last executing test programs: 1m23.280260924s ago: executing program 4 (id=93): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) 1m19.949432383s ago: executing program 4 (id=97): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1f, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd00) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 1m18.6854852s ago: executing program 3 (id=99): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r2, 0x700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(0x0) 1m18.685339407s ago: executing program 1 (id=100): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000002}, {0xa, 0x4e20, 0x80, @empty, 0x4}, 0xffffffffffffffff, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x2}}, 0x18) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x4, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x9) 1m18.584169527s ago: executing program 4 (id=101): socket$inet6(0xa, 0x805, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0xfffffffffffffca1}, 0x0) r0 = syz_clone(0x10000000, &(0x7f0000000000)="4e1747e35caa94fcc932a4acefa27852ebfde68291bdf650a6f15b279594f2a09bab6ff5198fb8717e1d55f0cd1ba0d192c21346648bedcc6722bc91e4ce4d24874620a15ff86a", 0x47, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="566329d16cb751077efbf7e3c93f3177c4206a6e1b81513782afe1e522267e0370487a") sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r7, 0x4bfb, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 1m18.27089148s ago: executing program 1 (id=102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) fchmod(r2, 0x20) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000300)="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", 0x7da}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @empty}}, @sadb_lifetime={0x4, 0x4, 0x3, 0x9, 0xdab, 0x18}]}, 0x78}, 0x1, 0x7}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6(0xa, 0x2, 0x0) 1m16.599681524s ago: executing program 2 (id=104): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x34, &(0x7f00000002c0)}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xfffffffffffffe16}, {0xc}}}]}]}, 0xf18}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000007fc0)={0x1, 0x1, 0x1, 0x4, 0x10003, 0x6, 0x2}) 1m15.436558095s ago: executing program 2 (id=105): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) open_tree(r4, &(0x7f0000000580)='./file0\x00', 0x100) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa020800450000280000cab9aea98377f12e14bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 1m14.636186315s ago: executing program 4 (id=106): r0 = syz_usb_connect(0x205, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x3, "5905d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x0, 0x12, 0x8, "6ab6cae03bca5452"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m13.483914195s ago: executing program 2 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100ffff00000000000000008500000007000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1}, {0x6, 0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x1, 0x9}, {0xf, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="d23f9a2a00040066b8a40300000f23c80f21f866350400f0000f23f80f33360faea4ea560f01cf2ef20faef26764f00fb3acd934f50000650151b8af", 0x3c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m13.165853102s ago: executing program 1 (id=109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000080)=0x3ff) (fail_nth: 1) 1m13.142805999s ago: executing program 3 (id=110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000007356b85521cb00b76974d96183145be4e96a698bf2b98bee4d1680cb45ebf30f5a206a113d68b50afa9300e883d3fbde6406646c1e678e101b3fab7899000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000080)=0x3ff) 1m13.041328874s ago: executing program 0 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000a7b000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) close(0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x8000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_QUEUE_MAXLEN={0x3, 0x3, 0x1, 0x0, 0xf02}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1010, 0xfffffffffffffffc) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth1_to_bridge\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x2c, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {0xffff, 0x5}, {0x7, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) 1m12.420745035s ago: executing program 3 (id=112): syz_open_dev$I2C(0x0, 0x0, 0x189802) syz_io_uring_setup(0xeec, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000040), 0x80000001, 0x20000) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x66a83, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000800)={r5, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write(r2, 0x0, 0x0) 1m12.3803949s ago: executing program 0 (id=113): socket$inet6(0xa, 0x3, 0x3) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xb, 0x6b}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4005405}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x100a, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000280)=@arm64_sys={0x603000000013804e, &(0x7f0000000240)=0x8000000000000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000003dfe000000020000000900020073797a32000000000900010073797a300000000028000480240001800b00010065787468647200001400028008000540000000010800064000000081"], 0x7c}}, 0x8050) r7 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r8}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m11.274338324s ago: executing program 2 (id=114): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000380)={'sit0\x00', 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @multicast1}, &(0x7f0000000080)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'tunl0\x00', r2, 0x700, 0x80, 0x9, 0xc, {{0x1d, 0x4, 0x3, 0x39, 0x74, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xb3, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x35}, @local, @loopback, @loopback]}, @noop, @cipso={0x86, 0x40, 0x1, [{0x2, 0x9, "1f8077b111fbb4"}, {0x6, 0x3, "b3"}, {0x1, 0x11, "440cbeb1fb62e4bcae03dc450d4cac"}, {0x7, 0xa, "b4da453fcd92a253"}, {0x5, 0xa, "dc6cb37056230ad6"}, {0x5, 0x2}, {0x0, 0x7, "15411d32b4"}]}]}}}}}) 1m5.949341625s ago: executing program 0 (id=115): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x4, 0xff, 0xffec, 0xfeff, 0x0}) 1m5.948883235s ago: executing program 4 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4055}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x6b60, &(0x7f0000000040)={0x0, 0xf721, 0x20000, 0xffffffff, 0xa8}, &(0x7f0000000280), &(0x7f0000ffe000)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48040, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}}, 0xfffffd42) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) 1m5.948628263s ago: executing program 3 (id=117): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f0000000300)=[{0x1, 0x3ff, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xffffffffffffff77) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x800, &(0x7f0000000380)={[{@redirect_dir_off}, {@uuid_off}], [{@seclabel}, {@obj_user={'obj_user', 0x3d, 'mode'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@flag='sync'}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x22400, &(0x7f0000000200)={[{@usrquota}, {@mode={'mode', 0x3d, 0x10000}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38, 0x35, 0x65, 0x25, 0x2d, 0x2b]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31, 0x34, 0x6b, 0x31, 0x74, 0x67, 0x31, 0x33]}}], [{@uid_lt={'uid<', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x33, 0x0, 0x37, 0x62, 0x33, 0x37, 0x61], 0x2d, [0x31, 0x63, 0x39, 0x64], 0x2d, [0x61, 0x32, 0x62, 0x32], 0x2d, [0x38, 0x39, 0x36, 0x61], 0x2d, [0xf, 0x34, 0x56, 0x30, 0x36, 0x35, 0x64, 0x39]}}}, {@obj_role={'obj_role', 0x3d, '/dev/v4l-subdev#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/v4l-subdev#\x00'}}]}) syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) 1m5.798650217s ago: executing program 2 (id=118): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) open_tree(r4, &(0x7f0000000580)='./file0\x00', 0x100) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa020800450000280000cab9aea98377f12e14bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 1m4.528561841s ago: executing program 0 (id=119): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = eventfd2(0x0, 0x0) (async) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) (async) io_submit(r3, 0x7, &(0x7f0000001540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f00000000c0)="805899951c902e7951b5e7f56bfb714702972507859ea56c2eb4d7cc335363e2464e41d4031753b0542ad439c8849f7f58348fbee787c3d83fe245edec889f016c948c4f67bde0f741df067efd818c2b0b0c895bb3531b634ebc1f80f67b4d780308fe172917c448050d2d9df5e56942bd53abd59f", 0x75, 0x1, 0x0, 0x2, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x6, r0, &(0x7f0000000780)="376518a965a732affdf86eddb74a59305d6f45f3e688e9151526a49d1c8e0bff0395063b990432ef4f8a071992d535be2b0eff049b1994d7cbf2999af5a42ad24a702122d6b1685bd7326cb5530b18ee60b4124c3fe0069ced8a92c2db9cc35d99cad7414297afc9e0d0e89954346b548897aaaf8e77ff08e8169f194678c4ca0094e6d63c3b3298485e6b642447b1237a17d840b879b0df53d8531b706cc7f53adbcb106bca09441b8d23a5f6c029d0dadaefd84823d24b4ebdaa4f90", 0xbd, 0x7c, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f0000000240)="9822febd9be09844816442254132a2ee3105dcffcb", 0x15, 0x5, 0x0, 0x3, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0xfff9, 0xffffffffffffffff, &(0x7f0000002080)="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", 0x1000, 0x57, 0x0, 0x4}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000480)="d716655b9692e40479744857deee3a767b3fd45956cd24b760a605", 0x1b, 0x80, 0x0, 0x0, r2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000003080)="149ad5eb15a47c6f5f433de73e836275111275ca2c4c969f03594e8578d384f85f0800529307c4aa8a826a75ccea95829a27a84c249180d804300fe9ee1860485bdade01cd2ae453e563e8ca0af72be9051877211102fd3dc8faa7661610b3654d9bd4f831b0329197725eb7886ff956b581e70cba1f34371df5a52ccd17cd267f488314dadf6a7189a5d7ac4f624b7323bff08ffdf2d73f1ce60cbd747c17264fcf5ec648fc845c29eba8ab149ec91e0f8ece1d7333cddbaf03cdc3fe10051b15ff946192715d7288edac0ce8ae7520815ee8263fb7d23e91476d38e6c88a33a78e9486315ab7b4b354ba006294f9c4c3a432db7cffabc1be691d1d39215cb2cbcdbd78b0773a12ecf205402e39eacd40726b41de72cf9f59c5ce974f2b6f1dbb7ed74b4ee76604a5bfc23ca932b1d910f23133b8eb19e2828b12576349362a9f87f2d5b3424237b20cb5a531f7ddd8f2883dc745d1503c69739394a905bdee83f2c3805fae153e8d51aea13e4899a8df9e36f6827c0fe969074c9764ef44492ad2ee0f89c23f0c9a98c2b917d8fa6164734e43ae73f45b40246213c2aaab3ac7b1cf302d44ef3eda1bf28fc8a245c46118a68e3d888064e12ad31d47eb2a0969671d73a2c24a22bec82c248b764399ebc132d798f638daae38db49c7089ec74c762fad28e2ede7379ff4712f9b587afcee5b29f7ea02f2939434472eb19ea2fb985a8172bde04dec9e85f5339e7df344afd237ecf8cf1801266880800293419a642acbe7e3feb81bf1a1386abceb8cde8b08e15f2cbb6752cb08721364dcfc1be0c18d871e0811c88bb0a0e77e3028ccce8d2d97f8b980afbce7a2fe5e2ef272c774536cc141b080a65bd1170b7ace00f8bcefccf54e1897dbd62775c340f9b0dff1cafd47269a6bd47c1881fa72df71d31f12a00a9a433da982b1d27721563c42751b6e93c6d9be29ee6d0bed94b1533ed2e1332a82b7398182099f7b0892603610d73e701917d640e15c8d4141df8b5174d792d7f9671864f4fa3b589cc3e26fd50db70267c18086e52aab127cc1863d052da000220acd435c68ee46c1a84a5bb5a3267b472bdd3b3f48e5f8cfad31c9b6ceb53f988f50b961840638ba93f3d91164a84a6b5806ad33512ff623149f838a6982ba2190ff88298800f4f0921a72113a3c17e16fbc0dcb6b070c28a0a14ebb3e8d32dfc77be5a8eac24431fbf68a473da5d10ba573b4fd16dce92c6e65dd0852c53b609a754f3daafd8628354dd8430bd633f9f3d85a187f5a279c50ebe213aab61629a8257d2be061b824126763a8d355e3424d50f24fb4a8b04f13df7a0abaedbfd02f4d51bd9772c8db18a416be318f48680f09e823c1513924e731972c93544e59831f22d7454bd28a6cb27961fe9ad2e49300da1e0bd236ba013730b38480ac5da8e6e39aa7d5574d4372566d32728f3efc25c0d2240b330b23c0f1e9f22ca6df2855b05987340f0139154e3d5990006257587ddeedfa49d2a55425b1a95be1251991e1f7fb5acdbe6f8bcf31b34b70a1582ff4fa5823596fec81759b09253e097403f054fa1ca5af2339fbd02efb6e7fcb6500dbdc883f3875aac8c1333675ea0cccdc357e18702ac6d28fa9f036c3f47c8c1687a866e81307c156b9a338929a4cbee0cc2be43724b831ad709ac8bf27f134d61e125e91e0f1e0f4913fcb0e64f10a37954e12d6a3c2da54cd767c2e6f50d5a923d5a3ec97dc1061058b26dd6100ebdf1098849232d4c723612adb7be8c5579c3b593fbeb2fb3fd18c02083516213d828cf082f48df643ac4c211746861cd1d450a5956a09a0814537a15cf447787da8c9729f13c66b5ad1c8286246beb669370de6c875ef8d8b8926d0308a677abb4c771a46970db515293268acc3