last executing test programs: 7.698083285s ago: executing program 4 (id=307): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{@fixed}]}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)=@multiplanar_overlay={0x7, 0x1, 0x4, 0x4, 0x1, {0x77359400}, {0x4, 0x1, 0x65, 0x0, 0x3, 0x5, "9d874313"}, 0x9, 0x3, {0x0}, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400409c}, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000002000014001280090001007663616e000000000400028008000a00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 6.881488726s ago: executing program 1 (id=313): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x60000000) 6.74817492s ago: executing program 0 (id=314): openat$comedi(0xffffffffffffff9c, 0x0, 0x8ad01, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) iopl(0x3) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r2, 0x0, 0x4, 0x0) epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x3}, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x1, 'client1\x00', 0x0, "81cbf3dc07ade253", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x5, 0x800}) tkill(0x0, 0x7) 6.204403759s ago: executing program 4 (id=316): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) writev(r1, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), 0x4000) 6.015830593s ago: executing program 1 (id=318): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120110010000030000001512000000ee00000009090400040103000000092104f7030122070009768b05810320785a1945b65c56250000000500000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.current\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000680), &(0x7f00000006c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc, 0x100000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SIOCSIFHWADDR(r7, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00 \x00'}) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000600)=0x9, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x2, 0x0, 0x200000}, 0x0, [0x9, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x661, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x703a, 0x6, 0xae4f, 0x8000000, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0xd5e4, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffb, 0x4, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x681f0, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x6, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5, 0x8, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x7, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x71979499, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x7fffffff]}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f00000000c0)={0x10}) 5.951164213s ago: executing program 4 (id=319): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r1, &(0x7f0000000200)=""/230, 0xe6) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) write$dsp(r2, &(0x7f0000000340)="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", 0xf00) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x8000007ff, 0x913d, 0x0, 0x8, 0xf42, 0xfffffffffffffff7, 0x5}, {0x7, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@local, 0x4d6, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x3, 0x1}}, 0xe8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1080, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x33, 0x4, 0x1, 0x5, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x64}}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 5.776019656s ago: executing program 0 (id=321): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000006000000040000000000000e04000000000000000000000002000010040000000b0004000100000004fd5b00050000000000000000000004000000000400000000000008030000000000000061"], 0x0, 0x62}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f0000000640)) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x5, 0x4}}, 0x10) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000370400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="93be24871739ee6dc943106ba4caf9af66"], 0x28}}, 0x4) mmap(&(0x7f00001fd000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r3, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x7) 5.636074586s ago: executing program 0 (id=323): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000300)={0x28, 0x2, r1, r1, 0xffffffffffffff20, 0x8, 0x31}) 5.388267207s ago: executing program 1 (id=324): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)={0x40, 0x4, 0x5, {0x5, 0xb, "d90f79"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) 4.802653886s ago: executing program 1 (id=325): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r1 = gettid() r2 = syz_open_dev$media(0x0, 0x1004007, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000400)="b3c64e75db7b10772bb4accc5d9b4ec3c8be04bfb7d2806be88f28ccb8f628692a4981b0e1b8281ef6fdfc00ce42abe2785ce60d682aaf65d01bb9c496e6bd5ca2427b077d7752d339af087e304d71a54c889a74978de949fc", 0x59}, {&(0x7f0000001680)="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", 0xded}, {&(0x7f0000000240)='C', 0x1}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000840)="3da2436ce86d81d261cf9f0756e51f2e6bbd9b3e855bc2fcb5778d6e4751902fa5959aa7d0d58a2281d42972ebe52a3ecd49430e20e575fb30f8d499df8bffa2062f6685abe2897f5f3b93b5b3a0947da325d3d6583f010cbda5d13ad6f7a2cd504fc5cceb6aab6324c326a11e2eaeeb57d2ad935f1fd57f13e516153e0861a9f520f21b3705d37a88d17429796df68ad532a84f5fe9c9bdc57841ec5b1a0f5cd989a8ac22c7e8a41e7a36133d10390140205b844b2853", 0xb7}], 0x6, 0x0, 0x0, 0x24000000}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)}, {&(0x7f0000000c00)}], 0x3, &(0x7f0000000e80)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r2, r3, r4, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r3, r3, r2, r2, r3, r2]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r2, r4]}}, @rights={{0x34, 0x1, 0x1, [r2, r2, r4, r3, r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0xd0, 0x40}}, {{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001040)}, {&(0x7f0000002680)}, {&(0x7f0000001140)}], 0x3, &(0x7f0000001200)=[@rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)="7568410f905990439f8d2f1e1c1cb826859e11d5f36f8d64fe7b1eb398c3d5a8cb26ec3ca0b12af870ffe620f8b17f6d3dcd85fb0626f9b8c05e141be88cf8706c0753142a0e06bbe08f888e6be69e919637e954fda6190320b3dd898b988c5e503e295cfc2370732b81bd02cef135c6dd44af4f", 0x74}], 0x1, &(0x7f00000014c0), 0x0, 0x44}}], 0x4, 0x4000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x10000) capset(0x0, 0x0) write$binfmt_elf32(r5, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) write$dsp(r5, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "1d8f2a00020000b3", "0b3ea90ac47b25d7624cd362581725c7", "0100", "00000000000200"}, 0x28) read(r6, &(0x7f0000000640)=""/30, 0x1e) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000300)=""/244, 0xf4}], 0x1) shutdown(r6, 0x0) 4.797483177s ago: executing program 3 (id=326): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x42a303, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e0938da6a52a0fa34790364fc3c297d1ffa8a4e9346188a57108af9c40744957cd4b30b2f8cb5f7551631514aa3f654408b3d7491dd311dca3f1efe72cbcd7403d0a8246c662aa6cfbf5dd98acd3a47763bd9360873aa6607da1cd7a6edf80868cd0b760b0f1da595c8a610208f0eb1affe767c501b638f3f196a928af"], 