.182449023s ago: executing program 3 (id=215): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x15) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4], 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 5.920055328s ago: executing program 1 (id=216): socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000026c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000240)={&(0x7f0000020940)=[0x6, 0x61b, 0x6, 0x80, 0x1, 0x9, 0x4, 0x0, 0x6, 0x8, 0x2, 0x3, 0x7fffffff, 0x851e, 0xfffffffb, 0x0, 0x6, 0x1, 0x3, 0x5, 0x6, 0x10, 0x5, 0x2, 0xfff, 0x0, 0x6681dc65, 0xd, 0x0, 0x2, 0x4, 0x7, 0x1, 0x2, 0xf9, 0x10001, 0x5, 0xd, 0x7, 0x101, 0x200, 0x8000, 0x43, 0x8, 0x80000000, 0x40, 0x2b5, 0x0, 0x401, 0xffffffff, 0x46, 0x0, 0x60f8, 0x0, 0x46, 0x4c7, 0x7, 0xe8c, 0x1, 0xfff, 0x4, 0x8, 0x7, 0x7, 0xecbf, 0x7, 0xe61f, 0x10001, 0x8, 0x3, 0xae5, 0xfd3d, 0x65, 0x10000, 0x5, 0x3ff, 0x1, 0x8, 0x6, 0x4, 0x0, 0x5, 0x5, 0x2, 0x9, 0x554b1ef3, 0xfffffb02, 0x3, 0x10000, 0xdbe4, 0x7f, 0x7f, 0xf6, 0xac3, 0x5, 0x6, 0x3, 0x9, 0xb, 0x8001, 0x9, 0x1, 0x20, 0x5, 0x8, 0x2, 0x5, 0x1, 0x9, 0x80000000, 0x7, 0x7, 0x9, 0xfdfa, 0x989, 0x800, 0x785c, 0x1, 0x3, 0x7fff, 0xf1f22ec, 0x7, 0x2, 0x1, 0x101, 0x7ff, 0x3, 0x10decc, 0x81, 0xfffffc2e, 0x4, 0x3, 0x6, 0x5, 0xe, 0x5, 0x400, 0x6, 0x400, 0x4, 0x8, 0x5, 0xffffffff, 0x0, 0x8, 0x8, 0x2, 0x62, 0x2, 0x800, 0x4, 0x7fff, 0x3, 0x81, 0x1, 0xffffd318, 0x7, 0x4, 0x8, 0xbb9, 0x1, 0x3, 0xc674, 0x7, 0x7, 0x5, 0x7fff, 0x9, 0x1, 0xf60, 0x10, 0x9, 0x9, 0x5, 0x2, 0x9, 0x4, 0x5b6d, 0x800, 0x8, 0x5, 0x0, 0x5, 0x100, 0x9c6, 0xae, 0x8, 0x7, 0x4, 0x3, 0xc, 0x7, 0xc, 0x4, 0xf42, 0xa5e, 0x9, 0x1, 0x1, 0xffff26f3, 0x8, 0x80, 0x7, 0x81, 0x7fff, 0x0, 0x1, 0x2ae, 0x6, 0x5, 0x8, 0x1, 0x101, 0x1ff, 0x100, 0x3, 0x9, 0x7, 0x5, 0x9, 0xb7, 0x7, 0x5, 0x6, 0xfffffff9, 0x0, 0x4, 0xba39, 0xe82, 0x4, 0x8, 0x3, 0x2, 0x9472, 0x476, 0xceb2, 0x7fff, 0x9, 0x7fffffff, 0xfffffffc, 0x20, 0x5, 0x1, 0x8, 0x400, 0x0, 0xe, 0x30, 0xfffffff7, 0x81, 0x2, 0x4, 0xa, 0x8, 0x9, 0x2, 0x7fffffff, 0x9f, 0xbe5, 0x5, 0x200, 0xf1c, 0x1, 0x80, 0x5, 0x5, 0x3, 0x2, 0xfffffffc, 0xa97, 0x0, 0x40000, 0x1, 0x9, 0x1, 0x7, 0x8001, 0x8, 0x8, 0x2, 0x9, 0x2, 0x1, 0x0, 0x0, 0x7fff, 0x7f78, 0xfff, 0x100, 0x400, 0x59, 0xfffffff9, 0x6, 0x7fffffff, 0x8, 0x3, 0x8, 0x8, 0xe867, 0x1, 0xc, 0x9, 0x5, 0x6, 0xffff0001, 0xfffffff8, 0xe, 0xf, 0x1, 0x733480, 0xd0000000, 0xfff, 0x5, 0x7f, 0x3, 0x5, 0x40, 0x80000000, 0x80000000, 0xfffffffc, 0x2, 0x6, 0xa81, 0x5, 0x2, 0x3cf43836, 0xe, 0x5, 0x8001, 0xd4, 0x7, 0x3, 0x5, 0x7, 0x400, 0x10, 0x2, 0x10, 0x1, 0x8001, 0x8000, 0x7bc, 0x0, 0x7, 0x1, 0x0, 0x1000, 0xfef, 0x2, 0x8, 0x40000000, 0x1, 0x2, 0x2, 0x10000, 0xd0f, 0xe, 0x6, 0x7, 0x6, 0x3, 0x80000000, 0xb, 0x5, 0x10, 0x0, 0xa, 0x61, 0xffffffff, 0x2, 0x3, 0x0, 0x4, 0x46e, 0x30, 0x5, 0x2, 0x6, 0x100, 0xa956, 0x8, 0xec60, 0x2, 0x100, 0xffffff01, 0xdec, 0x6, 0xfffffffd, 0xffffff38, 0x2, 0x6, 0x8, 0x6, 0x1ff, 0x0, 0x6ac, 0x3, 0x5, 0x8, 0x7, 0x9, 0x6, 0x5, 0x5, 0x4, 0x68, 0x9609, 0x9, 0xb4, 0x7f, 0x7ff, 0x9, 0x4, 0x9d, 0x0, 0x4, 0x3, 0x6, 0xffffffff, 0x3, 0xe0000000, 0x9, 0x80000001, 0x9, 0xb, 0x2, 0x4, 0x4, 0xffffffff, 0x60e, 0x1, 0x86, 0x4800000, 0x58c, 0x6, 0xb7871f5, 0x1, 0x3, 0x6, 0x0, 0x1, 0x1ff, 0x4, 0xffffffff, 0x9, 0x6, 0x10001, 0xfffffffe, 0x80000000, 0x7fffffff, 0x3, 0xc0000000, 0x80, 0x5, 0xa, 0x96d6, 0xf541, 0x76, 0x517a1073, 0x5, 0x8001, 0x6, 0x9, 0x8, 0x1, 0x0, 0x8, 0xffff8000, 0x7fffffff, 0xb, 0x0, 0x4, 0x1, 0x1, 0x8, 0x0, 0x4, 0x1, 0x8, 0x5, 0x7, 0x8, 0x2, 0x1ff, 0xc, 0x5aa2, 0x9, 0x5, 0x40, 0x8, 0x1000, 0x2, 0x0, 0x8e, 0x5c610d02, 0x8, 0xffffffff, 0x1, 0x6, 0x9f, 0x600000, 0x5, 0x100, 0x7, 0x3, 0x4c, 0x6df, 0x247, 0x5, 0x1, 0x5, 0xcd8, 0x6, 0x6, 0x0, 0xb, 0xb0, 0x7, 0x9, 0xd19, 0x8, 0x9, 0x4, 0x5539, 0x8, 0x8, 0x200, 0x4, 0x3, 0x200, 0x1, 0x5, 0x290, 0xfffffff3, 0x7, 0x1, 0x0, 0xd, 0x81, 0xbf, 0x4, 0xd4000000, 0x2, 0x7, 0xb, 0x7f, 0xc, 0x7f, 0x4a7, 0x9, 0x6, 0x23, 0x8, 0x2, 0x400, 0x5, 0x40, 0x1, 0x7, 0x0, 0x4, 0x3, 0x40, 0x2, 0x80000001, 0xb, 0x4, 0xfff, 0xc, 0x9, 0x6, 0x7, 0x6, 0xab5e, 0x8000, 0x9, 0xff, 0x9, 0x8000, 0x80, 0xee3f, 0x5, 0xffffffff, 0x71b, 0x7, 0x4, 0xd6, 0xfffffff2, 0x80000000, 0x6, 0xfffffffc, 0x2, 0x1, 0x1000, 0x9, 0x2, 0x9, 0x3879, 0x0, 0x401, 0xea, 0x0, 0x2, 0x4, 0x8, 0x9, 0x9, 0xd504, 0x7, 0x4, 0x5, 0x1f, 0x1f, 0x4, 0xf, 0x0, 0xfffffffc, 0x400, 0xd58f, 0x741, 0x2, 0xed9, 0xf2, 0x7, 0x3ff, 0xe, 0x3, 0x0, 0x7ff, 0xfffffffe, 0x0, 0x100, 0x2, 0x1, 0x4, 0x7, 0x7, 0x81, 0x7ff, 0x0, 0x76cc, 0x1ff, 0x8, 0x4, 0x120000, 0x80000000, 0x6, 0x1, 0xf, 0x40, 0x573, 0x10, 0x80, 0xd, 0x81, 0x5, 0x7, 0x6, 0x4, 0x7f, 0x3, 0x1, 0x8, 0xea, 0x8, 0x4769, 0x7, 0xe, 0x81, 0x7, 0x3, 0x0, 0x8000, 0x5, 0x8, 0x9, 0x1, 0x40, 0xecac, 0x1, 0x10000, 0x81c, 0x8e, 0x80000001, 0x1, 0xe08f, 0x10001, 0x3, 0x7, 0x3, 0x3, 0xfffffff7, 0x27a8, 0x7, 0x1, 0x7, 0xfffffeff, 0x9ed9, 0xffffffff, 0x5, 0x4, 0x5, 0x40000000, 0x1, 0x7fffffff, 0xada, 0x10, 0x6, 0x1800, 0x2, 0x5, 0x2, 0xff, 0xfffffffe, 0x8, 0x0, 0x7ff, 0xffffff3e, 0x10001, 0x6, 0x5, 0xf, 0x6, 0x7, 0x401, 0x389e, 0xe, 0x51, 0x9, 0x1, 0x101, 0x7, 0x6c07e092, 0x1, 0x3, 0x5ad, 0xf, 0x1, 0x9, 0xffffffa9, 0x2bcae9be, 0x3, 0x86, 0x3, 0xffff8001, 0x100, 0x5, 0x4, 0x101, 0xee7, 0x5, 0x6, 0x6, 0x8, 0x1, 0x0, 0x3, 0x6, 0x2, 0x1, 0x0, 0x4, 0x9, 0x8059, 0x2, 0x8, 0x800, 0xf, 0x81, 0x3, 0x5, 0x2, 0x400, 0x0, 0x200, 0x7, 0x0, 0x8, 0x400, 0x5, 0x4, 0x2, 0x80, 0x5, 0xffffffff, 0x401, 0x87e, 0x11, 0x4, 0x10001, 0x9, 0x0, 0x5, 0xf, 0x0, 0x1, 0x3, 0x1, 0x1, 0x9, 0x2, 0x3, 0x6, 0x4a8, 0x100, 0x0, 0x0, 0x4, 0x9906, 0x802, 0x7fff, 0x30, 0x8, 0x80000001, 0x8000, 0x13, 0x4, 0xd, 0x7, 0x65, 0x3, 0x0, 0xa, 0x0, 0x8, 0x1000, 0x897, 0xd63, 0x9, 0xed, 0x1, 0x7, 0x6503, 0x7, 0x4, 0x7c, 0x5, 0x8001, 0x6, 0x8, 0x9, 0x7, 0x10001, 0x7, 0x8, 0x2, 0x5, 0x7, 0x3, 0xea3, 0xfffff9f2, 0x0, 0x7ff, 0x5, 0x4, 0x7, 0x6, 0x7, 0x3, 0x7, 0x7, 0x7a, 0x6, 0x6, 0x4, 0xb8aa, 0x3ff, 0x1122, 0x80000001, 0x2, 0x4, 0x1, 0x6, 0xab, 0x1, 0x5, 0x2, 0x8, 0x3, 0x1, 0x1, 0x2, 0xffffffff, 0x5, 0x1, 0x9, 0x5, 0x32, 0xffa, 0x5, 0xd1, 0x9, 0x62, 0xd, 0x560, 0x94, 0x6, 0xb, 0x7fff, 0x3, 0xfff, 0x8, 0x0, 0x0, 0x8, 0x4ff1, 0x4, 0x1000, 0x9, 0x584e80, 0x0, 0x51, 0x6, 0x7fffffff, 0x3, 0xfff, 0x8, 0x80, 0x1, 0xfffffffc, 0x6, 0x1, 0xb, 0x8, 0xeaa, 0xaec, 0x7, 0x2c, 0xff, 0x7, 0x915, 0x10, 0x2, 0x10000, 0x4, 0xd8, 0x0, 0x4, 0x1, 0x6, 0x10, 0x8000, 0x3, 0xfffffff1, 0x2, 0x0, 0x7fffffff, 0x1, 0x3, 0x6, 0x68f4, 0x5, 0x6, 0x200, 0x2, 0x4, 0x9, 0x3abe, 0x6, 0x14, 0xff, 0x31, 0x8, 0x200, 0x40001, 0xfff, 0x4, 0x81, 0x7, 0x5, 0x4, 0x80000001, 0x2, 0x6, 0x87, 0xf, 0x1, 0x8, 0x9, 0x1ff, 0x7, 0x8, 0x10001, 0x40000000, 0x7, 0xe, 0x3, 0x8008, 0x9, 0x4, 0x8000, 0xb, 0xa, 0x5, 0x2a, 0x9, 0xf, 0x5, 0x4, 0x2, 0x4, 0x3, 0x6, 0x81, 0x5, 0xe2, 0x1, 0x1e7, 0x1, 0x5, 0x86, 0x8, 0x2, 0x8, 0x3ff, 0x2, 0x7, 0xffffffff, 0x1, 0x433, 0x2, 0x2, 0x8, 0x8001], 0x1, 0x400, 0x6}) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r1}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x70, 0xb4, 0xc3, 0x10, 0x5c6, 0x9203, 0x7c38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xc, 0xf, 0x60, 0x9, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x31, 0xc6, 0x97, 0x5}}, {{0x9, 0x4, 0x6e, 0x40, 0x0, 0xff, 0x1, 0x1, 0x6}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e07090908"], 0xa) 5.788330527s ago: executing program 0 (id=217): socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x17a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x2000680) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c0002800800054000000003080002400000000208000140000000010900010073797a30000000000900020073797a3200004000140000001100010000000900000000000000000a"], 0xa4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030328bd7000000000000a00000004000300b9bef3deee1c3c00c049ba5c613c383c429c4fd55818b63db349842d39f8cca14e6dd22c9c75b60a", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 5.653110343s ago: executing program 3 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x2, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) (async) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 5.096055715s ago: executing program 2 (id=219): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) creat(0x0, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) epoll_create(0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r7, @ANYBLOB="48c3631a47d56517b94c688325bcf0e151d7834014991af0a8575ff246cfb49c2ab49eacc1dac2ca71ce220da74a688b348217f77a8d0fcf5d077f95349bee02e92005506db583bae8aba83c749e6640c239bd9e7c669c64a550d11d4a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_emit_ethernet(0x3ad, &(0x7f00000006c0)={@local, @local, @void, {@ipv4={0x800, @gre={{0x23, 0x4, 0x2, 0x0, 0x39f, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @local, {[@noop, @noop, @end, @noop, @cipso={0x86, 0xd, 0x0, [{0x2, 0x4, "90d2"}, {0x2, 0x3, 'u'}]}, @timestamp_addr={0x44, 0x34, 0xdd, 0x1, 0x3, [{@loopback, 0x7fffffff}, {@remote, 0x5}, {@multicast1, 0x80000001}, {@private=0xa010100, 0x7460159f}, {@private=0xa010102, 0x8}, {@rand_addr=0x64010100, 0xff}]}, @timestamp_prespec={0x44, 0x1c, 0xf2, 0x3, 0x9, [{@multicast1, 0x4}, {@multicast2, 0x5b}, {@loopback, 0x1ff}]}, @noop, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x9, [{@empty, 0x5}, {@loopback, 0x9}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd5, 0x0, [0x5, 0x4], "a02b0d02847ff0a59754660dcf99ea6daa931dc487e8d362e4e72e5bdfd24703e7783aa47513c992acc01ef516f0e54fa411c8159e8206db07a8693c41ea18336609135256cd758857ff4ec6a9ad2da057e64db0de866ba02917e97031e9ad4284b792504407e2d89a1aa051e82369e17b280a68262913b611e64c9d16a310d4a2504ba397a74b92b23d5518c5b81b31743413e7417204ce6d30f4e8dd4aacc76bc08647ccb45941e2bd7822824d7518af5959d13b98edef8f36bc97a6ea25ebd7b638c17e748d7b36ea53d3f1d3e53f38a9abd22e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xc455, 0x2], "f30bba0e45fb103c5cfedc436a2498f5f61aee10b22673d03b8393476e4e1aaacfe77bd91a6c5d885da9bacbb213b3f922d6d54c04ec7fc8945602ec92217719137a0a54e57dbc727d8d49f5f5e2e560da4942f7e3e37b0188d25538520cdd4b664a23da2887cc348ad7d55bda66465a3cd2dbb655b90a381e73f722c5d2715e4f022a00a8e6c8fc81b8ea0bd6ea5b20ba8281de6dacc7e762ff90d7daf72f6ed28b3247d6c7bb35eed4812e51457d66798e5b76040895931f593d15fb938f36"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x7], "296335774a95c41d3367f44f7fa947030946ba6b7f1ba952bf7365d6a6c0e44a22b1edfe685da08cabf607c202b906078ba1ada02b17be339259dc4bf33f5a40053cc980e94aacd610beed2a23a740826036396a7a32c538a85e7110"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0xa8, 0x2, 0x1, 0x3, 0x5, 0x6}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x9, 0x3, 0x0, 0x1, 0x1, 0x8}, 0x2, {0xf, 0x1, 0x3, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "19b7726075397f4062def4a74bd79618f13cfa0a881c0e5fa2d292ea96d1f4c5bb1922dda4726be01ffe79aed80ff2e057cf71bc0d1438c478783e5aa2acf22077bfef674eb3f06dabb5e23734cb1db7e16f696f2a444f2f1eb6e4fb7fdcc305aec3c91674f2de654618bc748bfe5ed8270dfb12c01bf68d7fbb0ae10c981b0aa17a5fe8165a8ea5ae3fbc619acf5c4002f6a23a8813d023c01649ed6bee4c9eabdf2d7e334a9d9f3a5b0b3333990165a0d0f9f131c280c05ca5e1cf60ff6044b7e5fde59ebeb50fd9c3347d2c98100503eb"}}}}}}, 0x0) 4.441272908s ago: executing program 3 (id=220): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r1 = socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1, 0x3, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) syz_emit_ethernet(0x2e, &(0x7f0000000080)=ANY=[], 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="02090009e8ffffff00000000ffdbdf25"], 0x10}}, 0x4000000) gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000280)="431217e7599b8f086e", &(0x7f00000004c0)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000000)=0x6, 0x4) 4.438340965s ago: executing program 0 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x3000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x8) 3.412250127s ago: executing program 0 (id=222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x7f, "03000000bd12ffe2ffffff000000000082a158000040e400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r1, 0x94a0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)) read$dsp(r6, &(0x7f0000000300)=""/79, 0x4f) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000300)={@private0={0xfc, 0x0, '\x00', 0x1}, r7}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000008}) close(0x3) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x8000) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x442806) userfaultfd(0x1) syz_open_dev$cec(0x0, 0x0, 0x0) 3.407675432s ago: executing program 4 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_clone(0x40020800, &(0x7f0000002740)="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", 0xf80, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000480)="f33b1042f9e7d04613867852306ec0a2db213b746dd4d05bcfaae6187eb4013234747a2b913fd07729c61a764e413ef2d201371c715bc147c7a911f8bd152b3db8ee1b1c6ac63f2f5c14a7a76b773c7e3accecccc680e4f75ebb288979d01fd2cf2c0a09fc2933334d78d3bfbfa0956a60625539403390b6791eff09a714d088874801ca4c8f7c9e2ec4b8fcc084df50858b6855") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x3, 0x10100, {r1}, {}, 0x81, 0x4}) r3 = syz_open_procfs(r2, 0x0) socket(0x11, 0x800000003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='\x00\x00', 0xc6a2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000002100010029bd7000fcdbdf250a1400db000000010400000014000100"], 0x44}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000480)={0x0, 0xffffffffffffffe5, &(0x7f0000000440)={&(0x7f0000000300)=@alg={0xe0, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {{'gcm(aes)\x00'}, '\x00', '\x00', 0xcc55df52893605f1, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) sched_setscheduler(r1, 0x6, 0x0) 2.971546212s ago: executing program 2 (id=224): socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x700, 0x0, 0x80, 0x7}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) shutdown(r2, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000600000085000000860000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0xe, 0x0, &(0x7f00000005c0)="d6cef361ad5b4323a4ec0f4e3ced", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x25}, "cdf6c8176ec25aeee9ed43cbe397cc05d59f1573fae1aa33c511eea0ba77dec8a4b03c4663"}, 0x29) 1.865501163s ago: executing program 0 (id=225): socket$nl_route(0x10, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4], 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 1.86229224s ago: executing program 3 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7f, 0x0, r3, 0x9, '\x00', 0x0, r3, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r6, @ANYRES8=0x0, @ANYRES16=r2, @ANYRES64=r4, @ANYRES8=r3, @ANYRESHEX], 0x50}}, 0x40008014) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r8) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r9, 0x223, 0x0, 0x10000000, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x77}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r7) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r7) 