a2a5a0770ba30dd78f44ac90fcd1b36d7a6f9c8b5de89fe501b9483619c2856c69e6b0433839f2ec52e1edf0ca866d94fdd085c785e11543d32b4fbc2d6a7da1cdf0ba002e64743c85c9495df92cab5753f404b59f879c577b2e79d390f6ba190156598a4bd4380cd7c506edebfecca886a3d7ddc0e057908dd67c27323611d6b4d8a6084e72373e44089fe3a693b1dcc9e59f1353205ccc21e4b4546ddbbe20d0395a035f6ac020e21eb7dacd174004240e43827c9c1164d0195fe8a5e2e54b8266148d3635a1d2076c704d6739e1e776d46d8f6cc26d7182adb64076c7e9c5045061a1691babc3faf70287651d77bcc9ddd9407c58b953e2a107ec88c0a2141e6755d9584a51009844e5c8adb315096b88893a1fe1fb5b1a019b1ac36e61f26a9f2f6fb0681baa09c1aa322946686495bf9709ca6c49f426682f2a495a86d0ec564d63b57f2be8e827500065884ba2bb5ed2b1fb883232ab10997b11449c4db083e8fe0ec2e00b43fca414dcb534c38e0447ad84687ae73011c1d61be76c4c74eca4b2b949208f06389f3d5b69acfbe380b4db8667e26105179749d4dd56a65955fc27bbba0970d3e33a6ef7a56e586c8f1a272f43a1e4d814cb277596d668f558e46195db2ef256b10ef12771f14a3c8c9ea9db480c4494e2c03ec4e36851374c7d91650faf044d920ebbcb9da44bc5f0307139edaddd98c11a64b1409860812079149abc176b4f217394ef91f6b9365be9e2cadb3edef7dcf131eac4f99b263d5dd9dfb44b04fb9c47d3bb1f62a96ae848f9e14f7be1166392735a8c8c271afef6a4ef93e23881b1f155fb79e5ed4ba7a3c57efb17389dfe508369114bee485cd5de55095fc17758a1954dc4b216bc4d0e46e6aea8e2c58c33bed762229eaa3e4780e77655cdc81e018c5d897c6a1df9b42993cf8cf3ba55f4cca8d80b79ec9d80e23ffba3672b4f7590757f34aa9a5d0b9bae5811849e4cb6cb64b1bf6fafc51966fb675079aadf01b726423e5d0bcd35a542ec6bbbc9d2d940283948a522e294ec1c1387514c34c567d176c03236d75fd0b1c1dcd1e902e77b9789be75841ff38fdcfa0e90fb509ce87bf244bc6ec4a3f6b1ac20e784af091977d4dc781f4ae920176cad454b682a586bcbab706f94cdca9c4d25ceb1b2dcbd9aa5e467facc89b1148c1375d919eaf891d2485604f33f73fda8e7c4da899e7a169d8d0355a081fb0fcffbb07d83c7fe367e1bb777d197f4bf50647ac313726404aeb61db6ebbcbeae0259b1a370be5c043fc6b85d414712ed306b7b35f8494ae6e35968c06a5d69a9beb8751a0b555954f37bc6d8be4f7b6b722e4e78c4ca87d512cde52e835c1a5e8f6455814361938199754d74f6739dce754f808b6cb51c9f928eb249af7fefee627c71f4681034aad4342b26d6be1b53fe748c69e47d9a44281c198732fe1b8bba32afb42470de2105e22a059e4723d37edee6a4c777117f525a3a15532639d1df9e779993a0318a681f1905bdf4c56923b042270ca6ee3cd41de3bced2532da4b517261c06da75a3ff0aa572b3dc39ec26aab37f47d9c382932ca767e08da2f141437e64e1d8e0b0c56c45e3f834cd74eaef28c6fb5b1c2301a41f4d4aa76a80b545f160ae62e8367582105fee49d0e29e36f1536e419e89167e1b753e537a6cf69ed2d274e44c4ccd1a4106330db64c0f755736b8fbf6ba0e1c323ad9ca484ca33a5a6195a174b882889323dc942c906712ae1b40138f6a4371f8cbc775a142342189e8cf812a51bfdabacfdd913be7b5536c6e835b80db54d20c9a6b9fe16f666a0dbdf75f21a79d3b77793cdad749d3fd0fb6befd590e07591f01e04428b23f889c5a67f9e53bdaf66084af868263c9b684972d3c86ad20e41fc9aaa10d8f074fd76ed747864fd0653ba1cbed6f4b61c3b75483b043118b575ca4bba1abdad5266fcd3ddf98e7de6a08f1a74b98650fc99e6ef679463e785760e485f9ab88494f95bb7c8207d6ea08ad5c19e47c4ced90612f3c780d368ce53ed8eb0f92a219fbd88002e75eb31e76bd5f6c7e2e08e944476cca165e151cf2645915f40aa5f7074d93a69c63d86575895baa25cf5e945f6b8197d5fc602a5df74eefb784522b8159a9f110677bc5c9460d3cf648b7f9f7711e7d7dff6ff84bd16096682d276f070421c418aab897c25df192224704445df65a5664b05e75f013ad3ae2b3dd9f3c0145cff706e052ee98864bcd3b7daa483f57bc31e30e270f9168739e7caa2ad8fd159a77d9d9efd3417bab5fd0f4d7ddde2f387b9a181168d86b93849902665d15fe6275d0a1343ba13116e8d989c93f72e73e55c4be9b8fbf4b553469925c7952c8720f1fd82008a34030dc8be69c7bb0601a504f49a515d77fbf3789216403ac77f9b22c0c413257e2b524fbb94cdd7b1069c679e1dfc5eeaddd0f6f7f4c57b92945aac7138162e65c8de368e5852fde48eec2cf758c84c2d40314b674a495b019f4701c61e23aade598c0aa12992cd4c7eb8fa97df9e13e8460b7634f56ccc9e5f2c9babc7a3942147e5cb42c9cc64dcd1dbac2a8d4c9fd37bbda7efa3eaecf9bfbdb1d32d70923e04167732af03d4751594f515a625bba6ffbed1f7faf34210ee8e693a2d8e1cf7ef9bf86220d974780611b433eabfc7dad1b8cbf476ed59bd58e6a13274388e215366ace7cff7603c4ebbb73d7fa534d91854f9b19126599ead123819fb4fc046ec1d7982348d100800508ac30bc3fc25de14e5b933663da97a7a0a01faee0b7935d1e72faf51b6830384cc3b7539dd70394610fc0dfac9ab8eff2ae585be8b785f975746f38dab6afa28bd94f7af2476c56396bb2252aeb4acae6a9a97e29e0dcc87f51940505b4fc81f1b6a947111398f52b62c41e61bcd7af4a42c7e4b740ab028eb04c83ae3993fc40ded7aede8268087902bb23ea59f4598193382e5e15975d8b390349aa305771e83b4790de5803a7c5b99eac49d74861b0cb2713b858f75634a519772042ae8cd8568beeba5265e716d6f52911b91b990bd3eaf109fe0fcf52810395553ff23a3eb8992767361cf7fa485da900bbd3cbf2abd6c692e9895ec0cd455141bd561cb421a8af5664880d4e81b30c45f6aaf7eed29c13fdab7dadc23333611493030331b8b188874c5b17e620e9480b09caa608ee07e2f4defdfc6dfac9005283d90ea4a139d81b240cca5307c0e89b9338beb263f9482e327838e21ff82de58b059b1a305ebf5599901451a0b5a7b17daeaebdfdf7ebaf03d8bde0d4bfa1998216ae293c228dd3552dba620dfc943cc77f3ec364603a853b104b716e97daf22338b728f71fcce12218bc03ffdd9909b424c78e5a2d723ec3e0d451e842cb8101c2d80b3eb508424cb9aeb973fbd6310645683784c0b520cec0b29b4363cb66ded6c66bb4a8a4ee41b9ea3e5ccfa264e12bcd47719f924b5777846b25388af05205231d4d0e2270f2e5666e306c798250a64ca0570a8a7ec56e3793609f5a53c657b64b1d8e9891aac6fa6d1992190cea116d2668fc4a6aac82c5d653205f5bdff58619e0e86b2086543d87870d3eaa3d64fc80446635dc79f5e4528650a1f91b98316af310291a7c23b69485566bf87d32a64b29ef3f76e8e6be974c95c10fe1a5fb72655195b2b29839cdb1b46c3c4272095c71880b35695e932ed146d75aec7a0b1802ef6281e19149b72393b2c64cee2f60c26539adcdfa980da804e34df646167e37913e95d7b91c471606b47868b10d1ad3136c58fd4f485ef6079a1fd50286471f33af4788d739c546774e156b385869a3d2f6ca85af3513419679e2bc5313f89f026dfa5eff4d3e09c1826238c3c5fe4460b68b68592a1b77a78ccc20dd7", 0x1000, 0x7, 0x0, 0x0, r2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000000980)="a64873466159296989413770407171dd48819f5f9c7f66aff0b80645efcb2767bd1f0ccdf7084a0daca87bed97a584664b0af062496b216f0154126ba9659a33f3223a19affb9d26a83ab2c6f015b0da50a2a8369bf51794dcbd7f86fbf81cac33dd24c38b34fb660fca50414761340426e95a9f0f6b790369f06ea393d50f6c176a7a1565b9a44618f03d5fab749c8da67d448a85d2179715e12514f8960b428e341b324e0daa02e0783e16e16014131eb23413580d552943510def4a35cb2f3451712ae175de893019", 0xca, 0x7}]) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x17) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_STATX(r5, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0x7, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x28}}, 0x80d1) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000680)=ANY=[@ANYBLOB="50000000080211000001080211000200080211000000000000000000000000006400010000060202020202020101820ecac23aa3c61f2b35e304b85ceb854aa2dd62f91c22af8b1cf57932d38ac4d9131f85f0382a1d862036c3785f179f350b530883259e8b9a11f3522cff09418d5e61340b4d235c646cb3aab9d7360a4ebf2b136554e1a54b7e09bd8977225840c6c73de530890d9a0ad5a6d797933654c64c3fd7f0e59a862f3c9004e105ee0f4ed522e60b8b1a2acbaee1ea80382269ef48cf002a"], 0x2f) nanosleep(0x0, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1m3.435946132s ago: executing program 1 (id=120): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x54, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0xffffffff}]}]}]}]}, 0x54}}, 0x44040) 1m2.916481238s ago: executing program 3 (id=121): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r0, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 1m2.821815735s ago: executing program 0 (id=122): listen(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) 1m2.734466806s ago: executing program 1 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 1m2.486691145s ago: executing program 3 (id=124): r0 = socket$kcm(0x1e, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="ff", 0x1}, {&(0x7f00000003c0)="293fa8c443827ccafd91d5eb7f0028e700755831547c009d49ba5c754618d9560e57598848136490a763cff5f886f38edcf3e2d900000200"/66, 0x42}, {&(0x7f00000002c0)="4042c821e4f5fbe5de5f0c3fcb06c85e1a8d40b80c7779638f96105cd2b993139c29f6cd53125a4d33c7629b48cf4886d969c48fdd88a71bd9db8ded820e915a0019dddc9d79af37753c9ce2ba8ad7b6ffe1a7972bffb8c6cb4eb5b32d7467281c8e49bb1e056a9fd12d7d3d3ab70c4f55faa708f9b2137c9fe72e46e6fa5e90c1028f02c241fe9267735f474efc13314b0b6a961d2301a3122927ec55e7ca4febc5c7df859e458a03ffb3f1c3fd78ec3d651a5af21b88c1810df3074cd8917ffc3784b85feea7124301b9", 0xcb}, {&(0x7f0000000500)="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", 0x102}, {&(0x7f0000000000)="8a8abad4769cf57362a45702489c26505161c997fdbdd794a003fb60b690a43fa7f825f7c57acb86bab2d70ac0", 0x2d}], 0x5, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) 1m2.370489424s ago: executing program 1 (id=125): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="c9f32a39b47d"], 0x8) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r2 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f00000001c0)="011927048c", 0x5}, {&(0x7f0000004d00)="129f8e036c1808a28c6db37483f9f3c9b4b4030b9e4a055c89c022064231474850d122caeae9503fb545d15a3d9f767cf023a279bea02b1dab7686a846cffa7f35be35210667fe796d7205d9579032198e854b5048518f8c983b01ec72c436b778da82bbaaed73c34693c87c55b8b061bbdc563c99b7633faab9c33d88c96ec51c0c1e983b0e7e39db1edce51da58ebafd93e42a867df372d556cc55865276e9d49194d5bd5b4c82efdfaf75547ae1", 0xaf}, {&(0x7f0000000380)="447d0d3a055946223643ea00ade14e638c39c837eb2e9f84ab374d91ebaa86df2c082af1d78be69a207519b6067cac31eca7fdc5d82d0b4f3d3d8d6ac56981c7330578715963b55cf44f4fd9a97468d493ad901c67a8183ab3dd833a6c14fcbae58a9cf078352090e7805c48cf16a9ab9e99bb704f4576d0429a378d8fae2562fa9fc588568f0882c47e61f6dcd2a23436150440b9884b63ea8ec0198c614df9847cbe6110655aa9f93c8d26", 0xac}, {&(0x7f0000000440)="49d6d6de3eaa86187694af96b29dc8e021b8fefad6a91d18cf8f8f050e382ddf19bb3bd2f6e077e63d5e24a12ca94e0b43d81e24e2658acc03436bd9aaf7e2e3315c2ea0bf203f7f5ed6679fe71e685e7f1371723008497930028c4b6de78f8bb11da4a4720af655631c0334a36a6661", 0x70}, {&(0x7f0000005100)="1ecc9c6e456a6b67d841b40a3268d892cd28a2f1297ac8aa1404cf2938d0ab64e85e0fbbfd780ef3840a9620a3dce5131550a9ad5e9e5fdaa7bb1c4948f2facdfe2f5c656c785c5b35e4dc07dcb74411a7d1d3afaf4d8afd3221905a379964e15d25b50b2b2446076a3fa236fae22bc69354092106de91f8918bebc1f4e700d79281707e284fc87fff9ef3d3fe6444a2878e3e0c1449e1ff02620c8b033377979ee26e79f46f5ec6db093204f13349595d2fdf7ea533a1ae65b58664ec232a20de73107558ad05272eb31ce42cada8e56fb13ff54620d69e0cb66cb1d30dd57d2f9923eb0256", 0xe6}, {&(0x7f0000005200)="fa7175aea96bde390728530941c91352d8e2684c38f2c86ce903c026b9b6f2e1834c43deb710f5c02b5e4e9bfc5909947966c4b7b4172ac7cf720952d4153a4dcaa74270ad7d73d9db2ca212524ac844eed6666ee038c44ac74a4edaef685b293cf8230e5e0b1ff30844d25b249f54338d85233d3a925709f761ebb6335b6a3c124158ee7375a97f06294a7017b03b51191691483bba7fd54ffd148a7859a092943da1e359e9d01c170920559012", 0xae}, {&(0x7f00000052c0)="83246c7a28eed718c9054a9547db989c94fa52a5e7c449a77335aaf105e220bc9fd3ae847586d071f1a51c28648534b850b628b3376c57faffa2bb6f62ccd97fea150820fae1aa4a435fe84e4887733b146b7ba2c8bb7e5a56e7cff36360799c6c38aa66894d0df8c1d19514e426fcc15b9e82b1c45689e2d140b9957f8f1899947bff3cddcbed79c29edd1f11730651e2e2101e14a4fd8e18eb315a3a1469019290839708ae022f733ccddeaf567d937c2f6016860b0c218b310ec70281", 0xbe}, {&(0x7f0000003640)="9845ce452aeb8f778a3dc68b7896e898b78c15cd6080abe98a657fde6f6e0c3b7a2999d85d088fc227c27f0b3445e73ab96e2d4ed0cf7ffd5bb3ea53005caedd8594de27e700787c7698b1eb48a72dc560dbb08ccfc0aac778", 0x59}, {&(0x7f0000005380)="8745e9feb39f5af0f97021c3f299b6da4a08dad992f783ad20f610207a449e298acaedc77927f283ee616acd53e97a4cc2816fe95757a9c94e4be980c7179ff33a679dedd44a562db93f6aaca05d6cf3bfe67ded76660536c34adb832648c1acd2a3c99a5829eebfbcad43347dc129a8224c7d2d6e09bfb4bd1e2a7303b6efe69c433d21791b427490e80fdb77413aef7541b52b827c7d97f1022e5ffcc96853def2f410e2b2eac5bae30409823e4f55c30555", 0xb3}, {&(0x7f0000005740)="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", 0x11b}], 0xa}}], 0x1, 0x1) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000100)=0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) exit(0x8) getdents(r6, 0x0, 0x3b) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r5, 0xa0, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x283d8}, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}]}, &(0x7f0000000200)=0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x3) 1m0.170075689s ago: executing program 4 (id=126): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x66a8, 0x4000, 0xf, 0x0, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000500)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, 0x0) 58.423362511s ago: executing program 2 (id=127): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 49.644391529s ago: executing program 0 (id=128): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) open_tree(r4, &(0x7f0000000580)='./file0\x00', 