0x58}}, 0x40) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48020000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9], 0x248}}, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r10, 0x80845663, &(0x7f00000002c0)) r11 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, &(0x7f0000000940)) socket$kcm(0x2, 0x5, 0x84) membarrier(0x10, 0x0) socket$alg(0x26, 0x5, 0x0) 4.745153082s ago: executing program 0 (id=327): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare(0x6a040000) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) lsm_list_modules(0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) fsopen(0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x40, 0x400, 0x1384, 0x401, 0x9, 0x10, 0x1, {0x3, 0x20789, 0x1}, {0x8, 0x7f1b04c}, {0x20000, 0x7, 0x1}, {0x0, 0x3}, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1caa, 0xffb, 0x612e, 0x8, 0x80, 0x0, 0x9, 0x0, 0x200, 0x3, 0x6}) 4.360081668s ago: executing program 4 (id=328): r0 = socket$kcm(0x11, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x890d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) gettid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x40000655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x40048080) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2020) 3.051889719s ago: executing program 3 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000002140)={{}, 0x7, 0xff, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {}, {0x7, 0x50}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2.965975968s ago: executing program 3 (id=330): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES8=r0, @ANYBLOB="010027bd70f3fcdb1701bf4ce9fb7afdfeb44f5881c44e250300000008000100", @ANYRES32=r5, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x7f4a6159e350f1b) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "059c3872ead4e092c146f99405fb9d827cb9ec3726b40e84f6cf31d2aac94c9c5aca1f09a52a70ee3ce1bdef"}, 0xfe48) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f00000004c0)={0x7ff, 0x7c4eca9c}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18400000060000000000000000000000c211f8fffeffffff18310000020000000000000100000000"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xd, &(0x7f0000000340)=""/13, 0x41000, 0x10, '\x00', 0x0, @fallback=0x11, r6, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=[{0x7, 0x102, 0x11, 0x2f89268d57d19b90}, {0x0, 0x5, 0x3, 0x3}], 0x10, 0x9}, 0x94) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) 2.833284143s ago: executing program 0 (id=331): openat$comedi(0xffffffffffffff9c, 0x0, 0x8ad01, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) iopl(0x3) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r2, 0x0, 0x4, 0x0) epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x3}, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x1, 'client1\x00', 0x0, "81cbf3dc07ade253", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x5, 0x800}) tkill(0x0, 0x7) 2.202174233s ago: executing program 2 (id=333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x820, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x804, 0x1, 0x0, 0x1, [@generic="be68527c61dcca4e1c7d4e24b7bba535775ff12534806308c48f3e90fd9ce0f91ac6f57fa1d2b52dc8041a60c5a27a57c50f3506756454fc2a541aa7c097a0db1f042d7d7720151258332b5c8572a6174d6d2883a3c38e0af483f637981f2b8a6439a5147c0aba7b7b5a071e9aead8d3616e4657d217f6b88af5b20d66eb37906719c866d6049e61b90309b3bd9ba9f336e14ecfc638919cc1e0ce7017b4ca9c444c7c84b7cad29f4baa362d80cab27a496ed44c782bd6d2e0bfc194ad2af7aa27379ee8029981fa735d560194c7d94ca7bd63b4a8791d032708c6ca28ef757cd8091ef3e0b8897fafad7e724086ef610c2f80d1129736e5d1ef5f77969caeec8ade3b5c84d6345e2e62aef654e1a04c40612efd6f9a8a609bdfb509edc659ff3d84cf54690ca803c4f697ce89e96a3b1cae9ba6a5a82f78b5d55fc7a415f6558acc24c556af81a516916d0c888f45f382bffd63f44b6887d112c7f7a992023713f786cfd577da27df832af9df828b706c304c34b3ab5360e6c821ab975382c12adbbcccbd5e798c0a8ea4a5b2f64c1560a34c09224dab30fc9f75cbfc72e2de343c23f7250d7568f4680d48a81d9c29e85bb3b3359165b114f3b2b1c1270281ef2f4c88669d9166808ef7f8407a9f406bf33d84c986cd70a00c47e00299225e2260ed0a68865ba054d1d2fb8c4372aa89d27efc864dceb802ac41807ff09df236fbdec9bb0b21d1c4611671fe823f650807bd837ffe8476fe7db9114113e9514a75d64c2c81e5a8a332097a550a59e2be3d49fb7f920e15746358326db5bac20c486c6ee39d5615a01002892067d84a39f483ad26665502ea26679379e019045cd43b5e3fbf99850420377eb34fc87997051cba5039809fb71d142796c07ca53761b0ee0768d81b650028e74d11ab48d160e13131115aa4e02535653c53d16c198e21c42a3760046328fcfb3ea289304b5cbfc6bab4176aebeaa0a668d3a701628e6f2fbdf00de00b1b114d9b9afa64ef35871e9f5d551c5b329c5de3770a065a345a148868e88774a9c0057bab8c58407030b443fa231d812242e9b056dfb7f7055635c658ed1a6238dac24a316ae6610a4856f492dd019186f6c49cf52c679ca7efbf1d01f9f8d3547f4ed91a60910eae2a7fc64a840db069fd3169cb8731ebdd3029b40912bdc3f3d698b95d17c6f28c197f0519832804ff889925cf536328755008835ac48365981cbc751a2c5a658ad1aaf9c9203564ba2a24440d4e05fe665986c6f83c45954eec9d1100fb9953d308559636e18ef0c5c8ccfc43663614f52638e0b2b770364e32bef48146532b17f1160f92bf32172b1fa58e40d99d27d12c953e95dcf6ed16e47f28f3431332afc222da1150f4a92dc6a8a11e5b253fac02447d19e960aaffd74e532f8d6aaaa63e7d613498e527e975bc775e8ac195636755c1b86218868f6bea064c80c713aab98cc72c09020d15e99be94db35916ad93aff386f85e90887e363e3b36985bd92cb946eb7199041b3481e8fb7983f1fcb8920522ead8de83658974dc75100469d9b67782c2146a04735588574f4dc2d056d58a26eb488a1a71861b65345c6be6f9d00708d1c2011faa5ed05e6b76cf3cd7fe2bdf72c3676d34802f9def0d424762d819d50eb1a9ed815a52ccc307e1c041ebf3ed4b819ff34fe933d58d9f2a98a34d9e36b4a2969ee1ab9e0e86a227667631d5a917c3524ea9d3f556ba70a2448c7dcebf359314023e7a3fa4997b75e39eca8bb32cb6f4d11513b94d662c8621dd3356d7bec985e06514a1259ca6f9cb6b68b5c139fc0d23e4b35f018ed51d552a220ad8224e022635d4bdae4ee25582da777cd50d151d1e628536e4b1a38f9ecc330c49a253902de662ae494290ccb5edb4212f72e543c520b02d7454baf322b0fc8d293f6cfb206c15e054946c165b9f9f0f659c244d44c6be87f33db0580a264a6768287cce80df0d7c48cdd0045ba617d10000a517806d847831ef7a25f9bb9d48b0ec232d659e9e4bb6cfdbea737116e22c93d1a47f863bb76a92b594fb3f470576165081278d75b88739b6157aa127a863ba1a3ab35a56c6cb68eb2cf91170fbf5de7b7d7d72eee0435cb9d7fbca52750a04cae2019f4f7b3b3eed4e7d3835006c411d7cbc9e115620837a22ad59bee50d48f418b89e5996e878c7beeae17afb74f350272dc973f4399eb6a74aea69b7e6cf1065e7a65ec701c2819218a5b588cdc9b643e3c604a3910af04f91e2494cf5a94c53687b3a923bb4ec370a324fe9b91599cfb982980eb735ea1e5b7871b4ef41c6fb670a7362601ca717cfe766cc1967aa3a36e0b00b3a4c545eebb91ad15fc6b9044cb71e49b3e028aa3014ed02439a05c04c02557ff2b4e177de8cc1bf3388cba693ef137ac1c6d444c329e899a441fdd518d50e9206b75585ead1ca6ef0bea06bf2aea8daece4a49c0e4aa82f7926bc39e5112ab53242372703f73d4f6db946e9b2fea18cd0509e0139d4e32883bcadb8645bf21b3e4320ad90682c234ceee011cca5d1e6e4c0ad13c5faf8f59aafdf92fa643d681c8aa02e341cb7241238469ed001bec9afaa40fb33c7b928ed7ae312a362e503617c376430e23168b584bd8858f7805109be91122dc439200bbf2f2db87c1d5f2ee2adb8a273e71022b522bdb46de1999d8d533f497e824ad73e44ec303bc822b143712af247633cd92e84c89dbb1795bddddbf22a1ec66473b357e6ebaf65678c43addd98e5351c7429ddcae1fd2fcad4ada70327da19eaff9f84ec13a9cf680f2edc2fe463394d36c98e429cd65d01d0b70f5fac353933966c8c214a002bf1a7bde8ff43251ca9301e3d3da7698a5ba4ac6731e2a13fed3c91e6ab875049585bab3b"]}, @nested={0x4, 