809.559107ms ago: executing program 0 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00004fc000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x921d1b31cc205159, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) getpeername(r4, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f00000000c0)={0xfffffffffffffff9, 0x1365, 0x1, 0x2a9, 0x2, [0x40, 0xfffffff7, 0x8, 0xfffffff7]}) 461.16033ms ago: executing program 3 (id=228): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x60100, 0x0) r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, &(0x7f0000000140), 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x25817000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180)='udf\x00', 0x208000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000004c0)=0x15) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) 139.750812ms ago: executing program 0 (id=229): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000000004058041150000000000001090224000100000000090400000203e49a0000000921feff0001220500090581030000060000b5b4de706a956a8900d69fd2638dafa1c2f2aed255cfa6203e6cd1f68f173ad36a85e3fd1c1f163d11cd3c83367e69a7627731bfdbd6d1acf433d4d05b1b2cc635f0a3bcde6291bf21a46fbdbab5d7975e7b10dd6cb3d120b5d98bcb7a6e2285d41d1097beee30cf00e2e2a908f4a7924e0b511ee80a20fc0fc025"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@getqdisc={0x34, 0x26, 0x800, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x1, 0x8}, {0xd, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x40091) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0000000100000095fabe18ba97f54739c86ce95447090000000000000046200000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000008000000020000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180000000400000000000000030000008500000012400000184400010000000000000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() mmap(&(0x7f00009f5000/0x3000)=nil, 0x3000, 0xb635773f07ebbee7, 0x4010, 0xffffffffffffffff, 0x1000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000002f00000829bd7000fddbdf25050000000400230052000000eca7c35dc5cacca6e19fb92e20eab080f3a4d0e36d9eeb45d115339838582e4a3cbe2e4d69994ba370ebf231350201943f77cfb2510ced488ff3e0af6fdb5c5c25e98cdc4f5f695acb0aeeee751100000313b20e7f30fad9134bc04ec971b7fd16aa077c0c12982d771492185322f76278eded88e3c7d17a19c1715df290eccb09d5c5b39116d571d2795b5bdf30980cf09827e99a277c38805ab803a5bd71831872"], 0x6c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4885) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0xffffffffffffff60, &(0x7f0000000240)=0x4) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x48a100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 0s ago: executing program 1 (id=230): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x8c, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6e, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 57.327569][ T30] audit: type=1400 audit(1745962310.563:88): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.331492][ T5800] cgroup: Unknown subsys name 'net' [ 57.350397][ T30] audit: type=1400 audit(1745962310.563:89): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.377762][ T30] audit: type=1400 audit(1745962310.593:90): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.503797][ T5800] cgroup: Unknown subsys name 'cpuset' [ 57.512611][ T5800] cgroup: Unknown subsys name 'rlimit' [ 57.646750][ T30] audit: type=1400 audit(1745962310.883:91): avc: denied { setattr } for pid=5800 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.670311][ T30] audit: type=1400 audit(1745962310.883:92): avc: denied { create } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.693196][ T30] audit: type=1400 audit(1745962310.883:93): avc: denied { write } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.716980][ T30] audit: type=1400 audit(1745962310.883:94): avc: denied { read } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.737496][ T30] audit: type=1400 audit(1745962310.913:95): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.762337][ T30] audit: type=1400 audit(1745962310.913:96): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.787762][ T30] audit: type=1400 audit(1745962310.923:97): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.821381][ T5802] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.716395][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.768445][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.777393][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.786214][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.794810][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.803061][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.810969][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.811054][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.826513][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.826984][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.844058][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.851652][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.860334][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.860503][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.867841][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.883108][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.884238][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.893276][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.898528][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.907201][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.911963][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.920042][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.926459][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.934105][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.940774][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.958204][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.461091][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 61.517116][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 61.543163][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 61.559630][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 61.593396][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 61.711582][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.718807][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.726296][ T5810] bridge_slave_0: entered allmulticast mode [ 61.733180][ T5810] bridge_slave_0: entered promiscuous mode [ 61.765912][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.773647][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.780900][ T5810] bridge_slave_1: entered allmulticast mode [ 61.787588][ T5810] bridge_slave_1: entered promiscuous mode [ 61.858522][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.866631][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.874022][ T5812] bridge_slave_0: entered allmulticast mode [ 61.882495][ T5812] bridge_slave_0: entered promiscuous mode [ 61.905469][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.912606][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.919769][ T5813] bridge_slave_0: entered allmulticast mode [ 61.927582][ T5813] bridge_slave_0: entered promiscuous mode [ 61.935449][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.942630][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.949758][ T5813] bridge_slave_1: entered allmulticast mode [ 61.956804][ T5813] bridge_slave_1: entered promiscuous mode [ 61.963323][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.970618][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.977744][ T5823] bridge_slave_0: entered allmulticast mode [ 61.984686][ T5823] bridge_slave_0: entered promiscuous mode [ 61.993523][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.001084][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.008221][ T5812] bridge_slave_1: entered allmulticast mode [ 62.015043][ T5812] bridge_slave_1: entered promiscuous mode [ 62.024808][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.036909][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.046610][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.054699][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.061967][ T5811] bridge_slave_0: entered allmulticast mode [ 62.068618][ T5811] bridge_slave_0: entered promiscuous mode [ 62.084440][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.091630][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.098911][ T5823] bridge_slave_1: entered allmulticast mode [ 62.106504][ T5823] bridge_slave_1: entered promiscuous mode [ 62.137703][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.144933][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.152234][ T5811] bridge_slave_1: entered allmulticast mode [ 62.158900][ T5811] bridge_slave_1: entered promiscuous mode [ 62.188078][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.210088][ T5810] team0: Port device team_slave_0 added [ 62.226687][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.237869][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.248750][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.267192][ T5810] team0: Port device team_slave_1 added [ 62.282564][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.300902][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.326525][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.355651][ T5812] team0: Port device team_slave_0 added [ 62.363690][ T5812] team0: Port device team_slave_1 added [ 62.377153][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.390839][ T5813] team0: Port device team_slave_0 added [ 62.417860][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.425273][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.451290][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.463981][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.471089][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.497353][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.518391][ T5813] team0: Port device team_slave_1 added [ 62.532978][ T5823] team0: Port device team_slave_0 added [ 62.568677][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.575974][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.602956][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.616923][ T5823] team0: Port device team_slave_1 added [ 62.642174][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.649129][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.675771][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.686948][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.694025][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.720589][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.733859][ T5811] team0: Port device team_slave_0 added [ 62.740465][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.747440][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.773783][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.785633][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.792887][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.818866][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.830511][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.837471][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.863527][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.881267][ T5811] team0: Port device team_slave_1 added [ 62.964629][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.971779][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.998262][ T5128] Bluetooth: hci2: command tx timeout [ 62.998289][ T5814] Bluetooth: hci4: command tx timeout [ 63.004179][ T5128] Bluetooth: hci3: command tx timeout [ 63.004258][ T5128] Bluetooth: hci0: command tx timeout [ 63.004422][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.009746][ T5825] Bluetooth: hci1: command tx timeout [ 63.016845][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.043987][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.069970][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.084603][ T5810] hsr_slave_0: entered promiscuous mode [ 63.091446][ T5810] hsr_slave_1: entered promiscuous mode [ 63.116413][ T5813] hsr_slave_0: entered promiscuous mode [ 63.122569][ T5813] hsr_slave_1: entered promiscuous mode [ 63.128415][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.136974][ T5813] Cannot create hsr debugfs directory [ 63.160507][ T5823] hsr_slave_0: entered promiscuous mode [ 63.166644][ T5823] hsr_slave_1: entered promiscuous mode [ 63.173058][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.180685][ T5823] Cannot create hsr debugfs directory [ 63.189699][ T5812] hsr_slave_0: entered promiscuous mode [ 63.197395][ T5812] hsr_slave_1: entered promiscuous mode [ 63.203496][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.211365][ T5812] Cannot create hsr debugfs directory [ 63.291973][ T5811] hsr_slave_0: entered promiscuous mode [ 63.298046][ T5811] hsr_slave_1: entered promiscuous mode [ 63.304169][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.312281][ T5811] Cannot create hsr debugfs directory [ 63.666116][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.685118][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.695446][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.712448][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.727544][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.740975][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.761372][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.779844][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.824593][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.835497][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.848560][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.874927][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.940426][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.963198][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.990708][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.017145][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.073390][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.102344][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.111611][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.130083][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.139595][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.159701][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.190972][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.215816][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.223057][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.244798][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.251980][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.281914][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.325603][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.343730][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.357579][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.364778][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.382474][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.389599][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.399479][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.406637][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.442858][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.449934][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.528258][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.538537][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 