0x100) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398b", 0xcb, 0xc001, 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa020800450000280000cab9aea98377f12e14bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 0s ago: executing program 32 (id=125): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="c9f32a39b47d"], 0x8) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r2 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f00000001c0)="011927048c", 0x5}, {&(0x7f0000004d00)="129f8e036c1808a28c6db37483f9f3c9b4b4030b9e4a055c89c022064231474850d122caeae9503fb545d15a3d9f767cf023a279bea02b1dab7686a846cffa7f35be35210667fe796d7205d9579032198e854b5048518f8c983b01ec72c436b778da82bbaaed73c34693c87c55b8b061bbdc563c99b7633faab9c33d88c96ec51c0c1e983b0e7e39db1edce51da58ebafd93e42a867df372d556cc55865276e9d49194d5bd5b4c82efdfaf75547ae1", 0xaf}, {&(0x7f0000000380)="447d0d3a055946223643ea00ade14e638c39c837eb2e9f84ab374d91ebaa86df2c082af1d78be69a207519b6067cac31eca7fdc5d82d0b4f3d3d8d6ac56981c7330578715963b55cf44f4fd9a97468d493ad901c67a8183ab3dd833a6c14fcbae58a9cf078352090e7805c48cf16a9ab9e99bb704f4576d0429a378d8fae2562fa9fc588568f0882c47e61f6dcd2a23436150440b9884b63ea8ec0198c614df9847cbe6110655aa9f93c8d26", 0xac}, {&(0x7f0000000440)="49d6d6de3eaa86187694af96b29dc8e021b8fefad6a91d18cf8f8f050e382ddf19bb3bd2f6e077e63d5e24a12ca94e0b43d81e24e2658acc03436bd9aaf7e2e3315c2ea0bf203f7f5ed6679fe71e685e7f1371723008497930028c4b6de78f8bb11da4a4720af655631c0334a36a6661", 0x70}, {&(0x7f0000005100)="1ecc9c6e456a6b67d841b40a3268d892cd28a2f1297ac8aa1404cf2938d0ab64e85e0fbbfd780ef3840a9620a3dce5131550a9ad5e9e5fdaa7bb1c4948f2facdfe2f5c656c785c5b35e4dc07dcb74411a7d1d3afaf4d8afd3221905a379964e15d25b50b2b2446076a3fa236fae22bc69354092106de91f8918bebc1f4e700d79281707e284fc87fff9ef3d3fe6444a2878e3e0c1449e1ff02620c8b033377979ee26e79f46f5ec6db093204f13349595d2fdf7ea533a1ae65b58664ec232a20de73107558ad05272eb31ce42cada8e56fb13ff54620d69e0cb66cb1d30dd57d2f9923eb0256", 0xe6}, {&(0x7f0000005200)="fa7175aea96bde390728530941c91352d8e2684c38f2c86ce903c026b9b6f2e1834c43deb710f5c02b5e4e9bfc5909947966c4b7b4172ac7cf720952d4153a4dcaa74270ad7d73d9db2ca212524ac844eed6666ee038c44ac74a4edaef685b293cf8230e5e0b1ff30844d25b249f54338d85233d3a925709f761ebb6335b6a3c124158ee7375a97f06294a7017b03b51191691483bba7fd54ffd148a7859a092943da1e359e9d01c170920559012", 0xae}, {&(0x7f00000052c0)="83246c7a28eed718c9054a9547db989c94fa52a5e7c449a77335aaf105e220bc9fd3ae847586d071f1a51c28648534b850b628b3376c57faffa2bb6f62ccd97fea150820fae1aa4a435fe84e4887733b146b7ba2c8bb7e5a56e7cff36360799c6c38aa66894d0df8c1d19514e426fcc15b9e82b1c45689e2d140b9957f8f1899947bff3cddcbed79c29edd1f11730651e2e2101e14a4fd8e18eb315a3a1469019290839708ae022f733ccddeaf567d937c2f6016860b0c218b310ec70281", 0xbe}, {&(0x7f0000003640)="9845ce452aeb8f778a3dc68b7896e898b78c15cd6080abe98a657fde6f6e0c3b7a2999d85d088fc227c27f0b3445e73ab96e2d4ed0cf7ffd5bb3ea53005caedd8594de27e700787c7698b1eb48a72dc560dbb08ccfc0aac778", 0x59}, {&(0x7f0000005380)="8745e9feb39f5af0f97021c3f299b6da4a08dad992f783ad20f610207a449e298acaedc77927f283ee616acd53e97a4cc2816fe95757a9c94e4be980c7179ff33a679dedd44a562db93f6aaca05d6cf3bfe67ded76660536c34adb832648c1acd2a3c99a5829eebfbcad43347dc129a8224c7d2d6e09bfb4bd1e2a7303b6efe69c433d21791b427490e80fdb77413aef7541b52b827c7d97f1022e5ffcc96853def2f410e2b2eac5bae30409823e4f55c30555", 0xb3}, {&(0x7f0000005740)="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", 0x11b}], 0xa}}], 0x1, 0x1) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000100)=0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) exit(0x8) getdents(r6, 0x0, 0x3b) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r5, 0xa0, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x283d8}, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}]}, &(0x7f0000000200)=0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 62.920467][ T30] audit: type=1400 audit(1753334567.068:62): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 62.924000][ T5817] cgroup: Unknown subsys name 'net' [ 62.943213][ T30] audit: type=1400 audit(1753334567.068:63): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.973018][ T30] audit: type=1400 audit(1753334567.118:64): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.098758][ T5817] cgroup: Unknown subsys name 'cpuset' [ 63.106490][ T5817] cgroup: Unknown subsys name 'rlimit' [ 63.232083][ T30] audit: type=1400 audit(1753334567.378:65): avc: denied { setattr } for pid=5817 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.263645][ T30] audit: type=1400 audit(1753334567.378:66): avc: denied { create } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.295626][ T30] audit: type=1400 audit(1753334567.378:67): avc: denied { write } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.315270][ T5819] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 63.324668][ T30] audit: type=1400 audit(1753334567.378:68): avc: denied { read } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.345228][ T30] audit: type=1400 audit(1753334567.388:69): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 63.370839][ T30] audit: type=1400 audit(1753334567.388:70): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.394298][ T30] audit: type=1400 audit(1753334567.428:71): avc: denied { read } for pid=5499 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 64.249910][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.427366][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.436873][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.444547][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.465621][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.473645][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.474491][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.481212][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.489294][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.495083][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.503662][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.509952][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.516776][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.531723][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.536961][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.539614][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.553643][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.556996][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.573783][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.576553][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.581792][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.596986][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.620700][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.635127][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.645624][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.653245][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.094957][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 67.152050][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 67.172819][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 67.209173][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 67.272777][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 67.304435][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.313161][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.320796][ T5835] bridge_slave_0: entered allmulticast mode [ 67.328958][ T5835] bridge_slave_0: entered promiscuous mode [ 67.337150][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.344204][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.351419][ T5835] bridge_slave_1: entered allmulticast mode [ 67.358403][ T5835] bridge_slave_1: entered promiscuous mode [ 67.444163][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.452131][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.459492][ T5829] bridge_slave_0: entered allmulticast mode [ 67.466832][ T5829] bridge_slave_0: entered promiscuous mode [ 67.481554][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.499097][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.506691][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.513792][ T5827] bridge_slave_0: entered allmulticast mode [ 67.521851][ T5827] bridge_slave_0: entered promiscuous mode [ 67.529150][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.536687][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.543792][ T5827] bridge_slave_1: entered allmulticast mode [ 67.550964][ T5827] bridge_slave_1: entered promiscuous mode [ 67.557581][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.564681][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.571943][ T5829] bridge_slave_1: entered allmulticast mode [ 67.579248][ T5829] bridge_slave_1: entered promiscuous mode [ 67.590686][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.600979][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.608106][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.615185][ T5841] bridge_slave_0: entered allmulticast mode [ 67.621972][ T5841] bridge_slave_0: entered promiscuous mode [ 67.661967][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.669442][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.677810][ T5841] bridge_slave_1: entered allmulticast mode [ 67.684425][ T5841] bridge_slave_1: entered promiscuous mode [ 67.738475][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.750676][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.762785][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.772026][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.780707][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.787962][ T5833] bridge_slave_0: entered allmulticast mode [ 67.794572][ T5833] bridge_slave_0: entered promiscuous mode [ 67.804364][ T5835] team0: Port device team_slave_0 added [ 67.812166][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.824277][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.834793][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.852147][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.859382][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.868047][ T5833] bridge_slave_1: entered allmulticast mode [ 67.874641][ T5833] bridge_slave_1: entered promiscuous mode [ 67.881969][ T5835] team0: Port device team_slave_1 added [ 67.958758][ T5829] team0: Port device team_slave_0 added [ 67.966592][ T5827] team0: Port device team_slave_0 added [ 67.973278][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.980723][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.006831][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.021833][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.033288][ T5841] team0: Port device team_slave_0 added [ 68.041443][ T5841] team0: Port device team_slave_1 added [ 68.048695][ T5829] team0: Port device team_slave_1 added [ 68.063889][ T5827] team0: Port device team_slave_1 added [ 68.076081][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.083109][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.109155][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.126884][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.187456][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.194404][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.221365][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.232670][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.239945][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.266694][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.279458][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.286458][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.312575][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.328748][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.335738][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.361743][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.380123][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.387138][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.413408][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.446690][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.453925][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.480295][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.499841][ T5833] team0: Port device team_slave_0 added [ 68.519662][ T5835] hsr_slave_0: entered promiscuous mode [ 68.525743][ T5835] hsr_slave_1: entered