0x4}]}, 0x820}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 1) 2.197015382s ago: executing program 4 (id=334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) umount2(0x0, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) syz_open_dev$loop(0x0, 0x7ff, 0x683) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.623646324s ago: executing program 2 (id=335): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r0, 0x2b, 0x0, 0x6ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x71) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='trylock none'], 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001040)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000001040)=0x2) syz_open_dev$MSR(&(0x7f00000010c0), 0x8001, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000010c0), 0x8001, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000000c00000000000080000000000", @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYRES64=r5, @ANYRES64=r6/1000+60000, @ANYBLOB="000000600100000000000080040200008117061de741aae9"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000000c00000000000080000000000", @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYRES64=r5, @ANYRES64=r6/1000+60000, @ANYBLOB="000000600100000000000080040200008117061de741aae9"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x50) read$msr(r2, &(0x7f0000004300)=""/102400, 0x19000) (async) read$msr(r2, &(0x7f0000004300)=""/102400, 0x19000) read$msr(0xffffffffffffffff, 0x0, 0x0) (async) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x20008801) socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x4503, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x10, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x48, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9917, 0x4, 0x0, 0x9, 0x1f, 0xb, 0x3}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xad, 0x4, 0x80000001, 0xe, 0x10, 0x1c, 0x5}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfffffff2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x6, 0x49, 0x16, 0xc, 0x1a, 0x6}}]}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x0, 0xfff1}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0xc, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x0, 0xfff1}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0xc, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x97ff, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.615644383s ago: executing program 1 (id=336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r4, &(0x7f0000000000)="1c0000941a005f0214f9f407000904001f0000000000000200020000", 0x1c) 1.466016247s ago: executing program 4 (id=337): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES8=r0, @ANYBLOB="010027bd70f3fcdb1701bf4ce9fb7afdfeb44f5881c44e250300000008000100", @ANYRES16=0x0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x7f4a6159e350f1b) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f00000004c0)={0x7ff, 0x7c4eca9c}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="184000debc8200060000000000000000000000c211f8fffe0000000000000100008a97f66a4f6eb4000006702f95e893623e1235ff"], &(0x7f0000000300)='GPL\x00', 0x8, 0x15, &(0x7f00000002c0)=""/21, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000580)=[r7, r5, 0x1, r5, r5, r5], 0x0, 0x10, 0xa}, 0x94) memfd_create(0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) 1.206546056s ago: executing program 0 (id=338): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @loopback}, 0x80, 0x0}, 0x0) fanotify_init(0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x401, 0x800600) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x1000, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020004003b3acc9f02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x1, 0x9]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0xf010000, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) 980.049447ms ago: executing program 3 (id=339): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x2, 'rr\x00', 0x0, 0xfffffffc, 0x67}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x3, 0x1}}, 0x30) 884.068255ms ago: executing program 2 (id=340): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') lseek(r0, 0x1000000, 0x2000000) 797.737978ms ago: executing program 2 (id=341): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffbfffff0728cb347af3e85f02ed38f183ca44bc0001000406f0027f0006a7000d000d000000000073f68ac399765b7ab289a207254ebf1c309201071fe76124aa88d7e0527bffcf0e23944407f6c3eaa2de0231151de8118016f41e13b761c61fe46fce"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce07", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async, rerun: 32) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b69fca42b9dd566b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async, rerun: 32) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, &(0x7f0000000440)) (rerun: 32) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000340), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000480)="a2cd1767ca88bc47d1b2c1ba312058c6326f0dbcea59c6441e9920e31887e19915e2f5a9c65abb2ab4654ec8bdbf8cca5bfb9d3cc4579b35f1f8a90c6c8d7a1e28e4bcfd68c636c8dbece41534533071c39425edc0ac1ef690f147050385b0e1a014a56764bbe440c2dce950681d5b2268815b4f567ef639db116d8f5b91780cf335a99d29c4454e3bc0ec1d996b36c759115b65bf4c5bacacc3ceac59ede5100b3392e37d79e2760a525dcf1ee3f432ff99418992", 0xfffffffffffffe54, r2) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r3, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (rerun: 64) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) read$msr(r6, &(0x7f0000000640)=""/165, 0xa5) (async, rerun: 32) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) mq_timedsend(r6, &(0x7f0000000880)="9ea958e8548db2ec715b654a4ec5ed3d2ab2cab9cfb2fefbf54a209372185e3b93028ac0d2001edb2749e071bd7e9d10596ec16d26329d5dba76cb551903bdbb11a1ada122681e89f4fe7c307fc000abbeab4cb19c661bf5c2004d404192090eeda621d9645c3a89dd425d9bd92142241fbf4d28996a5fe76642d05ae3fc365a42f9e3906e62de5120850c585dadf9bc210159635e90183957b03a48ef8a3a62a0b47ce02569c27d8a1b24ec0000000000000000635f047c105fb5e6fb3fa18416c3f3109a93383acc5b6fc48b51a5d6e40f1175b74e2966bf1de6fad418000000000000000000", 0xfcc4, 0x4, 0x0) (rerun: 64) 715.318512ms ago: executing program 1 (id=342): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x2c, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r2, r2, 0x0, 0x200000) ioctl$sock_proto_private(r0, 0x89e1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendto$packet(r5, &(0x7f0000000100)="0120336e1559dd7bcd21d29e4120a46b", 0x10, 0xd1, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x1, 0x6}, 0x14) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16=r4], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x208081, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRES8=r6, @ANYRES32=r0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r8, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) 571.970485ms ago: executing program 3 (id=343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r3 = socket(0x11, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104"], 