64.538551][ T30] audit: type=1400 audit(1745962317.773:111): avc: denied { sys_module } for pid=5810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.597021][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.615042][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.637675][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.644904][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.657704][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.664878][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.726026][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.783583][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.803084][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.810318][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.838705][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.845921][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.047002][ T5810] veth0_vlan: entered promiscuous mode [ 65.071602][ T5814] Bluetooth: hci1: command tx timeout [ 65.077050][ T5814] Bluetooth: hci4: command tx timeout [ 65.077107][ T5819] Bluetooth: hci0: command tx timeout [ 65.082833][ T5814] Bluetooth: hci3: command tx timeout [ 65.092137][ T5819] Bluetooth: hci2: command tx timeout [ 65.104131][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.144736][ T5810] veth1_vlan: entered promiscuous mode [ 65.161575][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.186465][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.267738][ T5810] veth0_macvtap: entered promiscuous mode [ 65.292519][ T5810] veth1_macvtap: entered promiscuous mode [ 65.323458][ T5823] veth0_vlan: entered promiscuous mode [ 65.345103][ T5813] veth0_vlan: entered promiscuous mode [ 65.359657][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.375613][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.396384][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.414013][ T5823] veth1_vlan: entered promiscuous mode [ 65.425329][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.434859][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.445095][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.456724][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.474361][ T5813] veth1_vlan: entered promiscuous mode [ 65.519282][ T5823] veth0_macvtap: entered promiscuous mode [ 65.543473][ T5823] veth1_macvtap: entered promiscuous mode [ 65.577013][ T5812] veth0_vlan: entered promiscuous mode [ 65.601461][ T5813] veth0_macvtap: entered promiscuous mode [ 65.626547][ T5813] veth1_macvtap: entered promiscuous mode [ 65.655032][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.667106][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.679924][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.697356][ T5812] veth1_vlan: entered promiscuous mode [ 65.709772][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.724708][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.735785][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.745312][ T5811] veth0_vlan: entered promiscuous mode [ 65.757366][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.766619][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.774553][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.774603][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.774625][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.795622][ T5812] veth0_macvtap: entered promiscuous mode [ 65.812466][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.814364][ T5811] veth1_vlan: entered promiscuous mode [ 65.852422][ T5812] veth1_macvtap: entered promiscuous mode [ 65.860016][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.874133][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.884250][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.894809][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.906036][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.925371][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.933066][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.944799][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.951733][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.955645][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.973170][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.983070][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.993581][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.004880][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.023197][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.034731][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.044844][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.056100][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.067462][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.089346][ T30] audit: type=1400 audit(1745962319.323:112): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.ceAiOp/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.097790][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.124484][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.131929][ T30] audit: type=1400 audit(1745962319.323:113): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.134376][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.156077][ T30] audit: type=1400 audit(1745962319.353:114): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.ceAiOp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.191748][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.195202][ T30] audit: type=1400 audit(1745962319.353:115): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.202324][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.228054][ T30] audit: type=1400 audit(1745962319.363:116): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.ceAiOp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.236403][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.272991][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.283785][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.294033][ T30] audit: type=1400 audit(1745962319.363:117): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.ceAiOp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.294188][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.333058][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.343073][ T30] audit: type=1400 audit(1745962319.363:118): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.345802][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.376592][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.391118][ T30] audit: type=1400 audit(1745962319.463:119): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.418091][ T30] audit: type=1400 audit(1745962319.463:120): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="gadgetfs" ino=6335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.419309][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.450596][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.459319][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.469593][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.484027][ T5811] veth0_macvtap: entered promiscuous mode [ 66.494095][ T5811] veth1_macvtap: entered promiscuous mode [ 66.597267][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.615958][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.627291][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.637952][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.648594][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.659624][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.669630][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.680366][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.691472][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.700470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.719244][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.728891][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.741299][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.749205][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.772092][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.772112][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.772119][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.772131][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.772139][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.772149][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.773782][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.827396][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.827417][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.833003][ T5811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.833038][ T5811] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.833061][ T5811] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.833082][ T5811] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.997388][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.997411][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.095456][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.112511][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.137961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 67.151257][ T5825] Bluetooth: hci3: command tx timeout [ 67.157239][ T5819] Bluetooth: hci2: command tx timeout [ 67.157255][ T5814] Bluetooth: hci0: command tx timeout [ 67.163096][ T5819] Bluetooth: hci4: command tx timeout [ 67.168174][ T5128] Bluetooth: hci1: command tx timeout [ 67.216246][ T4162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.250743][ T4162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.297440][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.309409][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.385223][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.401507][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.474734][ T4162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.510775][ T4162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.069129][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.562163][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.681237][ T5863] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.881439][ T5818] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.042738][ T5863] usb 5-1: device not accepting address 2, error -71 [ 69.417535][ T5940] FAULT_INJECTION: forcing a failure. [ 69.417535][ T5940] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.430899][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.2.10 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 69.430923][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 69.430933][ T5940] Call Trace: [ 69.430939][ T5940] [ 69.430945][ T5940] dump_stack_lvl+0x16c/0x1f0 [ 69.430970][ T5940] should_fail_ex+0x512/0x640 [ 69.430995][ T5940] _copy_from_user+0x2e/0xd0 [ 69.431018][ T5940] copy_msghdr_from_user+0x98/0x160 [ 69.431044][ T5940] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 69.431067][ T5940] ? irqentry_exit+0x3b/0x90 [ 69.431109][ T5940] ___sys_sendmsg+0xfe/0x1d0 [ 69.431135][ T5940] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.431189][ T5940] __sys_sendmsg+0x16d/0x220 [ 69.431214][ T5940] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.431236][ T5940] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.431261][ T5940] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 69.431286][ T5940] ? __x64_sys_sendmsg+0x11/0xb0 [ 69.431309][ T5940] ? __x64_sys_sendmsg+0x1f/0xb0 [ 69.431336][ T5940] do_syscall_64+0xcd/0x260 [ 69.431358][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.431375][ T5940] RIP: 0033:0x7f15dc78e969 [ 69.431389][ T5940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.431404][ T5940] RSP: 002b:00007f15da5b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.431420][ T5940] RAX: ffffffffffffffda RBX: 00007f15dc9b6160 RCX: 00007f15dc78e969 [ 69.431431][ T5940] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 69.431441][ T5940] RBP: 00007f15da5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 69.431450][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.431460][ T5940] R13: 0000000000000000 R14: 00007f15dc9b6160 R15: 00007ffd1fdf9898 [ 69.431483][ T5940] [ 69.474013][ T5128] Bluetooth: hci4: command tx timeout [ 69.479204][ T5814] Bluetooth: hci0: command tx timeout [ 69.486864][ T5825] Bluetooth: hci2: command tx timeout [ 69.489800][ T5814] Bluetooth: hci3: command tx timeout [ 69.526244][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.664599][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.675989][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.686324][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.702931][ T5818] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.751885][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.786909][ T5818] usb 2-1: config 0 descriptor?? [ 69.833609][ T5942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11'. [ 69.841620][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 69.841637][ T30] audit: type=1400 audit(1745962323.073:163): avc: denied { nlmsg_write } for pid=5941 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.894190][ T5942] unsupported nlmsg_type 40 [ 70.003342][ T30] audit: type=1400 audit(1745962323.243:164): avc: denied { ioctl } for pid=5945 comm="syz.2.13" path="socket:[8080]" dev="sockfs" ino=8080 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.039204][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 70.172769][ T5946] team0 (unregistering): Port device team_slave_0 removed [ 70.186285][ T5946] team0 (unregistering): Port device team_slave_1 removed [ 70.271774][ T5818] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.284389][ T5818] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.294028][ T5818] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.306301][ T5818] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.350571][ T5863] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 70.420020][ T30] audit: type=1400 audit(1745962323.633:165): avc: denied { allowed } for pid=5941 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.454228][ T5818] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 70.535444][ T5926] warning: `syz.1.