promiscuous mode [ 68.544980][ T5833] team0: Port device team_slave_1 added [ 68.598681][ T5829] hsr_slave_0: entered promiscuous mode [ 68.604795][ T5829] hsr_slave_1: entered promiscuous mode [ 68.611077][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.618907][ T5829] Cannot create hsr debugfs directory [ 68.636911][ T5845] Bluetooth: hci2: command tx timeout [ 68.639474][ T5827] hsr_slave_0: entered promiscuous mode [ 68.642534][ T5845] Bluetooth: hci0: command tx timeout [ 68.648725][ T5827] hsr_slave_1: entered promiscuous mode [ 68.653379][ T5832] Bluetooth: hci4: command tx timeout [ 68.658901][ T5847] Bluetooth: hci3: command tx timeout [ 68.670688][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.678349][ T5827] Cannot create hsr debugfs directory [ 68.684417][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.691619][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.717277][ T5847] Bluetooth: hci1: command tx timeout [ 68.717870][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.734371][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.741371][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.767319][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.781807][ T5841] hsr_slave_0: entered promiscuous mode [ 68.788254][ T5841] hsr_slave_1: entered promiscuous mode [ 68.794186][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.801858][ T5841] Cannot create hsr debugfs directory [ 68.912527][ T5833] hsr_slave_0: entered promiscuous mode [ 68.918667][ T5833] hsr_slave_1: entered promiscuous mode [ 68.924521][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.932615][ T5833] Cannot create hsr debugfs directory [ 69.195719][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.219654][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.231667][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.258923][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.294332][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.303460][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.321153][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.340844][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.381585][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.399063][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.414187][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.439867][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.487756][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.498744][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.520923][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.551539][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.621923][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.634812][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.649488][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.670805][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.693662][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.740735][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.758779][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.774418][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.800266][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.807485][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.832259][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.843364][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.850489][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.860236][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.880982][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.888093][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.908500][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.915554][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.941749][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.948899][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.978912][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.985991][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.003391][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.062339][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.108475][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.115742][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.123956][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 70.123969][ T30] audit: type=1400 audit(1753334574.278:86): avc: denied { sys_module } for pid=5835 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.174949][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.182063][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.254887][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.320570][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.365010][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.372156][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.460643][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.467799][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.552385][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.570890][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.633130][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.719981][ T5847] Bluetooth: hci4: command tx timeout [ 70.726200][ T5832] Bluetooth: hci0: command tx timeout [ 70.731618][ T5832] Bluetooth: hci2: command tx timeout [ 70.737821][ T5843] Bluetooth: hci3: command tx timeout [ 70.779211][ T5835] veth0_vlan: entered promiscuous mode [ 70.797058][ T5832] Bluetooth: hci1: command tx timeout [ 70.810252][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.842464][ T5835] veth1_vlan: entered promiscuous mode [ 70.890478][ T5829] veth0_vlan: entered promiscuous mode [ 70.915312][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.943141][ T5829] veth1_vlan: entered promiscuous mode [ 70.961005][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.975317][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.993176][ T5829] veth0_macvtap: entered promiscuous mode [ 71.034923][ T5833] veth0_vlan: entered promiscuous mode [ 71.051389][ T5835] veth0_macvtap: entered promiscuous mode [ 71.059402][ T5841] veth0_vlan: entered promiscuous mode [ 71.070628][ T5841] veth1_vlan: entered promiscuous mode [ 71.079414][ T5829] veth1_macvtap: entered promiscuous mode [ 71.090981][ T5835] veth1_macvtap: entered promiscuous mode [ 71.109542][ T5833] veth1_vlan: entered promiscuous mode [ 71.123020][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.153981][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.174789][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.192704][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.204934][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.215769][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.225369][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.234311][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.252473][ T5827] veth0_vlan: entered promiscuous mode [ 71.262047][ T5841] veth0_macvtap: entered promiscuous mode [ 71.288559][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.298326][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.308341][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.317427][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.330147][ T5827] veth1_vlan: entered promiscuous mode [ 71.338109][ T5841] veth1_macvtap: entered promiscuous mode [ 71.390887][ T5833] veth0_macvtap: entered promiscuous mode [ 71.424739][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.435447][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.441949][ T5827] veth0_macvtap: entered promiscuous mode [ 71.449234][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.458505][ T5833] veth1_macvtap: entered promiscuous mode [ 71.481731][ T5827] veth1_macvtap: entered promiscuous mode [ 71.491702][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.533146][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.550722][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.563639][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.571015][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.580027][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.588889][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.605384][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.613132][ T30] audit: type=1400 audit(1753334575.748:87): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.SWxAto/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.642713][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.650025][ T30] audit: type=1400 audit(1753334575.758:88): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.686884][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.699671][ T30] audit: type=1400 audit(1753334575.758:89): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.SWxAto/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.728820][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.742917][ T30] audit: type=1400 audit(1753334575.768:90): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.745420][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.773961][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.776751][ T30] audit: type=1400 audit(1753334575.768:91): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.SWxAto/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.811972][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.812339][ T30] audit: type=1400 audit(1753334575.768:92): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.SWxAto/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.833154][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.858334][ T30] audit: type=1400 audit(1753334575.768:93): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.864121][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.878815][ T30] audit: type=1400 audit(1753334575.798:94): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.890402][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.909982][ T30] audit: type=1400 audit(1753334575.798:95): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="gadgetfs" ino=6453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.922485][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.975312][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.989150][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.998260][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.009659][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.048698][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.063151][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.181656][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.216708][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.244534][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.255547][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.353728][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.395298][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.469958][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.492091][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.796830][ T5832] Bluetooth: hci2: command tx timeout [ 72.802379][ T5845] Bluetooth: hci4: command tx timeout [ 72.809116][ T5847] Bluetooth: hci3: command tx timeout [ 72.814892][ T5843] Bluetooth: hci0: command tx timeout [ 72.876479][ T5843] Bluetooth: hci1: command tx timeout [ 72.923273][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.931846][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.019960][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.044488][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.566589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.877751][ T5847] Bluetooth: hci3: command tx timeout [ 74.883186][ T5847] Bluetooth: hci4: command tx timeout [ 74.889035][ T5845] Bluetooth: hci2: command tx timeout [ 74.894471][ T5843] Bluetooth: hci0: command tx timeout [ 74.956655][ T5951] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.964478][ T5843] Bluetooth: hci1: command tx timeout [ 75.140625][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 75.150872][ T5951] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.196453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.216689][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8'. [ 75.248767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.257967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.586694][ T5951] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.599775][ T5951] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.639087][ T5951] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 75.669447][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 75.853660][ T5951] usb 2-1: Product: syz [ 75.858229][ T5951] usb 2-1: Manufacturer: syz [ 75.868019][ T5951] usb 2-1: SerialNumber: syz [ 76.317969][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 76.317984][ T30] audit: type=1400 audit(1753334580.468:128): avc: denied { create } for pid=5985 comm="syz.4.