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r2], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="fbffff064d56550000eea145880bed073f2c85bc303c05560ffb9df05e96671d38cf78dc72df5346"]) 567.088866ms ago: executing program 2 (id=344): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x2c, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r2, r2, 0x0, 0x200000) ioctl$sock_proto_private(r0, 0x89e1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendto$packet(r5, &(0x7f0000000100)="0120336e1559dd7bcd21d29e4120a46b", 0x10, 0xd1, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x1, 0x6}, 0x14) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16=r4], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x208081, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRES8=r6, @ANYRES32=r0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r9, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000004300)={0x50, 0x0, r8, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) 215.974651ms ago: executing program 2 (id=345): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, &(0x7f0000000200)={0x20, 0x23, 0x4c, {0x4c, 0x11, "a4f8042b80584bf6c0e7e70d17f306a3b52e7aabc3c8536e8ee34ea53ff623c9440ac609525f1d2ca12011b6f7bf44905bcec8d527542218eb2230859310d823d58a7ce04f2b0deff24a"}}, &(0x7f0000000280)={0x0, 0x3, 0xf6, @string={0xf6, 0x3, "860641f1631a0dffe36229ac243d6989dbd836c31729702fd8a80ac458ab8a4c2b02ad601d70f95b624de980ac374edc420bd4232bd392ac4c87bc65c02b8b231d6a2f783062ca71eb13ff20ba3417058aa501f9460ce72cc8013cbd898bd3d8b78fb16ed64e438fde5fa7912f1649ea983af64aeb74d8de5117b4fa27a4c217e94d1a2a4efbf8ba617b0403424dd47d2df9dd76d13162d1b900ce8b5a04127f53af1fd40fbabeca90cdd87d451a026a44f298c8ab3920ed128390064bfd59bbcefcdc5cd2053ccfdb4812e79c5429d52d86c5f7e2c283a2c262691fe0a00c48ead875fe064c928d4d0a4ae355ff6eba90ae56e5"}}, &(0x7f0000000380)={0x0, 0x22, 0x8, {[@local, @main=@item_4={0x3, 0x0, 0xa, "fcbf2d8d"}, @local=@item_012={0x1, 0x2, 0x3, "fa"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xf9, 0x1, {0x22, 0xf25}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x7, 0xc3, "bf5d117e4e6ad2d785c2b05387f0b020286769619ef2f1b769a9ab33fd5f09ebb1b307bfa46a52be48d78dc023e81cca05e7cc5a6686682a61832bd972daa28581e5b05fa33c48f5a2069bf55cfdce53b4d85cb8d2eadd31590603ac8a2b8838fd496f11f1c0e9be4eb6825d02829d0c9ade412549ea027eec1b60e37405361346b3378da5ddd534a370e51a546b4829471322ea4df994ccc58b6bc6b337dedd1bcd9676b5972a2887b4ff58ce694145afc70f08711eaea5f81c6faf642ea3e0214983"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000900)=ANY=[@ANYBLOB="2001d0000000e1a7fb5db6a3d332e6d80b90b9ff7c97e68e84e3a63ba4eead387a1768376fdc4e375cbd789c71bc3ab4619e242ca722a8a3f86ca91d46af24a1851ee4e3e7b13496398d025c18d389765d7b2d0078937651903c8826bb3186ba04a1fa4eccc106a30793fee28641169bfc1edfe22f58fb330f912d830c0e7804758802a2f2df0cc1f125c9a1da55773767d1f17e886a080459a742f2859226caf45a01686014e0fc04bf097882cd88e7a7839752a7c56eed4b26bf0877ee399b03b7a4ea94f7c76b04846763babad0b38f619215bbeb1d39c81f83"], &(0x7f0000000700)={0x20, 0x3, 0x1, 0x2d}}) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa01000000"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2234a18ed5b7fb17}, 0x40811) 0s ago: executing program 3 (id=346): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r4, 0x0, 0x0, 0x8040, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) (fail_nth: 3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts. [ 65.465554][ T30] audit: type=1400 audit(1756453206.287:62): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.470048][ T5831] cgroup: Unknown subsys name 'net' [ 65.488338][ T30] audit: type=1400 audit(1756453206.287:63): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.518562][ T30] audit: type=1400 audit(1756453206.347:64): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.664711][ T5831] cgroup: Unknown subsys name 'cpuset' [ 65.673056][ T5831] cgroup: Unknown subsys name 'rlimit' [ 65.791070][ T30] audit: type=1400 audit(1756453206.607:65): avc: denied { setattr } for pid=5831 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.814646][ T30] audit: type=1400 audit(1756453206.617:66): avc: denied { create } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.861507][ T30] audit: type=1400 audit(1756453206.617:67): avc: denied { write } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.886306][ T30] audit: type=1400 audit(1756453206.617:68): avc: denied { read } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.906843][ T30] audit: type=1400 audit(1756453206.627:69): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.932472][ T30] audit: type=1400 audit(1756453206.627:70): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.944106][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.956083][ T30] audit: type=1400 audit(1756453206.667:71): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 66.925697][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.205133][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.221144][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.228918][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.241603][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.251229][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.355098][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.369850][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.381110][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.391823][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.401010][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.475848][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.483819][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.491536][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.499436][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.507184][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.527519][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.535913][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.561649][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.581528][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.599589][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.607781][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.631254][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.638963][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.648060][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.655843][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.763174][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 69.908170][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 70.010694][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.017949][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.026203][ T5841] bridge_slave_0: entered allmulticast mode [ 70.033064][ T5841] bridge_slave_0: entered promiscuous mode [ 70.044735][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.051895][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.059027][ T5841] bridge_slave_1: entered allmulticast mode [ 70.066376][ T5841] bridge_slave_1: entered promiscuous mode [ 70.129886][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.158947][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.166945][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.174395][ T5847] bridge_slave_0: entered allmulticast mode [ 70.181561][ T5847] bridge_slave_0: entered promiscuous mode [ 70.194545][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.215500][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.222854][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.229995][ T5847] bridge_slave_1: entered allmulticast mode [ 70.237656][ T5847] bridge_slave_1: entered promiscuous mode [ 70.266901][ T5841] team0: Port device team_slave_0 added [ 70.300181][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.312043][ T5841] team0: Port device team_slave_1 added [ 70.347333][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.378978][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.386682][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.413050][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.429059][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.436025][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.461977][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.603053][ T5847] team0: Port device team_slave_0 added [ 70.638548][ T5847] team0: Port device team_slave_1 added [ 70.656911][ T5841] hsr_slave_0: entered promiscuous mode [ 70.664313][ T5841] hsr_slave_1: entered promiscuous mode [ 70.697955][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.704968][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.731187][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.742442][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 70.764564][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 70.775094][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.782256][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.808423][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.824657][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 71.019580][ T5847] hsr_slave_0: entered promiscuous mode [ 71.026361][ T5847] hsr_slave_1: entered promiscuous mode [ 71.032666][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 71.038432][ T5847] Cannot create hsr debugfs directory [ 71.089342][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.096629][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.103868][ T5852] bridge_slave_0: entered allmulticast mode [ 71.110673][ T5852] bridge_slave_0: entered promiscuous mode [ 71.127031][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.134434][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.141642][ T5850] bridge_slave_0: entered allmulticast mode [ 71.148394][ T5850] bridge_slave_0: entered promiscuous mode [ 71.167322][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.174684][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.176302][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.182227][ T5852] bridge_slave_1: entered allmulticast mode [ 71.188137][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.195476][ T5852] bridge_slave_1: entered promiscuous mode [ 71.215951][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.223174][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.230294][ T5850] bridge_slave_1: entered allmulticast mode [ 71.237827][ T5850] bridge_slave_1: entered promiscuous mode [ 71.274060][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.281372][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.288446][ T5849] bridge_slave_0: entered allmulticast mode [ 71.296021][ T5849] bridge_slave_0: entered promiscuous mode [ 71.331660][ T5853] Bluetooth: hci0: command tx timeout [ 71.352861][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.359987][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.367769][ T5849] bridge_slave_1: entered allmulticast mode [ 71.374959][ T5849] bridge_slave_1: entered promiscuous mode [ 71.394377][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.416200][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.429099][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.450392][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.480228][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.491373][ T5853] Bluetooth: hci1: command tx timeout [ 71.524322][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.589210][ T5852] team0: Port device team_slave_0 added [ 71.596599][ T5850] team0: Port device team_slave_0 added [ 71.605069][ T5850] team0: Port device team_slave_1 added [ 71.622844][ T5849] team0: Port device team_slave_0 added [ 71.630115][ T5852] team0: Port device team_slave_1 added [ 71.651485][ T5168] Bluetooth: hci2: command tx timeout [ 71.657175][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.659142][ T5853] Bluetooth: hci3: command tx timeout [ 71.682275][ T5849] team0: Port device team_slave_1 added [ 71.706904][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.732947][ T5853] Bluetooth: hci4: command tx timeout [ 71.748306][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.756316][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.784295][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.795704][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.822558][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.829505][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.855595][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.867029][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.874465][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.900450][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.916513][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.933960][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.942731][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.969016][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.980626][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.987659][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.013679][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.046822][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.054088][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.080819][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.135591][ T5850] hsr_slave_0: entered promiscuous mode [ 72.142620][ T5850] hsr_slave_1: entered promiscuous mode [ 72.148790][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 72.154621][ T5850] Cannot create hsr debugfs directory [ 72.188959][ T5852] hsr_slave_0: entered promiscuous mode [ 72.195383][ T5852] hsr_slave_1: entered promiscuous mode [ 72.201797][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 72.207529][ T5852] Cannot create hsr debugfs directory [ 72.240296][ T5849] hsr_slave_0: entered promiscuous mode [ 72.247079][ T5849] hsr_slave_1: entered promiscuous mode [ 72.253743][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 72.259475][ T5849] Cannot create hsr debugfs directory [ 