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.568604][ T5818] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 70.605210][ T30] audit: type=1400 audit(1745962323.643:166): avc: denied { create } for pid=5941 comm="syz.3.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.637865][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 70.727171][ T5818] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 70.780683][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 70.806123][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 70.831603][ T5818] usb 2-1: USB disconnect, device number 2 [ 70.840412][ T5863] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 70.852636][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.002071][ T30] audit: type=1400 audit(1745962324.153:167): avc: denied { create } for pid=5950 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.029124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.131539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.160411][ T5863] usb 5-1: Product: syz [ 71.174253][ T5863] usb 5-1: Manufacturer: syz [ 71.179594][ T30] audit: type=1400 audit(1745962324.163:168): avc: denied { create } for pid=5950 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 71.206566][ T5863] usb 5-1: SerialNumber: syz [ 71.235735][ T5863] usb 5-1: config 0 descriptor?? [ 71.241497][ T30] audit: type=1400 audit(1745962324.183:169): avc: denied { write } for pid=5950 comm="syz.3.14" path="socket:[8095]" dev="sockfs" ino=8095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 71.265839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 71.282917][ T5944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 71.300847][ T5944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 71.311317][ T5863] usb 5-1: ucan: probing device on interface #0 [ 71.346350][ T30] audit: type=1400 audit(1745962324.183:170): avc: denied { nlmsg_read } for pid=5950 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 71.394568][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.405880][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.449867][ T30] audit: type=1400 audit(1745962324.683:171): avc: denied { create } for pid=5958 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.452603][ T5959] fuse: Unknown parameter '' [ 71.470076][ T30] audit: type=1400 audit(1745962324.693:172): avc: denied { ioctl } for pid=5958 comm="syz.3.17" path="socket:[8100]" dev="sockfs" ino=8100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.570031][ T5959] input: syz0 as /devices/virtual/input/input5 [ 71.591339][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 71.699889][ T5966] fuse: Unknown parameter '' [ 71.716950][ T5966] input: syz0 as /devices/virtual/input/input6 [ 71.774115][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 71.783801][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.793309][ T24] usb 1-1: Product: syz [ 71.797569][ T24] usb 1-1: Manufacturer: syz [ 71.802587][ T24] usb 1-1: SerialNumber: syz [ 71.810802][ T24] usb 1-1: config 0 descriptor?? [ 71.940450][ T5863] ucan 5-1:0.0: probe with driver ucan failed with error -22 [ 72.026688][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 72.510947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.832001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.832010][ T5814] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 72.849954][ T5814] Bluetooth: hci1: Injecting HCI hardware error event [ 72.853419][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 72.858539][ T5814] Bluetooth: hci1: hardware error 0x00 [ 72.908747][ T5977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'. [ 73.179551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.344275][ T5955] NILFS (nullb0): couldn't find nilfs on the device [ 73.393035][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.412857][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.510650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 73.519614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 74.524796][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 74.812815][ T5863] usb 1-1: USB disconnect, device number 2 [ 75.518714][ T5814] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 75.927401][ T5864] usb 5-1: USB disconnect, device number 3 [ 76.131047][ T5991] Zero length message leads to an empty skb [ 76.287690][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 76.287711][ T30] audit: type=1400 audit(1745962329.263:204): avc: denied { read } for pid=5985 comm="syz.2.25" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.478516][ T30] audit: type=1400 audit(1745962329.273:205): avc: denied { open } for pid=5985 comm="syz.2.25" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.710238][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.792002][ T30] audit: type=1400 audit(1745962330.033:206): avc: denied { create } for pid=6007 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.806182][ T30] audit: type=1400 audit(1745962331.043:207): avc: denied { create } for pid=6002 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.830265][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 78.177788][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 78.200232][ T30] audit: type=1400 audit(1745962331.063:208): avc: denied { write } for pid=6007 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.366691][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.390202][ T24] usb 3-1: Product: syz [ 78.394437][ T24] usb 3-1: Manufacturer: syz [ 78.399066][ T24] usb 3-1: SerialNumber: syz [ 78.449789][ T30] audit: type=1400 audit(1745962331.283:209): avc: denied { create } for pid=6007 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.474510][ T30] audit: type=1400 audit(1745962331.283:210): avc: denied { getopt } for pid=6007 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.494694][ T30] audit: type=1400 audit(1745962331.573:211): avc: denied { read write } for pid=6015 comm="syz.4.32" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 78.496094][ T24] usb 3-1: config 0 descriptor?? [ 78.527454][ T30] audit: type=1400 audit(1745962331.573:212): avc: denied { open } for pid=6015 comm="syz.4.32" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 78.569018][ T30] audit: type=1400 audit(1745962331.643:213): avc: denied { bind } for pid=6002 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.660250][ T3701] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.866632][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 78.871919][ T6013] infiniband syz!: set active [ 78.879776][ T6013] infiniband syz!: added team_slave_0 [ 78.886490][ T6013] syz!: rxe_create_cq: returned err = -12 [ 78.892868][ T6013] infiniband syz!: Couldn't create ib_mad CQ [ 78.899008][ T6013] infiniband syz!: Couldn't open port 1 [ 79.107470][ T6029] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 79.336258][ T3701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.437530][ T3701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.494275][ T3701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 79.509205][ T3701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.551857][ T6013] RDS/IB: syz!: added [ 79.556257][ T6013] smc: adding ib device syz! with port count 1 [ 79.563087][ T6013] smc: ib device syz! port 1 has pnetid [ 80.300925][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 80.434939][ T3701] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 80.453513][ T3701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.468563][ T3701] usb 5-1: config 0 descriptor?? [ 80.486830][ T3701] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 80.504137][ T24] usb 3-1: USB disconnect, device number 2 [ 80.507137][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 80.548105][ T6040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.36'. [ 80.734826][ T3701] usb 5-1: USB disconnect, device number 4 [ 80.746252][ T6047] mmap: syz.3.40 (6047) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.755786][ T6047] FAULT_INJECTION: forcing a failure. [ 80.755786][ T6047] name failslab, interval 1, probability 0, space 0, times 1 [ 80.755846][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.3.40 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 80.755867][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 80.755875][ T6047] Call Trace: [ 80.755881][ T6047] [ 80.755887][ T6047] dump_stack_lvl+0x16c/0x1f0 [ 80.755911][ T6047] should_fail_ex+0x512/0x640 [ 80.755931][ T6047] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 80.755955][ T6047] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 80.755969][ T6047] should_failslab+0xc2/0x120 [ 80.755984][ T6047] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 80.756003][ T6047] ? vma_merge_new_range+0x3f8/0xc10 [ 80.756023][ T6047] ? vm_area_alloc+0x1f/0x160 [ 80.756043][ T6047] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 80.756057][ T6047] vm_area_alloc+0x1f/0x160 [ 80.756072][ T6047] __mmap_region+0xfd0/0x27c0 [ 80.756086][ T6047] ? __pfx___mmap_region+0x10/0x10 [ 80.756102][ T6047] ? find_held_lock+0x2b/0x80 [ 80.756129][ T6047] ? finish_task_switch.isra.0+0x21c/0xc10 [ 80.756168][ T6047] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 80.756195][ T6047] mmap_region+0x32b/0x3f0 [ 80.756212][ T6047] do_mmap+0xd8e/0x11b0 [ 80.756234][ T6047] ? __pfx_do_mmap+0x10/0x10 [ 80.756251][ T6047] ? __pfx_down_write_killable+0x10/0x10 [ 80.756275][ T6047] __do_sys_remap_file_pages+0x977/0xac0 [ 80.756302][ T6047] ? __fget_files+0x20e/0x3c0 [ 80.756333][ T6047] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 80.756352][ T6047] ? native_tss_update_io_bitmap+0x3ca/0x720 [ 80.756371][ T6047] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 80.756384][ T6047] ? fput+0x70/0xf0 [ 80.756400][ T6047] ? ksys_write+0x1b9/0x240 [ 80.756421][ T6047] ? __pfx_ksys_write+0x10/0x10 [ 80.756441][ T6047] ? rcu_is_watching+0x12/0xc0 [ 80.756465][ T6047] do_syscall_64+0xcd/0x260 [ 80.756486][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.756501][ T6047] RIP: 0033:0x7f90aa58e969 [ 80.756515][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.756530][ T6047] RSP: 002b:00007f90ab476038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 80.756547][ T6047] RAX: ffffffffffffffda RBX: 00007f90aa7b5fa0 RCX: 00007f90aa58e969 [ 80.756557][ T6047] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 80.756566][ T6047] RBP: 00007f90ab476090 R08: 00000000f0ffffff R09: 0000000000000000 [ 80.756576][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.756584][ T6047] R13: 0000000000000000 R14: 00007f90aa7b5fa0 R15: 00007ffde45e9e78 [ 80.756603][ T6047] [ 80.812317][ T6048] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 80.848398][ T3701] appletouch 5-1:0.0: input: appletouch disconnected [ 81.294282][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 81.294300][ T30] audit: type=1400 audit(1745962334.523:222): avc: denied { getopt } for pid=6050 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.320779][ T48] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.375433][ T30] audit: type=1400 audit(1745962334.543:223): avc: denied { read write } for pid=6053 comm="syz.0.42" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.376283][ T48] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.430522][ T30] audit: type=1400 audit(1745962334.543:224): avc: denied { open } for pid=6053 comm="syz.0.42" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.663675][ T950] cfg80211: failed to load regulatory.db [ 81.721735][ T30] audit: type=1400 audit(1745962334.913:225): avc: denied { bind } for pid=6056 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.780224][ T30] audit: type=1400 audit(1745962334.913:226): avc: denied { accept } for pid=6056 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.822973][ T6062] syz.4.43 uses obsolete (PF_INET,SOCK_PACKET) [ 81.836047][ T30] audit: type=1400 audit(1745962334.963:227): avc: denied { read } for pid=6056 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.856735][ T30] audit: type=1400 audit(1745962335.043:228): avc: denied { mounton } for pid=6059 comm="syz.3.44" path="/14/file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.502997][ T30] audit: type=1400 audit(1745962335.743:229): avc: denied { write } for pid=6053 comm="syz.0.42" name="hidraw0" dev="devtmpfs" ino=2777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.601141][ T5863] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.666857][ T30] audit: type=1400 audit(1745962335.903:230): avc: denied { create } for pid=6056 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.785707][ T6073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 82.795637][ T6073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 82.817723][ T6073] netlink: 'syz.3.47': attribute type 1 has an invalid length. [ 83.238592][ T30] audit: type=1400 audit(1745962336.473:231): avc: denied { setopt } for pid=6056 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.300923][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 83.307570][ T5863] usb 2-1: config index 0 descriptor too short (expected 168, got 36) [ 83.316114][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.490376][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.577039][ T6079] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 83.630810][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 83.953492][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 83.964263][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.006145][ T5863] usb 2-1: config 0 descriptor?? [ 84.592618][ T6091] fuse: Bad value for 'fd' [ 84.710199][ T5863] logitech-djreceiver 0003:046D:C53F.0003: hidraw0: USB HID v0.00 Device [HID 046d:c53f] on usb-dummy_hcd.1-1/input0 [ 84.731802][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.761166][ T5864] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.940370][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 85.172375][ T5864] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 85.185737][ T5818] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 85.193930][ T48] usb 2-1: USB disconnect, device number 3 [ 85.205503][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.216216][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.362445][ T5864] usb 3-1: config 0 descriptor?? [ 85.387889][ T5818] pvrusb2: Hardware description: Terratec Grabster AV400 [ 85.395264][ T5818] pvrusb2: ********** [ 85.399279][ T5818] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 