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.354014][ T5951] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 76.383265][ T30] audit: type=1400 audit(1753334580.468:129): avc: denied { map } for pid=5985 comm="syz.4.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.497286][ T30] audit: type=1400 audit(1753334580.468:130): avc: denied { read write } for pid=5985 comm="syz.4.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.598803][ T5889] usb 2-1: USB disconnect, device number 2 [ 76.659437][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'. [ 76.764829][ T30] audit: type=1400 audit(1753334580.558:131): avc: denied { create } for pid=5985 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.785393][ T30] audit: type=1400 audit(1753334580.728:132): avc: denied { read write } for pid=5970 comm="syz.1.7" name="lp0" dev="devtmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 76.810263][ T30] audit: type=1400 audit(1753334580.728:133): avc: denied { open } for pid=5970 comm="syz.1.7" path="/dev/usb/lp0" dev="devtmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 77.051229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.127557][ T30] audit: type=1400 audit(1753334581.268:134): avc: denied { ioctl } for pid=5989 comm="syz.3.13" path="socket:[7971]" dev="sockfs" ino=7971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.245008][ T5889] usblp0: removed [ 77.374818][ T30] audit: type=1400 audit(1753334581.518:135): avc: denied { read write } for pid=5985 comm="syz.4.12" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.398081][ T30] audit: type=1400 audit(1753334581.518:136): avc: denied { open } for pid=5985 comm="syz.4.12" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.425255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 77.436621][ T30] audit: type=1400 audit(1753334581.518:137): avc: denied { read write } for pid=5985 comm="syz.4.12" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.467426][ T6000] Zero length message leads to an empty skb [ 77.804092][ T6004] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 77.911397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.920347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.054828][ T5896] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.319610][ T5896] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 78.334407][ T5896] usb 3-1: config index 0 descriptor too short (expected 8192, got 76) [ 78.379829][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.414433][ T5896] usb 3-1: config 0 has no interfaces? [ 78.425753][ T5896] usb 3-1: config index 1 descriptor too short (expected 8192, got 76) [ 78.838082][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.853851][ T5896] usb 3-1: config 0 has no interfaces? [ 78.862948][ T5896] usb 3-1: config index 2 descriptor too short (expected 8192, got 76) [ 78.889237][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.900852][ T5896] usb 3-1: config 0 has no interfaces? [ 78.915006][ T5896] usb 3-1: config index 3 descriptor too short (expected 8192, got 76) [ 78.924283][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.945832][ T5896] usb 3-1: config 0 has no interfaces? [ 79.092369][ T5896] usb 3-1: config index 4 descriptor too short (expected 8192, got 76) [ 79.102952][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.121108][ T5896] usb 3-1: config 0 has no interfaces? [ 79.154720][ T5896] usb 3-1: config index 5 descriptor too short (expected 8192, got 76) [ 79.181342][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.216818][ T5896] usb 3-1: config 0 has no interfaces? [ 79.223753][ T5896] usb 3-1: config index 6 descriptor too short (expected 8192, got 76) [ 79.244023][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.293690][ T5896] usb 3-1: config 0 has no interfaces? [ 79.452804][ T5896] usb 3-1: config index 7 descriptor too short (expected 8192, got 76) [ 79.457591][ T6024] process 'syz.0.19' launched './file1' with NULL argv: empty string added [ 79.498000][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.508206][ T5896] usb 3-1: config 0 has no interfaces? [ 79.515719][ T5896] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.524966][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.533015][ T5896] usb 3-1: Product: syz [ 79.537216][ T5896] usb 3-1: Manufacturer: syz [ 79.541841][ T5896] usb 3-1: SerialNumber: syz [ 79.559912][ T6025] sit1: entered allmulticast mode [ 79.577935][ T5896] usb 3-1: config 0 descriptor?? [ 79.945263][ T9] usb 3-1: USB disconnect, device number 2 [ 80.836270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.198655][ T92] cfg80211: failed to load regulatory.db [ 81.206228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.226412][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.386143][ T5918] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.429181][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 81.429199][ T30] audit: type=1400 audit(1753334585.488:198): avc: denied { create } for pid=6054 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.459466][ T30] audit: type=1400 audit(1753334585.488:199): avc: denied { setopt } for pid=6054 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.478894][ T30] audit: type=1400 audit(1753334585.488:200): avc: denied { bind } for pid=6054 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.501239][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 81.512284][ T30] audit: type=1400 audit(1753334585.488:201): avc: denied { name_bind } for pid=6054 comm="syz.4.30" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 81.517624][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 81.553058][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.616698][ T6058] netlink: 44 bytes leftover after parsing attributes in process `syz.4.30'. [ 81.965523][ T30] audit: type=1400 audit(1753334585.488:202): avc: denied { node_bind } for pid=6054 comm="syz.4.30" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 81.993051][ T30] audit: type=1400 audit(1753334585.658:203): avc: denied { allowed } for pid=6050 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.016466][ T30] audit: type=1400 audit(1753334585.658:204): avc: denied { map } for pid=6050 comm="syz.1.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.028903][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.048656][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 82.068792][ T5918] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 82.088869][ T30] audit: type=1400 audit(1753334585.658:205): avc: denied { read write } for pid=6050 comm="syz.1.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.114260][ T5918] usb 4-1: config 0 has no interface number 0 [ 82.127268][ T9] usb 3-1: Product: syz [ 82.133199][ T5918] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.143266][ T9] usb 3-1: Manufacturer: syz [ 82.147955][ T9] usb 3-1: SerialNumber: syz [ 82.238808][ T5918] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 82.249327][ T9] usb 3-1: config 0 descriptor?? [ 82.257868][ T9] usb 3-1: can't set config #0, error -71 [ 82.273947][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.292803][ T9] usb 3-1: USB disconnect, device number 3 [ 82.298807][ T5918] usb 4-1: Product: syz [ 82.303958][ T5918] usb 4-1: Manufacturer: syz [ 82.310915][ T5918] usb 4-1: SerialNumber: syz [ 82.313837][ T30] audit: type=1400 audit(1753334585.758:206): avc: denied { name_bind } for pid=6054 comm="syz.4.30" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.355614][ T5918] usb 4-1: config 0 descriptor?? [ 82.589219][ T30] audit: type=1400 audit(1753334585.758:207): avc: denied { node_bind } for pid=6054 comm="syz.4.30" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 82.733567][ T5918] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 82.782426][ T5918] em28xx 4-1:0.132: Video interface 132 found: [ 82.882066][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 82.930514][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 83.155344][ T5918] em28xx 4-1:0.132: unknown em28xx chip ID (39) [ 83.238846][ T92] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.357171][ T6076] netlink: 'syz.4.36': attribute type 5 has an invalid length. [ 83.408097][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.428388][ T92] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.552366][ T92] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.567455][ T92] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 83.579421][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 83.589018][ T92] usb 2-1: Product: syz [ 83.593222][ T92] usb 2-1: Manufacturer: syz [ 83.608101][ T92] usb 2-1: SerialNumber: syz [ 83.840702][ T6047] netlink: 'syz.3.27': attribute type 29 has an invalid length. [ 84.646932][ T5918] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 84.703035][ T5918] em28xx 4-1:0.132: board has no eeprom [ 84.793399][ T5918] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 84.810863][ T5918] em28xx 4-1:0.132: analog set to bulk mode. [ 84.818478][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 84.871196][ T6094] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 84.877855][ T6094] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.936930][ T92] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 84.959193][ T92] usb 2-1: USB disconnect, device number 3 [ 85.007102][ T6094] vhci_hcd vhci_hcd.0: Device attached [ 85.085058][ T92] usblp0: removed [ 85.107454][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 85.112788][ T5843] Bluetooth: unknown link type 6 [ 85.122942][ T5843] Bluetooth: hci3: connection err: -111 [ 85.144152][ T6095] vhci_hcd: connection closed [ 85.593965][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 85.595484][ T1155] vhci_hcd: stop threads [ 85.604816][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 85.624442][ T1155] vhci_hcd: release socket [ 85.629153][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 85.643982][ T1155] vhci_hcd: disconnect device [ 85.668667][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 85.682674][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 85.724049][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 85.745353][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 85.814441][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 85.832594][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 85.865887][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 85.905172][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 85.919923][ T975] usb 4-1: USB disconnect, device number 2 [ 85.930989][ T975] em28xx 4-1:0.132: Disconnecting em28xx [ 85.968897][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 85.989266][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 86.008729][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 86.022631][ T9] usb 4-1: Decoder not found [ 86.049419][ T9] em28xx 4-1:0.132: failed to create media graph [ 86.156566][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'. [ 86.165475][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.45'. [ 86.174330][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'. [ 86.183152][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'. [ 86.259385][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 86.278167][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.351010][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 86.414087][ T975] em28xx 4-1:0.132: Closing input extension [ 86.503179][ T975] em28xx 4-1:0.132: Freeing device [ 86.506115][ T24] usb 3-1: device descriptor read/64, error -71 [ 86.594365][ T6125] lo speed is unknown, defaulting to 1000 [ 86.600411][ T6125] lo speed is unknown, defaulting to 1000 [ 86.611095][ T6125] lo speed is unknown, defaulting to 1000 [ 86.634957][ T6125] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.678559][ T6125] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 