72.318036][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.355040][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.380004][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.409358][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.687149][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.697706][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.707632][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.719213][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.759133][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.821382][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.835542][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.845396][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.857689][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.887693][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.907597][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.921035][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.928278][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.967429][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.974588][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.030463][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.043728][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.060309][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.078908][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.089718][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.114701][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.121805][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.149265][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.156353][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.215447][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.267436][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.292554][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.307344][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.314487][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.333248][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.340351][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.362332][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.405096][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.412244][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.419766][ T5853] Bluetooth: hci0: command tx timeout [ 73.436657][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 73.436671][ T30] audit: type=1400 audit(1756453214.257:86): avc: denied { sys_module } for pid=5847 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.440285][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.470990][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.571633][ T5853] Bluetooth: hci1: command tx timeout [ 73.582827][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.710484][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.731682][ T5168] Bluetooth: hci2: command tx timeout [ 73.737142][ T5853] Bluetooth: hci3: command tx timeout [ 73.753049][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.760174][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.777469][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.797691][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.804809][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.811122][ T5853] Bluetooth: hci4: command tx timeout [ 73.920595][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.979615][ T5841] veth0_vlan: entered promiscuous mode [ 74.024354][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.038945][ T5841] veth1_vlan: entered promiscuous mode [ 74.113055][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.130258][ T5852] veth0_vlan: entered promiscuous mode [ 74.180551][ T5841] veth0_macvtap: entered promiscuous mode [ 74.195137][ T5847] veth0_vlan: entered promiscuous mode [ 74.205927][ T5852] veth1_vlan: entered promiscuous mode [ 74.218036][ T5841] veth1_macvtap: entered promiscuous mode [ 74.260225][ T5847] veth1_vlan: entered promiscuous mode [ 74.296595][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.323994][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.355536][ T5850] veth0_vlan: entered promiscuous mode [ 74.367373][ T5852] veth0_macvtap: entered promiscuous mode [ 74.379811][ T1164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.395751][ T5847] veth0_macvtap: entered promiscuous mode [ 74.406890][ T5847] veth1_macvtap: entered promiscuous mode [ 74.417372][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.425291][ T1164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.434569][ T1164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.466525][ T5852] veth1_macvtap: entered promiscuous mode [ 74.477331][ T1164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489851][ T5850] veth1_vlan: entered promiscuous mode [ 74.527957][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.566483][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.619059][ T5850] veth0_macvtap: entered promiscuous mode [ 74.648606][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.659032][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.673634][ T5850] veth1_macvtap: entered promiscuous mode [ 74.687684][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.699191][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.708575][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.709114][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.729044][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.752566][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.777986][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.814832][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.825270][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.859119][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.882716][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.892214][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.928910][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.939172][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.966884][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.987111][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.995477][ T30] audit: type=1400 audit(1756453215.807:87): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.LXdEZs/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.027688][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.028539][ T30] audit: type=1400 audit(1756453215.807:88): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.040586][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.059822][ T30] audit: type=1400 audit(1756453215.807:89): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.LXdEZs/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.094243][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.105390][ T30] audit: type=1400 audit(1756453215.827:90): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.127522][ T30] audit: type=1400 audit(1756453215.827:91): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.LXdEZs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.159690][ T30] audit: type=1400 audit(1756453215.827:92): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.LXdEZs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.202942][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.205157][ T30] audit: type=1400 audit(1756453215.847:93): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.237711][ T30] audit: type=1400 audit(1756453215.917:94): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.248019][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.266851][ T30] audit: type=1400 audit(1756453215.917:95): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="gadgetfs" ino=7757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.310076][ T5849] veth0_vlan: entered promiscuous mode [ 75.324317][ T5849] veth1_vlan: entered promiscuous mode [ 75.363854][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.383957][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.414647][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.437405][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.465256][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.475089][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.493239][ T5853] Bluetooth: hci0: command tx timeout [ 75.499094][ T5849] veth0_macvtap: entered promiscuous mode [ 75.499852][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.525382][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.550020][ T5849] veth1_macvtap: entered promiscuous mode [ 75.620587][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.652388][ T5853] Bluetooth: hci1: command tx timeout [ 75.654838][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.714654][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.731211][ T1562] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.779104][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.807858][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.812055][ T5853] Bluetooth: hci3: command tx timeout [ 75.822081][ T5168] Bluetooth: hci2: command tx timeout [ 75.825321][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.893334][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.894308][ T5853] Bluetooth: hci4: command tx timeout [ 75.931745][ T1562] usb 2-1: Using ep0 maxpacket: 16 [ 75.957497][ T1562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.036265][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.059191][ T1562] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 76.068625][ T1562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.093786][ T1562] usb 2-1: config 0 descriptor?? [ 76.328584][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.383375][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.468747][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.476997][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.577562][ T1562] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 76.839038][ T5979] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 76.881563][ T1562] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.054245][ T1562] usb 4-1: Using ep0 maxpacket: 32 [ 77.078873][ T1562] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 77.199975][ T1562] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 77.396925][ T1562] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 77.422266][ T1562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.444230][ T1562] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.465912][ T1562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.494348][ T1562] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 77.511417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.539153][ T1562] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.570074][ T5967] usb 2-1: USB disconnect, device number 2 [ 77.577829][ T5853] Bluetooth: hci0: command tx timeout [ 77.585649][ T1562] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 77.688804][ T1562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.735998][ T5853] Bluetooth: hci1: command tx timeout [ 77.739687][ T1562] usb 4-1: config 0 descriptor?? [ 77.861475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 77.871884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 77.940954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 77.965430][ T5853] Bluetooth: hci3: command tx timeout [ 77.966168][ T5168] Bluetooth: hci2: command tx timeout [ 77.991242][ T5168] Bluetooth: hci4: command tx timeout [ 78.021490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.066226][ T1562] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 78.087880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.451175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.496717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.561489][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 78.561524][ T30] audit: type=1400 audit(1756453219.297:136): avc: denied { write } for pid=5975 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.803856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.008623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.706423][ T5967] usb 4-1: USB disconnect, device number 2 [ 79.718554][ T5967] usblp0: removed [ 79.889007][ T30] audit: type=1400 audit(1756453219.307:137): avc: denied { ioctl } for pid=5975 comm="syz.3.7" path="socket:[8430]" dev="sockfs" ino=8430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.900842][ T6004] tipc: Failed to remove unknown binding: 66,1,1/0:2770480904/2770480906 [ 79.950471][ T30] audit: type=1400 audit(1756453220.097:138): avc: denied { setopt } for pid=5992 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.955664][ T6004] tipc: Failed to remove unknown binding: 66,1,1/0:2770480904/2770480906 [ 80.035865][ T30] audit: type=1400 audit(1756453220.677:139): avc: denied { create } for pid=6002 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.083628][ T30] audit: type=1400 audit(1756453220.717:140): avc: denied { bind } for pid=6002 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.398953][ T30] audit: type=1400 audit(1756453220.717:141): avc: denied { setopt } for pid=6002 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.510490][ T30] audit: type=1400 audit(1756453220.947:142): avc: denied { map } for pid=5985 comm="syz.2.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.546422][ T5909] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.601788][ T30] audit: type=1400 audit(1756453220.947:143): avc: denied { read write } for pid=5985 comm="syz.2.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.744581][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 80.776737][ T30] audit: type=1400 audit(1756453220.947:144): avc: denied { execute } for pid=5985 comm="syz.2.8" path="/1/cpu.stat" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.780674][ T6020] netlink: 'syz.4.13': attribute type 13 has an invalid length. [ 80.816065][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 80.887028][ T5909] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 80.901700][ T30] audit: type=1400 audit(1756453221.107:145): avc: denied { accept } for pid=6010 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.916394][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.972187][ T5909] usb 2-1: Product: syz [ 80.976364][ T5909] usb 2-1: Manufacturer: syz [ 81.033496][ T5909] usb 2-1: SerialNumber: syz [ 81.059648][ T5909] usb 2-1: config 0 descriptor?? [ 81.069192][ T5909] hub 2-1:0.0: bad descriptor, ignoring hub [ 81.095431][ T5909] hub 2-1:0.0: probe with driver hub failed with error -5 [ 81.167836][ T5909] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.426264][ T5901] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.435381][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.521685][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.531301][ T6033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 81.625662][ T5901] usb 5-1: config 0 has no interfaces? [ 81.636723][ T5901] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 81.675659][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.696456][ T6029] warning: `syz.2.