85.410375][ T5818] pvrusb2: Important functionality might not be entirely working. [ 85.418417][ T5818] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 85.430006][ T5818] pvrusb2: ********** [ 85.752091][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.761367][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.794983][ T5864] usb 3-1: Cannot set autoneg [ 85.806443][ T5864] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 85.904656][ T5864] usb 3-1: USB disconnect, device number 3 [ 85.923705][ T2332] pvrusb2: Invalid write control endpoint [ 86.586067][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 86.586104][ T30] audit: type=1400 audit(1745962339.533:247): avc: denied { setopt } for pid=6113 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.828639][ T30] audit: type=1400 audit(1745962339.543:248): avc: denied { write } for pid=6113 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.918752][ T2332] pvrusb2: Invalid write control endpoint [ 87.135026][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 87.169741][ T30] audit: type=1400 audit(1745962340.023:249): avc: denied { ioctl } for pid=6119 comm="syz.1.59" path="socket:[8498]" dev="sockfs" ino=8498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.198450][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 87.206220][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 87.222150][ T2332] pvrusb2: Device being rendered inoperable [ 87.240227][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 87.247514][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 87.315933][ T6139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.329609][ T2332] pvrusb2: Attached sub-driver cx25840 [ 87.341746][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 87.341780][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 87.505897][ T30] audit: type=1400 audit(1745962340.733:250): avc: denied { getopt } for pid=6138 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.505948][ T30] audit: type=1400 audit(1745962340.743:251): avc: denied { write } for pid=6100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.505984][ T30] audit: type=1400 audit(1745962340.743:252): avc: denied { add_name } for pid=6100 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.506021][ T30] audit: type=1400 audit(1745962340.743:253): avc: denied { create } for pid=6100 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.506055][ T30] audit: type=1400 audit(1745962340.743:254): avc: denied { write } for pid=6100 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2077 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.506091][ T30] audit: type=1400 audit(1745962340.743:255): avc: denied { append } for pid=6100 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2077 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.527100][ T6145] /dev/sg0: Can't lookup blockdev [ 87.530980][ T30] audit: type=1400 audit(1745962340.753:256): avc: denied { read write } for pid=6138 comm="syz.0.61" path="socket:[8504]" dev="sockfs" ino=8504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.578850][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.582626][ T48] usb 4-1: USB disconnect, device number 2 [ 87.771694][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 87.789494][ T6151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.63'. [ 87.807684][ T5818] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 87.943473][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 87.956225][ T6156] netlink: 32 bytes leftover after parsing attributes in process `syz.1.64'. [ 87.969936][ T5818] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.985214][ T5818] usb 1-1: config 0 has no interface number 0 [ 87.992608][ T5818] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 88.020299][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.054235][ T5818] usb 1-1: config 0 descriptor?? [ 88.085173][ T5818] usb 1-1: selecting invalid altsetting 1 [ 88.108722][ T5818] dvb_ttusb_budget: ttusb_init_controller: error [ 88.153616][ T5818] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 88.580477][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 88.765094][ T5863] IPVS: starting estimator thread 0... [ 88.980366][ T6165] IPVS: using max 54 ests per chain, 129600 per kthread [ 89.182991][ T5818] DVB: Unable to find symbol cx22700_attach() [ 90.370247][ T5818] DVB: Unable to find symbol tda10046_attach() [ 90.376461][ T5818] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 90.742575][ T5818] usb 1-1: USB disconnect, device number 3 [ 92.041221][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 92.066790][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.74'. [ 92.172550][ T6213] fuse: Unknown parameter '' [ 92.179996][ T6213] input: syz0 as /devices/virtual/input/input8 [ 92.195318][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 92.195335][ T30] audit: type=1400 audit(1745962345.433:261): avc: denied { create } for pid=6214 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.317596][ T30] audit: type=1400 audit(1745962345.493:262): avc: denied { execute } for pid=6214 comm="syz.4.77" path="/12/pids.events" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.485883][ T6219] ======================================================= [ 92.485883][ T6219] WARNING: The mand mount option has been deprecated and [ 92.485883][ T6219] and is ignored by this kernel. Remove the mand [ 92.485883][ T6219] option from the mount to silence this warning. [ 92.485883][ T6219] ======================================================= [ 92.527537][ T6219] tmpfs: Bad value for 'mpol' [ 92.626462][ T6225] tmpfs: Bad value for 'mpol' [ 92.698953][ T30] audit: type=1400 audit(1745962345.923:263): avc: denied { append } for pid=6222 comm="syz.4.80" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.780361][ T30] audit: type=1400 audit(1745962345.963:264): avc: denied { create } for pid=6217 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.800413][ T30] audit: type=1400 audit(1745962345.993:265): avc: denied { bind } for pid=6220 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.821032][ T30] audit: type=1400 audit(1745962345.993:266): avc: denied { write } for pid=6220 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.909341][ T30] audit: type=1400 audit(1745962346.143:267): avc: denied { read } for pid=6222 comm="syz.4.80" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 92.962659][ T30] audit: type=1400 audit(1745962346.173:268): avc: denied { open } for pid=6222 comm="syz.4.80" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.050354][ T6228] netlink: 'syz.4.80': attribute type 23 has an invalid length. [ 93.080586][ T30] audit: type=1400 audit(1745962602.323:269): avc: denied { ioctl } for pid=6231 comm="syz.0.82" path="socket:[9389]" dev="sockfs" ino=9389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.142441][ T30] audit: type=1400 audit(1745962602.333:270): avc: denied { map } for pid=6229 comm="syz.2.81" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.841078][ T6227] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.865945][ T6227] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.908740][ T6227] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.935659][ T6227] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.960816][ T6227] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.986631][ T6227] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.999794][ T6227] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.006460][ T6227] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.015458][ T6227] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.025539][ T6227] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 94.032324][ T6227] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 94.058475][ T6227] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 94.210042][ T6245] netlink: 22 bytes leftover after parsing attributes in process `syz.1.85'. [ 95.106423][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.950560][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.030041][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 96.036267][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.100071][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 96.131019][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 96.302436][ T6266] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 96.511677][ T6267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6267 comm=syz.4.91 [ 96.582670][ T6269] bridge0: port 3(syz_tun) entered blocking state [ 96.628229][ T6269] bridge0: port 3(syz_tun) entered disabled state [ 96.663343][ T6269] syz_tun: entered allmulticast mode [ 96.784351][ T6269] syz_tun: entered promiscuous mode [ 97.809747][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.051003][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.082561][ T6269] bridge0: port 3(syz_tun) entered blocking state [ 98.089478][ T6269] bridge0: port 3(syz_tun) entered forwarding state [ 98.138732][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.138741][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.277818][ T6271] input: syz0 as /devices/virtual/input/input9 [ 98.288056][ T6281] fuse: Bad value for 'fd' [ 98.431559][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 98.431579][ T30] audit: type=1400 audit(1745962607.664:275): avc: denied { listen } for pid=6270 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.817829][ T6291] Cannot find add_set index 0 as target [ 98.844589][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 99.879007][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.534425][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.534446][ T5128] Bluetooth: hci4: command 0x0c1a tx timeout [ 100.546794][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.617045][ T30] audit: type=1400 audit(1745962610.854:276): avc: denied { mount } for pid=6310 comm="syz.4.102" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.038195][ T6341] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.058450][ T6340] FAULT_INJECTION: forcing a failure. [ 102.058450][ T6340] name failslab, interval 1, probability 0, space 0, times 0 [ 102.070007][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 102.102278][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.188826][ T30] audit: type=1400 audit(1745962611.424:277): avc: denied { setopt } for pid=6342 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.291571][ T6340] CPU: 0 UID: 0 PID: 6340 Comm: syz.4.109 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 102.291600][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 102.291609][ T6340] Call Trace: [ 102.291615][ T6340] [ 102.291621][ T6340] dump_stack_lvl+0x16c/0x1f0 [ 102.291645][ T6340] should_fail_ex+0x512/0x640 [ 102.291666][ T6340] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 102.291690][ T6340] should_failslab+0xc2/0x120 [ 102.291708][ T6340] __kmalloc_cache_noprof+0x6a/0x3e0 [ 102.291730][ T6340] ? v9fs_mount+0xa6/0xa30 [ 102.291752][ T6340] v9fs_mount+0xa6/0xa30 [ 102.291770][ T6340] ? __pfx_v9fs_mount+0x10/0x10 [ 102.291789][ T6340] ? cap_capable+0xb3/0x250 [ 102.291807][ T6340] ? __pfx_v9fs_mount+0x10/0x10 [ 102.291826][ T6340] legacy_get_tree+0x109/0x220 [ 102.291843][ T6340] vfs_get_tree+0x8b/0x340 [ 102.291870][ T6340] path_mount+0x14d4/0x1f20 [ 102.291888][ T6340] ? kmem_cache_free+0x2d4/0x4d0 [ 102.291911][ T6340] ? __pfx_path_mount+0x10/0x10 [ 102.291930][ T6340] ? putname+0x154/0x1a0 [ 102.291948][ T6340] __x64_sys_mount+0x28d/0x310 [ 102.291964][ T6340] ? __pfx___x64_sys_mount+0x10/0x10 [ 102.291979][ T6340] ? rcu_is_watching+0x12/0xc0 [ 102.292004][ T6340] do_syscall_64+0xcd/0x260 [ 102.292024][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.292041][ T6340] RIP: 0033:0x7fcfb658e969 [ 102.292054][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.292068][ T6340] RSP: 002b:00007fcfb7453038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.292083][ T6340] RAX: ffffffffffffffda RBX: 00007fcfb67b5fa0 RCX: 00007fcfb658e969 [ 102.292092][ T6340] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 102.292101][ T6340] RBP: 00007fcfb7453090 R08: 0000200000000200 R09: 0000000000000000 [ 102.292110][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.292119][ T6340] R13: 0000000000000000 R14: 00007fcfb67b5fa0 R15: 00007fff875a3a28 [ 102.292142][ T6340] [ 102.544067][ T30] audit: type=1400 audit(1745962611.784:278): avc: denied { create } for pid=6342 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.777746][ T3701] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.842732][ T30] audit: type=1400 audit(1745962611.784:279): avc: denied { bind } for pid=6342 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.945774][ T30] audit: type=1400 audit(1745962611.784:280): avc: denied { write } for pid=6342 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.990004][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.148599][ T3701] usb 4-1: Using ep0 maxpacket: 16 [ 103.155535][ T3701] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 103.163731][ T3701] usb 4-1: config 0 has no interface number 0 [ 103.170113][ T3701] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.182152][ T3701] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.642692][ T3701] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 103.687022][ T6358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.112'. [ 103.704852][ T3701] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 103.716599][ T3701] usb 4-1: Product: syz [ 103.724183][ T3701] usb 4-1: SerialNumber: syz [ 103.733947][ T3701] usb 4-1: config 0 descriptor?? [ 103.750868][ T3701] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 103.763317][ T3701] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10 [ 104.101548][ T30] audit: type=1400 audit(1745962613.344:281): avc: denied { write } for pid=6338 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.521132][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.529369][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.536548][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.544027][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.551514][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.558668][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.565810][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.573028][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.580182][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.587343][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.661087][ T3701] usb 4-1: USB disconnect, device number 3 [ 104.666975][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 104.713824][ T30] audit: type=1400 