86.791952][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 86.791982][ T30] audit: type=1400 audit(1753334590.728:219): avc: denied { create } for pid=6119 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.843251][ T6125] lo speed is unknown, defaulting to 1000 [ 86.851023][ T6125] lo speed is unknown, defaulting to 1000 [ 86.859079][ T6125] lo speed is unknown, defaulting to 1000 [ 86.866074][ T6125] lo speed is unknown, defaulting to 1000 [ 86.873096][ T6125] lo speed is unknown, defaulting to 1000 [ 87.059945][ T30] audit: type=1400 audit(1753334590.738:220): avc: denied { setopt } for pid=6119 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.150465][ T30] audit: type=1400 audit(1753334590.738:221): avc: denied { create } for pid=6119 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.170864][ T30] audit: type=1400 audit(1753334590.738:222): avc: denied { write } for pid=6119 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.191995][ T30] audit: type=1400 audit(1753334590.918:223): avc: denied { connect } for pid=6119 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.211666][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.259773][ T30] audit: type=1400 audit(1753334590.918:224): avc: denied { setopt } for pid=6119 comm="syz.4.46" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.286059][ T5951] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 87.416234][ T30] audit: type=1400 audit(1753334590.928:225): avc: denied { read } for pid=6119 comm="syz.4.46" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.471292][ T24] usb 3-1: device descriptor read/64, error -71 [ 87.520026][ T30] audit: type=1400 audit(1753334590.928:226): avc: denied { open } for pid=6119 comm="syz.4.46" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.607736][ T24] usb usb3-port1: attempt power cycle [ 87.619881][ T5951] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.642014][ T5951] usb 5-1: config 0 has no interface number 0 [ 87.642055][ T5951] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 87.642080][ T5951] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 9, setting to 8 [ 87.642115][ T5951] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 87.642136][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.644200][ T5951] usb 5-1: config 0 descriptor?? [ 87.649811][ T6126] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 87.653717][ T30] audit: type=1400 audit(1753334590.928:227): avc: denied { ioctl } for pid=6119 comm="syz.4.46" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.653766][ T30] audit: type=1400 audit(1753334591.318:228): avc: denied { write } for pid=6128 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.665578][ T5951] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 87.727377][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.028299][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 88.057013][ T24] usb 3-1: device descriptor read/8, error -71 [ 88.307538][ T6151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48182 sclass=netlink_route_socket pid=6151 comm=syz.1.54 [ 89.421725][ T92] usb 5-1: USB disconnect, device number 2 [ 91.156088][ T92] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.320995][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.491630][ T92] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.509232][ T92] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.770635][ T92] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.786450][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.820146][ T6180] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.865484][ T92] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.898346][ T24] usb 5-1: device descriptor read/64, error -71 [ 91.903607][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 91.903621][ T30] audit: type=1400 audit(1753334596.048:253): avc: denied { create } for pid=6198 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.213882][ T30] audit: type=1400 audit(1753334596.358:254): avc: denied { relabelfrom } for pid=6178 comm="syz.3.61" name="UNIX" dev="sockfs" ino=9299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 92.230927][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.256791][ T6202] SELinux: Context u:object_r:app_data_file:s0:c512,c768 is not valid (left unmapped). [ 92.358205][ T30] audit: type=1400 audit(1753334596.408:255): avc: denied { relabelto } for pid=6178 comm="syz.3.61" name="UNIX" dev="sockfs" ino=9299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="u:object_r:app_data_file:s0:c512,c768" [ 92.826196][ T5881] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 93.020530][ T5881] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 93.047234][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.059111][ T24] usb 5-1: device descriptor read/64, error -71 [ 93.095417][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.131477][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.164917][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.177620][ T24] usb usb5-port1: attempt power cycle [ 93.197391][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.245014][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.279456][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.310389][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.354894][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.391406][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.405895][ T30] audit: type=1400 audit(1753334597.548:256): avc: denied { create } for pid=6198 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.451192][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.493109][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.506928][ T30] audit: type=1400 audit(1753334597.598:257): avc: denied { bind } for pid=6198 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.553822][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.570513][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.625367][ T30] audit: type=1400 audit(1753334597.598:258): avc: denied { setopt } for pid=6198 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.676135][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.705667][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.720936][ T30] audit: type=1400 audit(1753334597.608:259): avc: denied { accept } for pid=6198 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.744550][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.772607][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.782735][ T30] audit: type=1400 audit(1753334597.608:260): avc: denied { write } for pid=6198 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.813981][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.825895][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.860000][ T30] audit: type=1400 audit(1753334597.618:261): avc: denied { read } for pid=6198 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.888686][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.934303][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.978986][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.997986][ T30] audit: type=1400 audit(1753334597.628:262): avc: denied { write } for pid=6198 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.040073][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 94.061241][ T5881] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 94.073693][ T5881] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 94.087466][ T5881] usb 3-1: Product: syz [ 94.104121][ T5881] usb 3-1: Manufacturer: syz [ 94.113845][ T5881] usb 3-1: SerialNumber: syz [ 94.164368][ T5881] usb 3-1: config 0 descriptor?? [ 94.219820][ T5881] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 94.472617][ T5881] usb 3-1: USB disconnect, device number 8 [ 94.514400][ T5881] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 94.656514][ T6212] comedi comedi3: Cannot bond this driver to itself! [ 94.679788][ T6204] mmap: syz.2.67 (6204) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.215528][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 98.215543][ T30] audit: type=1400 audit(1753334602.358:265): avc: denied { read write } for pid=6228 comm="syz.1.75" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.263304][ T6230] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 98.271200][ T6230] audit: out of memory in audit_log_start [ 98.334781][ T30] audit: type=1400 audit(1753334602.358:266): avc: denied { open } for pid=6228 comm="syz.1.75" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.407922][ T30] audit: type=1400 audit(1753334602.508:267): avc: denied { write } for pid=6228 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.865006][ T975] usb 4-1: USB disconnect, device number 3 [ 99.022038][ T6225] lo speed is unknown, defaulting to 1000 [ 99.296360][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.676863][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 99.706388][ T5881] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 99.721787][ T30] audit: type=1400 audit(1753334603.868:268): avc: denied { read write } for pid=6244 comm="syz.4.79" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 99.798534][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.835657][ T5881] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 99.897613][ T30] audit: type=1400 audit(1753334603.868:269): avc: denied { open } for pid=6244 comm="syz.4.79" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 99.933542][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.026629][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 100.884025][ T5881] usb 2-1: config 0 descriptor?? [ 101.740266][ T30] audit: type=1400 audit(1753334604.008:270): avc: denied { write } for pid=6247 comm="syz.3.80" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.052862][ T6261] tmpfs: Unknown parameter '' [ 102.294024][ T5881] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 103.445689][ T5881] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -110 [ 103.582130][ T5881] usb 2-1: USB disconnect, device number 4 [ 104.362435][ T30] audit: type=1400 audit(1753334608.508:271): avc: denied { append } for pid=6283 comm="syz.4.87" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.943940][ T6286] FAULT_INJECTION: forcing a failure. [ 104.943940][ T6286] name failslab, interval 1, probability 0, space 0, times 0 [ 104.976060][ T6286] CPU: 0 UID: 0 PID: 6286 Comm: syz.0.86 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 104.976088][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.976098][ T6286] Call Trace: [ 104.976104][ T6286] [ 104.976111][ T6286] dump_stack_lvl+0x16c/0x1f0 [ 104.976135][ T6286] should_fail_ex+0x512/0x640 [ 104.976161][ T6286] ? fs_reclaim_acquire+0xae/0x150 [ 104.976184][ T6286] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.976202][ T6286] should_failslab+0xc2/0x120 [ 104.976220][ T6286] __kmalloc_noprof+0xd2/0x510 [ 104.976252][ T6286] tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.976278][ T6286] tomoyo_check_open_permission+0x2ab/0x3c0 [ 104.976303][ T6286] ? security_file_alloc+0x34/0x2b0 [ 104.976322][ T6286] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 104.976346][ T6286] ? do_mq_open+0x4df/0x8c0 [ 104.976367][ T6286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.976410][ T6286] ? find_held_lock+0x2b/0x80 [ 104.976440][ T6286] tomoyo_file_open+0x6b/0x90 [ 104.976461][ T6286] security_file_open+0x84/0x1e0 [ 104.976480][ T6286] do_dentry_open+0x596/0x1c10 [ 104.976514][ T6286] vfs_open+0x82/0x3f0 [ 104.976537][ T6286] dentry_open+0x71/0xd0 [ 104.976557][ T6286] do_mq_open+0x4df/0x8c0 [ 104.976583][ T6286] ? __pfx_do_mq_open+0x10/0x10 [ 104.976608][ T6286] ? __fget_files+0x20e/0x3c0 [ 104.976626][ T6286] __x64_sys_mq_open+0x155/0x1e0 [ 104.976650][ T6286] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 104.976672][ T6286] ? fput+0x70/0xf0 [ 104.976708][ T6286] do_syscall_64+0xcd/0x4c0 [ 104.976726][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.976743][ T6286] RIP: 0033:0x7f59ffb8e9a9 [ 104.976758][ T6286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.976774][ T6286] RSP: 002b:00007f59fd9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 104.976792][ T6286] RAX: ffffffffffffffda RBX: 00007f59ffdb5fa0 RCX: 00007f59ffb8e9a9 [ 104.976803][ T6286] RDX: 0000000000000083 RSI: 0000000000000001 RDI: 00002000000005c0 [ 104.976813][ T6286] RBP: 