audit(1745962613.954:282): avc: denied { setopt } for pid=6367 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.872079][ T3701] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 105.598746][ T30] audit: type=1400 audit(1745962614.754:283): avc: denied { write } for pid=6371 comm="syz.2.116" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.743647][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.122'. [ 106.780396][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.122'. [ 107.040652][ T6394] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 107.121346][ T30] audit: type=1400 audit(1745962616.345:284): avc: denied { read } for pid=6398 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.418423][ T30] audit: type=1400 audit(1745962617.655:285): avc: denied { mount } for pid=6414 comm="syz.0.127" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 108.450163][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'. [ 108.463442][ T30] audit: type=1400 audit(1745962617.705:286): avc: denied { read } for pid=6414 comm="syz.0.127" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.569570][ T30] audit: type=1400 audit(1745962617.705:287): avc: denied { open } for pid=6414 comm="syz.0.127" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.619790][ T30] audit: type=1400 audit(1745962617.835:288): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 108.621077][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.723797][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.746123][ T30] audit: type=1400 audit(1745962617.975:289): avc: denied { rename } for pid=5170 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.406857][ T30] audit: type=1400 audit(1745962617.985:290): avc: denied { unlink } for pid=5170 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.518668][ T3701] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.264526][ T30] audit: type=1400 audit(1745962617.985:291): avc: denied { create } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.309070][ T30] audit: type=1400 audit(1745962618.275:292): avc: denied { bind } for pid=6425 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.343199][ T30] audit: type=1400 audit(1745962618.275:293): avc: denied { name_bind } for pid=6425 comm="syz.4.130" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 112.366553][ T30] audit: type=1400 audit(1745962618.275:294): avc: denied { node_bind } for pid=6425 comm="syz.4.130" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.580245][ T3701] usb 3-1: Using ep0 maxpacket: 16 [ 112.615993][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.635411][ T30] audit: type=1400 audit(1745962618.355:295): avc: denied { write } for pid=6425 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.898078][ T30] audit: type=1400 audit(1745962622.075:296): avc: denied { ioctl } for pid=6437 comm="syz.4.133" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 113.892181][ T6438] vivid-001: disconnect [ 113.977837][ T30] audit: type=1400 audit(1745962622.265:297): avc: denied { create } for pid=6435 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.285311][ T6447] Cannot find add_set index 0 as target [ 114.303189][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 114.615500][ T3701] usb 3-1: device descriptor read/all, error -71 [ 114.684054][ T6436] vivid-001: reconnect [ 114.997720][ T30] audit: type=1400 audit(1745962624.236:298): avc: denied { bind } for pid=6452 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.343189][ T6459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.138'. [ 115.369907][ T6459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.138'. [ 115.647914][ T6459] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 115.677556][ T30] audit: type=1400 audit(1745962624.236:299): avc: denied { name_bind } for pid=6452 comm="syz.1.139" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 115.759708][ T6460] lo speed is unknown, defaulting to 1000 [ 115.768079][ T6460] lo speed is unknown, defaulting to 1000 [ 115.774599][ T6460] lo speed is unknown, defaulting to 1000 [ 115.952942][ T6460] infiniband syz0: set active [ 115.957712][ T6460] infiniband syz0: added lo [ 115.984152][ T6460] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 115.987370][ T6460] infiniband syz0: Couldn't open port 1 [ 115.997225][ T30] audit: type=1400 audit(1745962624.236:300): avc: denied { node_bind } for pid=6452 comm="syz.1.139" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 116.014854][ T6460] RDS/IB: syz0: added [ 116.027065][ T6460] smc: adding ib device syz0 with port count 1 [ 116.033413][ T6460] smc: ib device syz0 port 1 has pnetid [ 116.039801][ T6460] lo speed is unknown, defaulting to 1000 [ 116.121389][ T6460] lo speed is unknown, defaulting to 1000 [ 116.202814][ T6460] lo speed is unknown, defaulting to 1000 [ 116.283200][ T6460] lo speed is unknown, defaulting to 1000 [ 116.363842][ T6460] lo speed is unknown, defaulting to 1000 [ 116.487588][ T5863] lo speed is unknown, defaulting to 1000 [ 116.501948][ T5864] lo speed is unknown, defaulting to 1000 [ 117.624110][ T6469] syz!: rxe_newlink: already configured on team_slave_0 [ 118.299241][ T5863] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.775466][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 118.784544][ T6491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.827152][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 118.873068][ T6491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.877390][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.911457][ T5863] usb 3-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 118.927756][ T5863] usb 3-1: config 1 interface 0 altsetting 158 endpoint 0x8 has an invalid bInterval 144, changing to 11 [ 118.957188][ T5863] usb 3-1: config 1 interface 0 altsetting 158 endpoint 0x8 has invalid maxpacket 26098, setting to 1024 [ 118.976493][ T5863] usb 3-1: config 1 interface 0 altsetting 158 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.076142][ T5863] usb 3-1: config 1 interface 0 has no altsetting 0 [ 119.081013][ T6497] capability: warning: `syz.4.149' uses 32-bit capabilities (legacy support in use) [ 119.139617][ T5863] usb 3-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.40 [ 119.210444][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.254617][ T30] audit: type=1400 audit(1745962628.466:301): avc: denied { mount } for pid=6481 comm="syz.3.147" name="/" dev="ramfs" ino=10081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 119.311347][ T5863] usb 3-1: Product: syz [ 119.320880][ T5863] usb 3-1: Manufacturer: syz [ 119.329816][ T5863] usb 3-1: SerialNumber: syz [ 119.345749][ T6479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.350264][ T30] audit: type=1400 audit(1745962628.586:302): avc: denied { ioctl } for pid=6478 comm="syz.2.145" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.508002][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'. [ 119.541531][ T30] audit: type=1400 audit(1745962628.786:303): avc: denied { read write } for pid=6503 comm="syz.0.151" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.571384][ T30] audit: type=1400 audit(1745962628.786:304): avc: denied { open } for pid=6503 comm="syz.0.151" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.606514][ T30] audit: type=1400 audit(1745962628.786:305): avc: denied { read } for pid=6506 comm="syz.4.152" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.635926][ T5863] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 119.647856][ T5863] usb 3-1: USB disconnect, device number 6 [ 119.662857][ T30] audit: type=1400 audit(1745962628.786:306): avc: denied { open } for pid=6506 comm="syz.4.152" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.693484][ T30] audit: type=1400 audit(1745962628.786:307): avc: denied { ioctl } for pid=6506 comm="syz.4.152" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.787324][ T3701] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.951530][ T3701] usb 1-1: Using ep0 maxpacket: 32 [ 119.969616][ T3701] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 119.978451][ T3701] usb 1-1: config 0 has an invalid interface number: 98 but max is 1 [ 119.986676][ T3701] usb 1-1: config 0 has no interface number 0 [ 119.993067][ T3701] usb 1-1: config 0 has no interface number 1 [ 120.001993][ T3701] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 120.011358][ T3701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.021973][ T30] audit: type=1400 audit(1745962629.256:308): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 120.024399][ T3701] usb 1-1: Product: syz [ 120.047848][ T3701] usb 1-1: Manufacturer: syz [ 120.052487][ T3701] usb 1-1: SerialNumber: syz [ 120.077867][ T3701] usb 1-1: config 0 descriptor?? [ 120.087323][ T5865] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 120.207454][ T3701] viperboard 1-1:0.61: version 0.00 found at bus 001 address 004 [ 120.352556][ T5865] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.352990][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 120.868994][ T5865] usb 2-1: config 0 has no interface number 0 [ 121.297572][ T5865] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 121.324369][ T3701] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 121.329285][ T6526] xt_hashlimit: size too large, truncated to 1048576 [ 121.336793][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.365312][ T30] audit: type=1400 audit(1745962630.596:309): avc: denied { getopt } for pid=6523 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.388612][ T3701] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 121.405467][ T5865] usb 2-1: config 0 descriptor?? [ 121.416555][ T30] audit: type=1400 audit(1745962630.636:310): avc: denied { connect } for pid=6525 comm="syz.4.158" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.438282][ T30] audit: type=1400 audit(1745962630.636:311): avc: denied { write } for pid=6525 comm="syz.4.158" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.459689][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 121.463524][ T5865] usb 2-1: selecting invalid altsetting 1 [ 121.486003][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.492887][ T3701] viperboard 1-1:0.98: version 0.00 found at bus 001 address 004 [ 121.506679][ T5865] dvb_ttusb_budget: ttusb_init_controller: error [ 121.528239][ T5865] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 121.531640][ T9] usb 4-1: Product: syz [ 121.552650][ T9] usb 4-1: Manufacturer: syz [ 121.555168][ T3701] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 121.573193][ T3701] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 121.573322][ T9] usb 4-1: SerialNumber: syz [ 121.648349][ T24] IPVS: starting estimator thread 0... [ 121.671775][ T3701] usb 1-1: USB disconnect, device number 4 [ 121.697709][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'. [ 121.752998][ T6532] IPVS: using max 37 ests per chain, 88800 per kthread [ 122.147701][ T9] usb 4-1: config 0 descriptor?? [ 122.174192][ T5865] DVB: Unable to find symbol cx22700_attach() [ 122.230214][ T6537] xt_hashlimit: size too large, truncated to 1048576 [ 122.321868][ T5865] DVB: Unable to find symbol tda10046_attach() [ 122.354250][ T5865] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 122.413236][ T5865] usb 2-1: USB disconnect, device number 4 [ 122.438163][ T30] audit: type=1400 audit(1745962631.676:312): avc: denied { kexec_image_load } for pid=6514 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 122.595072][ T6546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.161'. [ 122.799484][ T9] airspy 4-1:0.0: Board ID: 05 [ 122.804310][ T9] airspy 4-1:0.0: Firmware version:  [ 123.096072][ T30] audit: type=1400 audit(1745962632.317:313): avc: denied { create } for pid=6545 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.161262][ T30] audit: type=1400 audit(1745962632.327:314): avc: denied { bind } for pid=6545 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.202791][ T30] audit: type=1400 audit(1745962632.437:315): avc: denied { ioctl } for pid=6554 comm="syz.2.163" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 123.856600][ T30] audit: type=1400 audit(1745962632.477:316): avc: denied { create } for pid=6554 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.997113][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 124.029941][ T6515] process 'syz.3.155' launched './file1' with NULL argv: empty string added [ 124.108555][ T30] audit: type=1400 audit(1745962633.347:317): avc: denied { execute_no_trans } for pid=6514 comm="syz.3.155" path="/32/file1" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.733489][ T6571] tmpfs: Bad value for 'nr_blocks' [ 124.959055][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.975849][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.507667][ T9] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 125.520821][ T9] airspy 4-1:0.0: Registered as swradio24 [ 125.686303][ T9] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 125.710873][ T9] usb 4-1: USB disconnect, device number 4 [ 126.205880][ T30] audit: type=1400 audit(1745962635.437:318): avc: denied { block_suspend } for pid=6587 comm="syz.0.172" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.209456][ T6591] xt_hashlimit: size too large, truncated to 1048576 [ 126.323381][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.172'. [ 127.000673][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.023094][ T30] audit: type=1400 audit(1745962636.237:319): avc: denied { listen } for pid=6602 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.104483][ T30] audit: type=1400 audit(1745962636.297:320): avc: denied { connect } for pid=6602 comm="syz.2.175" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.156562][ T30] audit: type=1400 audit(1745962636.297:321): avc: denied { name_connect } for pid=6602 comm="syz.2.175" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 127.187278][ T6609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.176'. [ 127.198131][ T30] audit: type=1400 audit(1745962636.327:322): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.241211][ T30] audit: type=1400 audit(1745962636.337:323): avc: denied { ioctl } for pid=6602 comm="syz.2.175" path="socket:[10231]" dev="sockfs" ino=10231 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.406672][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 127.413464][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.456789][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.850455][ T9] usb 4-1: config 0 descriptor?? [ 128.063516][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 128.121894][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.193115][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 128.210753][ T9] usb 4-1: media controller created [ 128.336766][ T6596] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[6596] [ 128.364024][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.847111][ T9] az6027: usb out operation failed. (-71) [ 128.877301][ T9] az6027: usb out operation failed. (-71) [ 128.893001][ T9] stb0899_attach: Driver disabled by Kconfig [ 128.899696][ T9] az6027: no front-end attached [ 128.899696][ T9] [ 128.915407][ T9] az6027: usb out operation failed. (-71) [ 128.921775][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.935567][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 128.970272][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 129.148997][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 129.165119][ T30] audit: type=1400 audit(1745962638.377:324): avc: denied { create } for pid=6627 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 129.177120][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 129.262223][ T6633] Cannot find add_set index 0 as target [ 129.265844][ T9] usb 4-1: USB disconnect, device number 5 [ 129.272359][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 129.308558][ T30] audit: type=1400 audit(1745962638.387:325): avc: denied { write } for pid=6627 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 129.443332][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 129.872590][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 130.546420][ T30] audit: type=1400 audit(1745962639.787:326): avc: denied { read write } for pid=6647 comm="syz.2.185" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.656517][ T30] audit: type=1400 audit(1745962639.787:327): avc: denied { open } for pid=6647 comm="syz.2.185" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 131.214481][ T30] audit: type=1400 audit(1745962640.368:328): avc: denied { ioctl } for pid=6647 comm="syz.2.185" path="socket:[10472]" dev="sockfs" ino=10472 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 131.272889][ T30] audit: type=1400 audit(1745962640.508:329): avc: denied { read } for pid=6650 comm="syz.3.186" dev="sockfs" ino=10477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.497057][ T6657] Cannot find add_set index 0 as target [ 131.509478][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 132.029299][ T30] audit: type=1400 audit(1745962641.268:330): avc: denied { ioctl } for pid=6661 comm="syz.2.189" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11336 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.056732][ T5864] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.100643][ T6664] netlink: 60 bytes leftover after parsing attributes in process `syz.0.190'. [ 132.688622][ T5864] usb 4-1: config 5 has an invalid interface number: 8 but max is 0 [ 132.715486][ T30] audit: type=1400 audit(1745962641.948:331): avc: denied { name_connect } for pid=6668 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 132.750894][ T5864] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 132.780666][ T5864] usb 4-1: config 5 has an invalid descriptor of length 166, skipping remainder of the config [ 132.792126][ T30] audit: type=1400 audit(1745962641.948:332): avc: denied { listen } for pid=6668 comm="syz.4.191" lport=38819 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.821375][ T5864] usb 4-1: config 5 has no interface number 0 [ 132.837676][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.845048][ T5864] usb 4-1: config 5 interface 8 altsetting 85 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 132.855927][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.902900][ T30] audit: type=1400 audit(1745962642.008:333): avc: denied { accept } for pid=6668 comm="syz.4.191" lport=38819 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.985549][ T5864] usb 4-1: config 5 interface 8 altsetting 85 has an invalid descriptor for endpoint zero, skipping [ 133.044723][ T5864] usb 4-1: config 5 interface 8 altsetting 85 endpoint 0x2 has an invalid bInterval 95, changing to 7 [ 133.088808][ T5864] usb 4-1: config 5 interface 8 altsetting 85 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 133.122323][ T5864] usb 4-1: config 5 interface 8 altsetting 85 has a duplicate endpoint with address 0x5, skipping [ 133.148422][ T5864] usb 4-1: config 5 interface 8 altsetting 85 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 133.195422][ T5864] usb 4-1: config 5 interface 8 has no altsetting 0 [ 133.211201][ T5864] usb 4-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=1d.ee [ 133.235555][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.249585][ T5864] usb 4-1: Product: syz [ 133.262131][ T5864] usb 4-1: Manufacturer: syz [ 133.267424][ T5864] usb 4-1: SerialNumber: syz [ 133.275894][ T6658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.728457][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.811039][ T5864] usb 4-1: USB disconnect, device number 6 [ 133.889696][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 133.898961][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 133.906645][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.936606][ T9] usb 1-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=b2.bf [ 133.958197][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.985471][ T9] usb 1-1: Product: syz [ 133.989730][ T9] usb 1-1: Manufacturer: syz [ 134.011080][ T9] usb 1-1: SerialNumber: syz [ 134.028924][ T9] usb 1-1: config 0 descriptor?? [ 134.034089][ T30] audit: type=1400 audit(1745962643.268:334): avc: denied { connect } for pid=6694 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.058979][ T30] audit: type=1400 audit(1745962643.298:335): avc: denied { lock } for pid=6694 comm="syz.2.197" path="socket:[11391]" dev="sockfs" ino=11391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 134.119315][ T30] audit: type=1400 audit(1745962643.358:336): avc: denied { bind } for pid=6694 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.142319][ T30] audit: type=1400 audit(1745962643.358:337): avc: denied { name_bind } for pid=6694 comm="syz.2.197" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 134.264922][ T5864] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.285027][ T9] mos7840 1-1:0.0: required endpoints missing [ 134.306482][ T9] usb 1-1: USB disconnect, device number 5 [ 134.816791][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 134.827731][ T5864] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 134.840894][ T5864] usb 4-1: config 0 has no interface number 0 [ 134.856808][ T5864] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.888135][ T5864] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.907701][ T5864] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 135.006511][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 135.022079][ T5864] usb 4-1: Product: syz [ 135.162314][ T6706] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 135.470231][ T5864] usb 4-1: SerialNumber: syz [ 135.492305][ T5864] usb 4-1: config 0 descriptor?? [ 135.632435][ T5864] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 135.643387][ T5864] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input12 [ 135.796909][ T6713] Cannot find add_set index 0 as target [ 135.808673][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 136.032772][ T6712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.203'. [ 136.060000][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 137.005683][ T5865] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.327624][ T5863] usb 4-1: USB disconnect, device number 7 [ 137.357063][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 137.357082][ T30] audit: type=1400 audit(1745962646.578:346): avc: denied { accept } for pid=6726 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.593310][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 137.612331][ T5863] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 137.639691][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.658364][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.744933][ T30] audit: type=1400 audit(1745962646.948:347): avc: denied { audit_write } for pid=6729 comm="syz.1.209" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.814857][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.827766][ T5865] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.841684][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.851864][ T30] audit: type=1400 audit(1745962646.948:348): avc: denied { watch } for pid=6729 comm="syz.1.209" path="pipe:[10584]" dev="pipefs" ino=10584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 138.275321][ T5865] usb 3-1: config 0 descriptor?? [ 138.462143][ T30] audit: type=1400 audit(1745962647.698:349): avc: denied { read write } for pid=6738 comm="syz.4.210" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.517513][ T30] audit: type=1400 audit(1745962647.698:350): avc: denied { open } for pid=6738 comm="syz.4.210" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.712812][ T30] audit: type=1400 audit(1745962647.938:351): avc: denied { write } for pid=6740 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 138.806856][ T30] audit: type=1400 audit(1745962647.988:352): avc: denied { write } for pid=6748 comm="syz.3.213" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 138.814738][ T3701] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.044820][ T30] audit: type=1400 audit(1745962647.988:353): avc: denied { ioctl } for pid=6748 comm="syz.3.213" path="socket:[10615]" dev="sockfs" ino=10615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.395817][ T3701] usb 5-1: Using ep0 maxpacket: 16 [ 139.504912][ T3701] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.524727][ T5865] usbhid 3-1:0.0: can't add hid device: -71 [ 139.549359][ T5865] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 139.557735][ T3701] usb 5-1: config 1 interface 0 has no altsetting 0 [ 139.567381][ T5865] usb 3-1: USB disconnect, device number 7 [ 139.590791][ T3701] usb 5-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.40 [ 139.667371][ T3701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.680967][ T3701] usb 5-1: Product: syz [ 139.771113][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 140.141158][ T3701] usb 5-1: Manufacturer: ౰ⵐ픧뻃摪䅺൒쨹껭싴疔氊伫䮶ⵍ⚾ﱔ䗂춁ꩋᯢ蚱蒣Ⴇ쥽⭞槸Č㟛刽晤鑳㢷⇹䚡쳇ጩ裍馲﹒왁㏶酋왘달⒣䒢셯䗋釂瀁⁸涴ṍ㣧᭭↺ౢst儧埶떫 [ 140.207927][ T3701] usb 5-1: SerialNumber: syz [ 140.645013][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 140.931045][ T30] audit: type=1400 audit(1745962650.149:354): avc: denied { ioctl } for pid=6738 comm="syz.4.210" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.948550][ T3701] usbhid 5-1:1.0: can't add hid device: -71 [ 140.978339][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 140.991032][ T3701] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 141.000378][ T6768] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 141.016239][ T9] usb 2-1: config 179 has no interface number 0 [ 141.030964][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 141.060016][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 141.072338][ T30] audit: type=1400 audit(1745962650.299:355): avc: denied { unlink } for pid=6767 comm="syz.3.218" name="#1" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 141.107900][ T3701] usb 5-1: USB disconnect, device number 5 [ 141.115065][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 141.227628][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 141.596486][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.651485][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 141.707126][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.425328][ T6760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 142.444438][ T6760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 143.459322][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.511849][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.611542][ T6795] SELinux: Context is not valid (left unmapped). [ 143.994216][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 143.994230][ T30] audit: type=1400 audit(1745962652.859:361): avc: denied { relabelto } for pid=6787 comm="syz.4.223" name="rdma.current" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 144.044483][ T30] audit: type=1400 audit(1745962652.859:362): avc: denied { associate } for pid=6787 comm="syz.4.223" name="rdma.current" dev="tmpfs" ino=261 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 144.620962][ T6804] Cannot find add_set index 0 as target [ 144.633564][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 144.961711][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.226'. [ 144.978481][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.226'. [ 145.435723][ T6795] overlayfs: missing 'lowerdir' [ 146.061358][ T5865] usb 2-1: USB disconnect, device number 5 [ 146.061456][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 146.075543][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 146.084402][ C0] ================================================================== [ 146.092495][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x26f/0x2b0 [ 146.100323][ C0] Read of size 4 at addr ffff88807bbb285c by task udevd/5188 [ 146.107708][ C0] [ 146.110021][ C0] CPU: 0 UID: 0 PID: 5188 Comm: udevd Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 146.110038][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 146.110046][ C0] Call Trace: [ 146.110052][ C0] [ 146.110057][ C0] dump_stack_lvl+0x116/0x1f0 [ 146.110079][ C0] print_report+0xc3/0x670 [ 146.110093][ C0] ? __virt_addr_valid+0x5e/0x590 [ 146.110111][ C0] ? __phys_addr+0xc6/0x150 [ 146.110128][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 146.110141][ C0] kasan_report+0xe0/0x110 [ 146.110153][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 146.110168][ C0] do_raw_spin_lock+0x26f/0x2b0 [ 146.110182][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 146.110196][ C0] ? kcov_remote_stop+0x1b0/0x5f0 [ 146.110210][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 146.110223][ C0] ? __wake_up+0x1c/0x60 [ 146.110239][ C0] __wake_up+0x1c/0x60 [ 146.110256][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 146.110277][ C0] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 146.110295][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 146.110313][ C0] dummy_timer+0x180e/0x3a20 [ 146.110336][ C0] ? find_held_lock+0x2b/0x80 [ 146.110351][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 146.110373][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 146.110393][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 146.110413][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 146.110435][ C0] ? rcu_is_watching+0x12/0xc0 [ 146.110450][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 146.110464][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 146.110481][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 146.110498][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 146.110511][ C0] ? read_tsc+0x9/0x20 [ 146.110535][ C0] hrtimer_run_softirq+0x17d/0x350 [ 146.110549][ C0] handle_softirqs+0x216/0x8e0 [ 146.110567][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 146.110584][ C0] __irq_exit_rcu+0x109/0x170 [ 146.110599][ C0] irq_exit_rcu+0x9/0x30 [ 146.110613][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 146.110628][ C0] [ 146.110633][ C0] [ 146.110638][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 146.110653][ C0] RIP: 0010:process_measurement+0x30d/0x23e0 [ 146.110673][ C0] Code: 89 44 24 20 8b 84 24 08 03 00 00 48 83 c4 20 44 8d 68 ff 44 89 ee e8 72 c2 28 fd 41 83 fd 02 0f 87 f4 00 00 00 e8 23 c7 28 fd <4c> 89 e2 41 83 e4 07 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 41 [ 146.110686][ C0] RSP: 0018:ffffc90003387730 EFLAGS: 00000293 [ 146.110699][ C0] RAX: 0000000000000000 RBX: ffff88802538a540 RCX: ffffffff849269ce [ 146.110708][ C0] RDX: ffff8880450f4880 RSI: ffffffff849269dd RDI: 0000000000000005 [ 146.110717][ C0] RBP: 1ffff92000670ef4 R08: 0000000000000005 R09: 0000000000000002 [ 146.110726][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9acac720 [ 146.110734][ C0] R13: 0000000000000000 R14: ffffc90003387a40 R15: ffff8880357bc958 [ 146.110745][ C0] ? process_measurement+0x2fe/0x23e0 [ 146.110761][ C0] ? process_measurement+0x30d/0x23e0 [ 146.110783][ C0] ? avc_has_perm_noaudit+0x117/0x3b0 [ 146.110803][ C0] ? __pfx_process_measurement+0x10/0x10 [ 146.110821][ C0] ? avc_has_perm_noaudit+0x149/0x3b0 [ 146.110841][ C0] ? avc_has_perm+0x11a/0x1c0 [ 146.110860][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 146.110889][ C0] ? __pfx___fsnotify_parent+0x10/0x10 [ 146.110909][ C0] ima_file_check+0xbc/0x100 [ 146.110926][ C0] ? __pfx_ima_file_check+0x10/0x10 [ 146.110943][ C0] ? vfs_open+0x2e3/0x3f0 [ 146.110959][ C0] security_file_post_open+0x8e/0x210 [ 146.110977][ C0] path_openat+0x147d/0x2d40 [ 146.111001][ C0] ? __pfx_path_openat+0x10/0x10 [ 146.111022][ C0] do_filp_open+0x20b/0x470 [ 146.111041][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 146.111067][ C0] ? alloc_fd+0x471/0x7d0 [ 146.111089][ C0] do_sys_openat2+0x11b/0x1d0 [ 146.111103][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.111117][ C0] ? __sys_sendmsg+0x199/0x220 [ 146.111137][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.111156][ C0] __x64_sys_openat+0x174/0x210 [ 146.111171][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 146.111189][ C0] do_syscall_64+0xcd/0x260 [ 146.111205][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.111218][ C0] RIP: 0033:0x7f149b3799a4 [ 146.111229][ C0] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 146.111241][ C0] RSP: 002b:00007ffea6e97490 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.111253][ C0] RAX: ffffffffffffffda RBX: 00005629a2756040 RCX: 00007f149b3799a4 [ 146.111262][ C0] RDX: 0000000000080141 RSI: 00005629a27390d8 RDI: 00000000ffffff9c [ 146.111270][ C0] RBP: 00005629a27390d8 R08: 00000000ffffffff R09: 0000000000000000 [ 146.111278][ C0] R10: 00000000000001a4 R11: 0000000000000246 R12: 0000000000080141 [ 146.111287][ C0] R13: ffffffffffffffff R14: 00000000ffffffff R15: 00000000ffffffff [ 146.111300][ C0] [ 146.111305][ C0] [ 146.593543][ C0] Allocated by task 9: [ 146.597606][ C0] kasan_save_stack+0x33/0x60 [ 146.602386][ C0] kasan_save_track+0x14/0x30 [ 146.607055][ C0] __kasan_kmalloc+0xaa/0xb0 [ 146.611635][ C0] xpad_probe+0x286/0x1f30 [ 146.616052][ C0] usb_probe_interface+0x300/0x9c0 [ 146.621168][ C0] really_probe+0x23e/0xa90 [ 146.625684][ C0] __driver_probe_device+0x1de/0x440 [ 146.630968][ C0] driver_probe_device+0x4c/0x1b0 [ 146.636003][ C0] __device_attach_driver+0x1df/0x310 [ 146.641370][ C0] bus_for_each_drv+0x156/0x1e0 [ 146.646221][ C0] __device_attach+0x1e4/0x4b0 [ 146.650965][ C0] bus_probe_device+0x17f/0x1c0 [ 146.655805][ C0] device_add+0x1148/0x1a70 [ 146.660293][ C0] usb_set_configuration+0x1187/0x1e20 [ 146.665756][ C0] usb_generic_driver_probe+0xb1/0x110 [ 146.671206][ C0] usb_probe_device+0xec/0x3e0 [ 146.675956][ C0] really_probe+0x23e/0xa90 [ 146.680453][ C0] __driver_probe_device+0x1de/0x440 [ 146.685722][ C0] driver_probe_device+0x4c/0x1b0 [ 146.690746][ C0] __device_attach_driver+0x1df/0x310 [ 146.696214][ C0] bus_for_each_drv+0x156/0x1e0 [ 146.701094][ C0] __device_attach+0x1e4/0x4b0 [ 146.705853][ C0] bus_probe_device+0x17f/0x1c0 [ 146.710690][ C0] device_add+0x1148/0x1a70 [ 146.715177][ C0] usb_new_device+0xd07/0x1a20 [ 146.719959][ C0] hub_event+0x2eb7/0x4fa0 [ 146.724355][ C0] process_one_work+0x9cc/0x1b70 [ 146.729276][ C0] worker_thread+0x6c8/0xf10 [ 146.733848][ C0] kthread+0x3c2/0x780 [ 146.737904][ C0] ret_from_fork+0x45/0x80 [ 146.742363][ C0] ret_from_fork_asm+0x1a/0x30 [ 146.747114][ C0] [ 146.749422][ C0] Freed by task 5865: [ 146.753381][ C0] kasan_save_stack+0x33/0x60 [ 146.758048][ C0] kasan_save_track+0x14/0x30 [ 146.762714][ C0] kasan_save_free_info+0x3b/0x60 [ 146.767740][ C0] __kasan_slab_free+0x51/0x70 [ 146.772487][ C0] kfree+0x2b6/0x4d0 [ 146.776367][ C0] xpad_disconnect+0x1cf/0x580 [ 146.781128][ C0] usb_unbind_interface+0x1da/0x9a0 [ 146.786398][ C0] device_remove+0x122/0x170 [ 146.790981][ C0] device_release_driver_internal+0x44b/0x620 [ 146.797044][ C0] bus_remove_device+0x22f/0x420 [ 146.801970][ C0] device_del+0x396/0x9f0 [ 146.806284][ C0] usb_disable_device+0x355/0x7d0 [ 146.811294][ C0] usb_disconnect+0x2e1/0x920 [ 146.815957][ C0] hub_event+0x1c57/0x4fa0 [ 146.820358][ C0] process_one_work+0x9cc/0x1b70 [ 146.825317][ C0] worker_thread+0x6c8/0xf10 [ 146.829908][ C0] kthread+0x3c2/0x780 [ 146.833957][ C0] ret_from_fork+0x45/0x80 [ 146.838355][ C0] ret_from_fork_asm+0x1a/0x30 [ 146.843136][ C0] [ 146.845470][ C0] The buggy address belongs to the object at ffff88807bbb2800 [ 146.845470][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 146.859522][ C0] The buggy address is located 92 bytes inside of [ 146.859522][ C0] freed 1024-byte region [ffff88807bbb2800, ffff88807bbb2c00) [ 146.873300][ C0] [ 146.875606][ C0] The buggy address belongs to the physical page: [ 146.881993][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bbb0 [ 146.890749][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 146.899250][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 146.906785][ C0] page_type: f5(slab) [ 146.910770][ C0] raw: 00fff00000000040 ffff88801b441dc0 dead000000000122 0000000000000000 [ 146.919357][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 146.927921][ C0] head: 00fff00000000040 ffff88801b441dc0 dead000000000122 0000000000000000 [ 146.936573][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 146.945224][ C0] head: 00fff00000000003 ffffea0001eeec01 00000000ffffffff 00000000ffffffff [ 146.953873][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 146.962526][ C0] page dumped because: kasan: bad access detected [ 146.968939][ C0] page_owner tracks the page as allocated [ 146.974645][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15, tgid 15 (ksoftirqd/0), ts 142396480640, free_ts 142337390327 [ 146.993818][ C0] post_alloc_hook+0x181/0x1b0 [ 146.998573][ C0] get_page_from_freelist+0x135c/0x3920 [ 147.004107][ C0] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 147.009988][ C0] alloc_pages_mpol+0x1fb/0x550 [ 147.014826][ C0] new_slab+0x244/0x340 [ 147.018968][ C0] ___slab_alloc+0xd9c/0x1940 [ 147.023657][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 147.029123][ C0] __kmalloc_noprof+0x2f2/0x510 [ 147.033978][ C0] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 147.039856][ C0] ieee80211_inform_bss+0x10b/0x1140 [ 147.045129][ C0] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 147.051355][ C0] cfg80211_inform_bss_data+0x224/0x3bd0 [ 147.056970][ C0] cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 147.063020][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 147.068644][ C0] ieee80211_scan_rx+0x475/0xae0 [ 147.073568][ C0] ieee80211_rx_list+0x1bdb/0x2980 [ 147.078661][ C0] page last free pid 26 tgid 26 stack trace: [ 147.084619][ C0] __free_frozen_pages+0x69d/0xff0 [ 147.089717][ C0] __put_partials+0x16d/0x1c0 [ 147.094379][ C0] qlist_free_all+0x4e/0x120 [ 147.098994][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 147.104438][ C0] __kasan_slab_alloc+0x69/0x90 [ 147.109273][ C0] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 147.115080][ C0] __d_alloc+0x31/0xaa0 [ 147.119219][ C0] d_alloc+0x4a/0x1e0 [ 147.123180][ C0] lookup_one_qstr_excl_raw.part.0+0x96/0x160 [ 147.129231][ C0] lookup_one_qstr_excl+0x3e/0x120 [ 147.134334][ C0] filename_create+0x1e7/0x4a0 [ 147.139082][ C0] kern_path_create+0x35/0x50 [ 147.143742][ C0] devtmpfs_work_loop+0x114/0xd90 [ 147.148749][ C0] devtmpfsd+0x4c/0x50 [ 147.152800][ C0] kthread+0x3c2/0x780 [ 147.156849][ C0] ret_from_fork+0x45/0x80 [ 147.161260][ C0] [ 147.163564][ C0] Memory state around the buggy address: [ 147.169174][ C0] ffff88807bbb2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.177216][ C0] ffff88807bbb2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.185254][ C0] >ffff88807bbb2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.193301][ C0] ^ [ 147.200298][ C0] ffff88807bbb2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.208339][ C0] ffff88807bbb2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.216378][ C0] ================================================================== [ 147.224430][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.231609][ C0] CPU: 0 UID: 0 PID: 5188 Comm: udevd Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 147.243131][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 147.253186][ C0] Call Trace: [ 147.256448][ C0] [ 147.259277][ C0] dump_stack_lvl+0x3d/0x1f0 [ 147.263869][ C0] panic+0x71c/0x800 [ 147.267794][ C0] ? __pfx_panic+0x10/0x10 [ 147.272201][ C0] ? __pfx__printk+0x10/0x10 [ 147.276868][ C0] ? end_report+0x4c/0x170 [ 147.281269][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 147.286382][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 147.291390][ C0] check_panic_on_warn+0xab/0xb0 [ 147.296320][ C0] end_report+0x107/0x170 [ 147.300647][ C0] kasan_report+0xee/0x110 [ 147.305045][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 147.310054][ C0] do_raw_spin_lock+0x26f/0x2b0 [ 147.314891][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 147.320260][ C0] ? kcov_remote_stop+0x1b0/0x5f0 [ 147.325277][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 147.330488][ C0] ? __wake_up+0x1c/0x60 [ 147.334720][ C0] __wake_up+0x1c/0x60 [ 147.338777][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 147.344227][ C0] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 147.349585][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 147.354772][ C0] dummy_timer+0x180e/0x3a20 [ 147.359356][ C0] ? find_held_lock+0x2b/0x80 [ 147.364017][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 147.369640][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 147.375263][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 147.381233][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 147.386157][ C0] ? rcu_is_watching+0x12/0xc0 [ 147.390905][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.396699][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 147.401623][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 147.406812][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 147.412518][ C0] ? read_tsc+0x9/0x20 [ 147.416586][ C0] hrtimer_run_softirq+0x17d/0x350 [ 147.421716][ C0] handle_softirqs+0x216/0x8e0 [ 147.426469][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 147.431751][ C0] __irq_exit_rcu+0x109/0x170 [ 147.436416][ C0] irq_exit_rcu+0x9/0x30 [ 147.440731][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 147.446349][ C0] [ 147.449262][ C0] [ 147.452174][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.458140][ C0] RIP: 0010:process_measurement+0x30d/0x23e0 [ 147.464111][ C0] Code: 89 44 24 20 8b 84 24 08 03 00 00 48 83 c4 20 44 8d 68 ff 44 89 ee e8 72 c2 28 fd 41 83 fd 02 0f 87 f4 00 00 00 e8 23 c7 28 fd <4c> 89 e2 41 83 e4 07 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 41 [ 147.483705][ C0] RSP: 0018:ffffc90003387730 EFLAGS: 00000293 [ 147.489756][ C0] RAX: 0000000000000000 RBX: ffff88802538a540 RCX: ffffffff849269ce [ 147.497710][ C0] RDX: ffff8880450f4880 RSI: ffffffff849269dd RDI: 0000000000000005 [ 147.505676][ C0] RBP: 1ffff92000670ef4 R08: 0000000000000005 R09: 0000000000000002 [ 147.513634][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9acac720 [ 147.521590][ C0] R13: 0000000000000000 R14: ffffc90003387a40 R15: ffff8880357bc958 [ 147.529651][ C0] ? process_measurement+0x2fe/0x23e0 [ 147.535015][ C0] ? process_measurement+0x30d/0x23e0 [ 147.540377][ C0] ? avc_has_perm_noaudit+0x117/0x3b0 [ 147.545742][ C0] ? __pfx_process_measurement+0x10/0x10 [ 147.551386][ C0] ? avc_has_perm_noaudit+0x149/0x3b0 [ 147.556753][ C0] ? avc_has_perm+0x11a/0x1c0 [ 147.561422][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 147.566458][ C0] ? __pfx___fsnotify_parent+0x10/0x10 [ 147.571910][ C0] ima_file_check+0xbc/0x100 [ 147.576502][ C0] ? __pfx_ima_file_check+0x10/0x10 [ 147.581689][ C0] ? vfs_open+0x2e3/0x3f0 [ 147.586005][ C0] security_file_post_open+0x8e/0x210 [ 147.591373][ C0] path_openat+0x147d/0x2d40 [ 147.596035][ C0] ? __pfx_path_openat+0x10/0x10 [ 147.600990][ C0] do_filp_open+0x20b/0x470 [ 147.605498][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 147.610536][ C0] ? alloc_fd+0x471/0x7d0 [ 147.614858][ C0] do_sys_openat2+0x11b/0x1d0 [ 147.619519][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.624703][ C0] ? __sys_sendmsg+0x199/0x220 [ 147.629456][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.634559][ C0] __x64_sys_openat+0x174/0x210 [ 147.639393][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.644755][ C0] do_syscall_64+0xcd/0x260 [ 147.649259][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.655136][ C0] RIP: 0033:0x7f149b3799a4 [ 147.659531][ C0] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 147.679120][ C0] RSP: 002b:00007ffea6e97490 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.687517][ C0] RAX: ffffffffffffffda RBX: 00005629a2756040 RCX: 00007f149b3799a4 [ 147.695471][ C0] RDX: 0000000000080141 RSI: 00005629a27390d8 RDI: 00000000ffffff9c [ 147.703424][ C0] RBP: 00005629a27390d8 R08: 00000000ffffffff R09: 0000000000000000 [ 147.711379][ C0] R10: 00000000000001a4 R11: 0000000000000246 R12: 0000000000080141 [ 147.719333][ C0] R13: ffffffffffffffff R14: 00000000ffffffff R15: 00000000ffffffff [ 147.727303][ C0] [ 147.730531][ C0] Kernel Offset: disabled [ 147.734835][ C0] Rebooting in 86400 seconds..