00007f59fd9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.976823][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.976833][ T6286] R13: 0000000000000000 R14: 00007f59ffdb5fa0 R15: 00007ffe4d9fb1c8 [ 104.976857][ T6286] [ 104.976865][ T6286] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.406181][ T6301] netlink: 'syz.3.90': attribute type 10 has an invalid length. [ 106.421395][ T6301] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.430218][ T6301] bond0: (slave team0): Enslaving as an active interface with an up link [ 106.501520][ T30] audit: type=1400 audit(1753334610.598:272): avc: denied { write } for pid=6298 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.249641][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.91'. [ 107.676949][ T30] audit: type=1400 audit(1753334611.398:273): avc: denied { bind } for pid=6302 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.062886][ T30] audit: type=1400 audit(1753334611.398:274): avc: denied { accept } for pid=6302 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.258242][ T6313] capability: warning: `syz.3.94' uses deprecated v2 capabilities in a way that may be insecure [ 109.628746][ T6313] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 109.972892][ T6328] nfs: Unknown parameter '' [ 109.974018][ T6327] nfs: Unknown parameter '' [ 111.036311][ T30] audit: type=1400 audit(1753334615.168:275): avc: denied { read write } for pid=6330 comm="syz.3.99" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.158452][ T30] audit: type=1400 audit(1753334615.168:276): avc: denied { open } for pid=6330 comm="syz.3.99" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.521837][ T6338] sctp: [Deprecated]: syz.4.101 (pid 6338) Use of int in max_burst socket option. [ 111.521837][ T6338] Use struct sctp_assoc_value instead [ 111.537640][ T30] audit: type=1400 audit(1753334615.568:277): avc: denied { getopt } for pid=6333 comm="syz.4.101" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.022688][ T30] audit: type=1400 audit(1753334615.668:278): avc: denied { getopt } for pid=6333 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.168369][ T6345] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 112.306127][ T5918] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.509800][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 113.550789][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.104'. [ 113.560274][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 113.589393][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.104'. [ 113.600918][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 113.645621][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 113.857047][ T5918] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 113.876048][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.892802][ T5918] usb 2-1: Product: syz [ 113.897773][ T5918] usb 2-1: Manufacturer: syz [ 113.902385][ T5918] usb 2-1: SerialNumber: syz [ 113.917422][ T5918] usb 2-1: config 0 descriptor?? [ 113.933429][ T5918] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 116.294175][ T5918] scsi host1: usb-storage 2-1:0.0 [ 116.379495][ T5918] usb 2-1: USB disconnect, device number 5 [ 116.447179][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.564213][ T6368] FAULT_INJECTION: forcing a failure. [ 116.564213][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 116.590970][ T6365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.107'. [ 116.657274][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 116.689710][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.1.109 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 116.689735][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.689746][ T6368] Call Trace: [ 116.689751][ T6368] [ 116.689758][ T6368] dump_stack_lvl+0x16c/0x1f0 [ 116.689780][ T6368] should_fail_ex+0x512/0x640 [ 116.689807][ T6368] ? fs_reclaim_acquire+0xae/0x150 [ 116.689831][ T6368] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 116.689848][ T6368] should_failslab+0xc2/0x120 [ 116.689865][ T6368] __kmalloc_noprof+0xd2/0x510 [ 116.689897][ T6368] tomoyo_realpath_from_path+0xc2/0x6e0 [ 116.689917][ T6368] ? tomoyo_profile+0x47/0x60 [ 116.689939][ T6368] tomoyo_path_number_perm+0x245/0x580 [ 116.689963][ T6368] ? tomoyo_path_number_perm+0x237/0x580 [ 116.689990][ T6368] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.690016][ T6368] ? find_held_lock+0x2b/0x80 [ 116.690062][ T6368] ? find_held_lock+0x2b/0x80 [ 116.690082][ T6368] ? hook_file_ioctl_common+0x145/0x410 [ 116.690108][ T6368] ? __fget_files+0x20e/0x3c0 [ 116.690130][ T6368] security_file_ioctl+0x9b/0x240 [ 116.690148][ T6368] __x64_sys_ioctl+0xb7/0x210 [ 116.690175][ T6368] do_syscall_64+0xcd/0x4c0 [ 116.690194][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.690212][ T6368] RIP: 0033:0x7f9b3e98e9a9 [ 116.690226][ T6368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.690242][ T6368] RSP: 002b:00007f9b3c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.690259][ T6368] RAX: ffffffffffffffda RBX: 00007f9b3ebb5fa0 RCX: 00007f9b3e98e9a9 [ 116.690269][ T6368] RDX: 0000200000000080 RSI: 00000000c0044dff RDI: 0000000000000004 [ 116.690280][ T6368] RBP: 00007f9b3c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.690290][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.690300][ T6368] R13: 0000000000000000 R14: 00007f9b3ebb5fa0 R15: 00007ffc73e68f68 [ 116.690325][ T6368] [ 116.690331][ T6368] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.046893][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 117.088721][ T9] usb 5-1: config 0 has no interface number 0 [ 117.226390][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 117.263917][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.287148][ T9] usb 5-1: Product: syz [ 117.300162][ T9] usb 5-1: Manufacturer: syz [ 117.304779][ T9] usb 5-1: SerialNumber: syz [ 117.356808][ T9] usb 5-1: config 0 descriptor?? [ 117.387075][ T9] smsc95xx v2.0.0 [ 118.146314][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 118.202468][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.288394][ T975] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.388259][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 123.396010][ C1] sched: DL replenish lagged too much [ 123.571935][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -110 [ 123.835755][ T975] usb 4-1: device not accepting address 4, error -71 [ 123.898087][ T9] usb 5-1: USB disconnect, device number 6 [ 123.938192][ T6387] Bluetooth: MGMT ver 1.23 [ 123.944314][ T30] audit: type=1400 audit(1753334628.088:279): avc: denied { write } for pid=6386 comm="syz.4.116" path="socket:[9083]" dev="sockfs" ino=9083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.985406][ T30] audit: type=1400 audit(1753334628.478:280): avc: denied { create } for pid=6386 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 126.088207][ T6397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.116'. [ 126.559909][ T30] audit: type=1400 audit(1753334629.878:281): avc: denied { shutdown } for pid=6386 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.889376][ T30] audit: type=1400 audit(1753334631.038:282): avc: denied { bind } for pid=6411 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.729500][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.741586][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.158494][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.170514][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.484720][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 195.377654][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 195.383697][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 195.402199][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 195.414802][ T5154] Bluetooth: hci0: command 0x0406 tx timeout [ 255.400912][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.599871][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.405938][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 315.412987][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5841/1:b..l P5193/1:b..l [ 315.422354][ C1] rcu: (detected by 1, t=10502 jiffies, g=9433, q=632317 ncpus=2) [ 315.430248][ C1] task:klogd state:R running task stack:25512 pid:5193 tgid:5193 ppid:1 task_flags:0x400100 flags:0x00004002 [ 315.444584][ C1] Call Trace: [ 315.447869][ C1] [ 315.450804][ C1] __schedule+0x116a/0x5dd0 [ 315.455326][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 315.460256][ C1] ? __pfx___schedule+0x10/0x10 [ 315.465089][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 315.470119][ C1] ? mark_held_locks+0x49/0x80 [ 315.474895][ C1] preempt_schedule_irq+0x51/0x90 [ 315.479931][ C1] irqentry_exit+0x36/0x90 [ 315.484344][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.490338][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0xa/0x20 [ 315.497111][ C1] Code: 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 89 f2 <89> fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 [ 315.516736][ C1] RSP: 0018:ffffc900033d76d8 EFLAGS: 00000246 [ 315.522807][ C1] RAX: 0000000000000001 RBX: 000000000003a83b RCX: ffffffff822cd388 [ 315.530776][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 315.538757][ C1] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000001000 [ 315.546737][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801c680000 [ 315.554704][ C1] R13: ffff88823ffef400 R14: 0000000000000000 R15: 0000000000000000 [ 315.562672][ C1] ? lookup_page_ext+0x118/0x1d0 [ 315.567620][ C1] lookup_page_ext+0x118/0x1d0 [ 315.572417][ C1] page_ext_get+0x58/0x1a0 [ 315.576850][ C1] __reset_page_owner+0x2b/0x1a0 [ 315.581803][ C1] __free_frozen_pages+0x7fe/0x1180 [ 315.587013][ C1] ? mod_node_page_state+0x30/0x150 [ 315.592216][ C1] __put_partials+0x16d/0x1c0 [ 315.596899][ C1] qlist_free_all+0x4d/0x120 [ 315.601496][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 315.606959][ C1] __kasan_slab_alloc+0x69/0x90 [ 315.611822][ C1] __kmalloc_node_track_caller_noprof+0x1d3/0x510 [ 315.618235][ C1] ? __alloc_skb+0x166/0x380 [ 315.622829][ C1] ? trace_kmem_cache_alloc+0x28/0xc0 [ 315.628208][ C1] kmalloc_reserve+0xef/0x2c0 [ 315.632889][ C1] __alloc_skb+0x166/0x380 [ 315.637300][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 315.642241][ C1] ? __lock_acquire+0x622/0x1c90 [ 315.647181][ C1] ? try_to_wake_up+0xa25/0x1680 [ 315.652126][ C1] alloc_skb_with_frags+0xe0/0x860 [ 315.657241][ C1] ? find_held_lock+0x2b/0x80 [ 315.661935][ C1] sock_alloc_send_pskb+0x7fb/0x990 [ 315.667142][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 315.672864][ C1] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 315.679200][ C1] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 315.685876][ C1] ? sock_def_readable+0x1d9/0x600 [ 315.690983][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 315.696805][ C1] unix_dgram_sendmsg+0x3e9/0x17a0 [ 315.701923][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 315.708676][ C1] ? __lock_acquire+0x622/0x1c90 [ 315.713618][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 315.719179][ C1] __sys_sendto+0x4a0/0x520 [ 315.723674][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 315.728693][ C1] ? find_held_lock+0x2b/0x80 [ 315.733393][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.738167][ C1] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 315.744490][ C1] ? xfd_validate_state+0x61/0x180 [ 315.749607][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 315.754378][ C1] ? do_syscall_64+0x91/0x4c0 [ 315.759055][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.764263][ C1] do_syscall_64+0xcd/0x4c0 [ 315.768763][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.774644][ C1] RIP: 0033:0x7fc46ed18407 [ 315.779050][ C1] RSP: 002b:00007ffec03dd8e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 315.787465][ C1] RAX: ffffffffffffffda RBX: 00007fc46ebc8c80 RCX: 00007fc46ed18407 [ 315.795427][ C1] RDX: 000000000000005c RSI: 00007ffec03dda20 RDI: 0000000000000003 [ 315.803387][ C1] RBP: 00007ffec03dde50 R08: 0000000000000000 R09: 0000000000000000 [ 315.811355][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffec03dde68 [ 315.819317][ C1] R13: 00007ffec03dda20 R14: 0000000000000041 R15: 00007ffec03dda20 [ 315.827303][ C1] [ 315.830315][ C1] task:syz-executor state:R running task stack:23736 pid:5841 tgid:5841 ppid:5822 task_flags:0x400140 flags:0x00004000 [ 315.843790][ C1] Call Trace: [ 315.847067][ C1] [ 315.850023][ C1] __schedule+0x116a/0x5dd0 [ 315.854536][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.859318][ C1] ? __pfx___schedule+0x10/0x10 [ 315.864182][ C1] ? mark_held_locks+0x49/0x80 [ 315.868948][ C1] ? irqentry_exit+0x3b/0x90 [ 315.873521][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.878714][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 315.884787][ C1] preempt_schedule_notrace+0x62/0xe0 [ 315.890167][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 315.896070][ C1] rcu_is_watching+0x8e/0xc0 [ 315.900660][ C1] lock_acquire+0x2cd/0x350 [ 315.905159][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 315.910348][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.916508][ C1] unwind_next_frame+0xd1/0x20a0 [ 315.921428][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 315.926525][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 315.932170][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.938330][ C1] arch_stack_walk+0x94/0x100 [ 315.943009][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 315.948645][ C1] stack_trace_save+0x8e/0xc0 [ 315.953326][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 315.958711][ C1] ? __lock_acquire+0x622/0x1c90 [ 315.963650][ C1] save_stack+0x160/0x1f0 [ 315.967985][ C1] ? __pfx_save_stack+0x10/0x10 [ 315.972839][ C1] ? __free_frozen_pages+0x7fe/0x1180 [ 315.978212][ C1] ? __put_partials+0x16d/0x1c0 [ 315.983059][ C1] ? qlist_free_all+0x4d/0x120 [ 315.987816][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 315.993460][ C1] ? page_ext_put+0x3e/0xd0 [ 315.997974][ C1] __reset_page_owner+0x84/0x1a0 [ 316.002919][ C1] __free_frozen_pages+0x7fe/0x1180 [ 316.008120][ C1] ? mod_node_page_state+0x30/0x150 [ 316.013321][ C1] __put_partials+0x16d/0x1c0 [ 316.018001][ C1] qlist_free_all+0x4d/0x120 [ 316.022599][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 316.028314][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 316.033768][ C1] __kasan_kmalloc+0x8a/0xb0 [ 316.038358][ C1] __kmalloc_noprof+0x223/0x510 [ 316.043220][ C1] tomoyo_realpath_from_path+0xc2/0x6e0 [ 316.048768][ C1] ? tomoyo_profile+0x47/0x60 [ 316.053450][ C1] tomoyo_path_perm+0x274/0x460 [ 316.058304][ C1] ? tomoyo_path_perm+0x260/0x460 [ 316.063335][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 316.068734][ C1] ? find_held_lock+0x2b/0x80 [ 316.073412][ C1] ? __might_fault+0xe3/0x190 [ 316.078096][ C1] ? __might_fault+0xe3/0x190 [ 316.082779][ C1] ? __might_fault+0x13b/0x190 [ 316.087553][ C1] security_inode_getattr+0x116/0x290 [ 316.092930][ C1] vfs_statx+0x121/0x3e0 [ 316.097167][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 316.101934][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 316.107315][ C1] vfs_fstatat+0x7b/0xf0 [ 316.111571][ C1] __do_sys_newfstatat+0x97/0x120 [ 316.116592][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 316.122221][ C1] ? __x64_sys_umount+0x124/0x1a0 [ 316.127233][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 316.132611][ C1] do_syscall_64+0xcd/0x4c0 [ 316.137117][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.143005][ C1] RIP: 0033:0x7f59ffb8d1ba [ 316.147410][ C1] RSP: 002b:00007ffe4d9fa458 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 316.155823][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f59ffb8d1ba [ 316.163787][ C1] RDX: 00007ffe4d9fa480 RSI: 00007ffe4d9fa510 RDI: 00000000ffffff9c [ 316.171773][ C1] RBP: 00007ffe4d9fa510 R08: 0000000000000000 R09: 0000000000000000 [ 316.179825][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffe4d9fb5a0 [ 316.187798][ C1] R13: 00007f59ffc10b55 R14: 000000000001f323 R15: 00007ffe4d9fb5e0 [ 316.195773][ C1] [ 316.198783][ C1] rcu: rcu_preempt kthread starved for 2812 jiffies! g9433 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 316.209796][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 316.219754][ C1] rcu: RCU grace-period kthread stack dump: [ 316.225632][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 316.239127][ C1] Call Trace: [ 316.242402][ C1] [ 316.245331][ C1] __schedule+0x116a/0x5dd0 [ 316.249853][ C1] ? __pfx___schedule+0x10/0x10 [ 316.254697][ C1] ? find_held_lock+0x2b/0x80 [ 316.259372][ C1] ? schedule+0x2d7/0x3a0 [ 316.263707][ C1] schedule+0xe7/0x3a0 [ 316.267781][ C1] schedule_timeout+0x123/0x290 [ 316.272635][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 316.278015][ C1] ? __pfx_process_timeout+0x10/0x10 [ 316.283306][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 316.289118][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 316.294592][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 316.299348][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 316.304634][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.309840][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 316.314771][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 316.319619][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 316.325418][ C1] rcu_gp_kthread+0x270/0x380 [ 316.330085][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 316.335278][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.340040][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.345230][ C1] ? __kthread_parkme+0x19e/0x250 [ 316.350266][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 316.355463][ C1] kthread+0x3c5/0x780 [ 316.359528][ C1] ? __pfx_kthread+0x10/0x10 [ 316.364107][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.368864][ C1] ? __pfx_kthread+0x10/0x10 [ 316.373454][ C1] ret_from_fork+0x5d4/0x6f0 [ 316.378051][ C1] ? __pfx_kthread+0x10/0x10 [ 316.382635][ C1] ret_from_fork_asm+0x1a/0x30 [ 316.387405][ C1] [ 316.390419][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 316.396731][ C1] Sending NMI from CPU 1 to CPUs 0: [ 316.401942][ C0] NMI backtrace for cpu 0 [ 316.401956][ C0] CPU: 0 UID: 0 PID: 6183 Comm: syz.1.58 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 316.401974][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.401982][ C0] RIP: 0010:nft_synproxy_eval+0x0/0x30 [ 316.402005][ C0] Code: 48 8d bb 88 00 00 00 4c 89 e2 5b 48 89 ee 5d 41 5c e9 44 f2 ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 54 49 89 d4 55 48 89 f5 53 48 89 fb e8 ca 56 f8 f7 [ 316.402017][ C0] RSP: 0018:ffffc900000076f0 EFLAGS: 00000246 [ 316.402029][ C0] RAX: 0000000000000000 RBX: ffffffff89c39190 RCX: ffffffff89b581e9 [ 316.402039][ C0] RDX: ffffc90000007978 RSI: ffffc900000077b0 RDI: ffff888037414090 [ 316.402048][ C0] RBP: ffff888037414088 R08: 0000000000000001 R09: 0000000000000000 [ 316.402056][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888037414090 [ 316.402065][ C0] R13: dffffc0000000000 R14: ffffc900000077b0 R15: 0000000000000000 [ 316.402074][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 316.402088][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.402097][ C0] CR2: 00007ffedb022fe8 CR3: 0000000035c14000 CR4: 00000000003526f0 [ 316.402106][ C0] Call Trace: [ 316.402110][ C0] [ 316.402115][ C0] nft_do_chain+0x2e6/0x1920 [ 316.402135][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 316.402151][ C0] ? mark_held_locks+0x49/0x80 [ 316.402174][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.402194][ C0] ? ipt_do_table+0xd48/0x1ae0 [ 316.402219][ C0] nft_do_chain_inet+0x18a/0x340 [ 316.402236][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 316.402253][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.402268][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 316.402287][ C0] ? nf_nat_ipv4_local_in+0x181/0x720 [ 316.402308][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 316.402323][ C0] nf_hook_slow+0xbb/0x200 [ 316.402336][ C0] nf_hook.constprop.0+0x422/0x750 [ 316.402350][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 316.402363][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 316.402380][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 316.402395][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 316.402411][ C0] ip_local_deliver+0x169/0x1f0 [ 316.402423][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 316.402437][ C0] ip_rcv+0x2c3/0x5d0 [ 316.402449][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 316.402461][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 316.402481][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 316.402501][ C0] ? lock_acquire+0x179/0x350 [ 316.402516][ C0] ? process_backlog+0x3f0/0x15e0 [ 316.402534][ C0] __netif_receive_skb+0x1d/0x160 [ 316.402552][ C0] process_backlog+0x442/0x15e0 [ 316.402575][ C0] __napi_poll.constprop.0+0xba/0x550 [ 316.402595][ C0] net_rx_action+0xa9f/0xfe0 [ 316.402617][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 316.402636][ C0] ? lock_acquire+0x179/0x350 [ 316.402649][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 316.402666][ C0] ? sched_clock+0x38/0x60 [ 316.402683][ C0] ? sched_clock_cpu+0x6c/0x530 [ 316.402706][ C0] ? mark_held_locks+0x49/0x80 [ 316.402726][ C0] handle_softirqs+0x219/0x8e0 [ 316.402744][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 316.402761][ C0] __irq_exit_rcu+0x109/0x170 [ 316.402776][ C0] irq_exit_rcu+0x9/0x30 [ 316.402791][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 316.402811][ C0] [ 316.402816][ C0] [ 316.402821][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.402837][ C0] RIP: 0010:smp_call_function_many_cond+0xd84/0x1510 [ 316.402856][ C0] Code: 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 c7 14 0c 00 f3 90 41 0f b6 06 41 38 c5 7c 08 <84> c0 0f 85 6f 05 00 00 8b 43 08 31 ff 83 e0 01 89 c5 89 c6 e8 e3 [ 316.402868][ C0] RSP: 0018:ffffc900032c7720 EFLAGS: 00000206 [ 316.402878][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe20 RCX: ffffffff81afd3cd [ 316.402887][ C0] RDX: ffff8880550f4880 RSI: ffffffff81afd3a9 RDI: 0000000000000005 [ 316.402897][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 316.402905][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 316.402913][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 316.402925][ C0] ? smp_call_function_many_cond+0xd9d/0x1510 [ 316.402941][ C0] ? smp_call_function_many_cond+0xd79/0x1510 [ 316.402959][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 316.402979][ C0] ? free_pgd_range+0x2c6/0x12e0 [ 316.402993][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 316.403013][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 316.403030][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 316.403047][ C0] flush_tlb_mm_range+0x4a0/0x1790 [ 316.403064][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 316.403077][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 316.403091][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 316.403111][ C0] tlb_finish_mmu+0x3c9/0x7c0 [ 316.403130][ C0] exit_mmap+0x403/0xb90 [ 316.403147][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 316.403173][ C0] __mmput+0x12a/0x410 [ 316.403190][ C0] mmput+0x62/0x70 [ 316.403205][ C0] do_exit+0x7c4/0x2bd0 [ 316.403226][ C0] ? __pfx_do_exit+0x10/0x10 [ 316.403244][ C0] ? cgroup_update_frozen_flag+0x107/0x210 [ 316.403258][ C0] ? find_held_lock+0x2b/0x80 [ 316.403276][ C0] do_group_exit+0xd3/0x2a0 [ 316.403295][ C0] get_signal+0x2673/0x26d0 [ 316.403313][ C0] ? hrtimer_nanosleep+0x187/0x380 [ 316.403331][ C0] ? __pfx_get_signal+0x10/0x10 [ 316.403347][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 316.403364][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 316.403386][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 316.403403][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 316.403422][ C0] exit_to_user_mode_loop+0x84/0x110 [ 316.403437][ C0] do_syscall_64+0x3f6/0x4c0 [ 316.403452][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.403466][ C0] RIP: 0033:0x7f9b3e9c1265 [ 316.403476][ C0] Code: Unable to access opcode bytes at 0x7f9b3e9c123b. [ 316.403482][ C0] RSP: 002b:00007f9b3c7b3f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 316.403494][ C0] RAX: fffffffffffffdfc RBX: 00007f9b3ebb6160 RCX: 00007f9b3e9c1265 [ 316.403503][ C0] RDX: 00007f9b3c7b3fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.403511][ C0] RBP: 00007f9b3ea10d69 R08: 0000000000000000 R09: 0000000000000000 [ 316.403519][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 316.403527][ C0] R13: 0000000000000000 R14: 00007f9b3ebb6160 R15: 00007ffc73e68f68 [ 316.403540][ C0] [ 318.017617][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.259442][ T1298] ieee802154 phy1 wpan1: encryption failed: -22