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.718984][ T5901] usb 5-1: Product: syz [ 81.737324][ T5901] usb 5-1: Manufacturer: syz [ 81.760774][ T5901] usb 5-1: SerialNumber: syz [ 81.806595][ T5901] usb 5-1: config 0 descriptor?? [ 81.951262][ T1562] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 82.126437][ T1562] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 82.151062][ T1562] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 82.178656][ T1562] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.178685][ T1562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 82.178731][ T1562] usb 1-1: SerialNumber: syz [ 82.496688][ T6025] veth0_vlan: left promiscuous mode [ 82.524806][ T6025] veth0_vlan: entered promiscuous mode [ 82.599306][ T6057] FAULT_INJECTION: forcing a failure. [ 82.599306][ T6057] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.612459][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 82.612485][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.612502][ T6057] Call Trace: [ 82.612509][ T6057] [ 82.612516][ T6057] dump_stack_lvl+0x16c/0x1f0 [ 82.612544][ T6057] should_fail_ex+0x512/0x640 [ 82.612571][ T6057] _copy_from_user+0x2e/0xd0 [ 82.612596][ T6057] __sys_bpf+0x21d/0x4de0 [ 82.612621][ T6057] ? rcu_watching_snap_stopped_since+0xe1/0x110 [ 82.612650][ T6057] ? __pfx___sys_bpf+0x10/0x10 [ 82.612681][ T6057] ? __pfx___schedule+0x10/0x10 [ 82.612733][ T6057] __x64_sys_bpf+0x78/0xc0 [ 82.612759][ T6057] do_syscall_64+0xcd/0x4c0 [ 82.612784][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.612804][ T6057] RIP: 0033:0x7fa605b8ebe9 [ 82.612820][ T6057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.612841][ T6057] RSP: 002b:00007fa6069a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.612860][ T6057] RAX: ffffffffffffffda RBX: 00007fa605db6180 RCX: 00007fa605b8ebe9 [ 82.612872][ T6057] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 82.612884][ T6057] RBP: 00007fa6069a4090 R08: 0000000000000000 R09: 0000000000000000 [ 82.612896][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.612907][ T6057] R13: 00007fa605db6218 R14: 00007fa605db6180 R15: 00007ffecaa799a8 [ 82.612936][ T6057] [ 82.906114][ T5901] usb 2-1: USB disconnect, device number 3 [ 82.942366][ T1562] usb 1-1: USB disconnect, device number 2 [ 83.252830][ T5909] usb 5-1: USB disconnect, device number 2 [ 83.315041][ T6067] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 84.029677][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 84.029694][ T30] audit: type=1400 audit(1756453223.844:170): avc: denied { create } for pid=6071 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.432705][ T30] audit: type=1400 audit(1756453224.024:171): avc: denied { read } for pid=6063 comm="syz.0.22" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.476477][ T30] audit: type=1400 audit(1756453224.024:172): avc: denied { open } for pid=6063 comm="syz.0.22" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.561838][ T5909] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 84.856862][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.898923][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.934757][ T5909] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 84.946492][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 84.966513][ T5909] usb 3-1: Product: syz [ 84.991715][ T5909] usb 3-1: Manufacturer: syz [ 85.061088][ T5909] usb 3-1: SerialNumber: syz [ 85.079838][ T5909] usb 3-1: config 0 descriptor?? [ 85.220560][ T5909] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 85.242528][ T5909] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 85.305551][ T30] audit: type=1400 audit(1756453225.094:173): avc: denied { setopt } for pid=6085 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.325709][ T5909] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 85.519652][ T5909] usb 3-1: USB disconnect, device number 2 [ 85.960986][ T30] audit: type=1400 audit(1756453225.704:174): avc: denied { read write } for pid=6095 comm="syz.4.30" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 86.068336][ T30] audit: type=1400 audit(1756453225.704:175): avc: denied { open } for pid=6095 comm="syz.4.30" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 86.096356][ T30] audit: type=1400 audit(1756453225.884:176): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 86.121249][ T5923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.259943][ T30] audit: type=1400 audit(1756453226.074:177): avc: denied { read } for pid=6102 comm="syz.4.31" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.355443][ T30] audit: type=1400 audit(1756453226.074:178): avc: denied { open } for pid=6102 comm="syz.4.31" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.358307][ T1562] IPVS: starting estimator thread 0... [ 86.378860][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.421103][ T30] audit: type=1400 audit(1756453226.114:179): avc: denied { ioctl } for pid=6102 comm="syz.4.31" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.445960][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.466423][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 86.476855][ T6103] tipc: Started in network mode [ 86.497359][ T6103] tipc: Node identity ac1414aa, cluster identity 4711 [ 86.525392][ T6103] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 86.540050][ T6103] tipc: Enabled bearer , priority 10 [ 86.550960][ T5901] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.653534][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 86.662015][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 86.789559][ T48] cfg80211: failed to load regulatory.db [ 86.800918][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 86.833448][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 86.940272][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 86.940914][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 87.080919][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 87.137488][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 87.220910][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 87.361354][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 87.384334][ T5923] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 87.403132][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.413461][ T5901] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 87.430722][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.439061][ T5923] usb 1-1: Product: syz [ 87.454792][ T5901] usb 3-1: Product: syz [ 87.454946][ T6104] IPVS: using max 34 ests per chain, 81600 per kthread [ 87.459775][ T5901] usb 3-1: Manufacturer: syz [ 87.476640][ T5923] usb 1-1: Manufacturer: syz [ 87.482248][ T5923] usb 1-1: SerialNumber: syz [ 87.500908][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 87.511009][ T5901] usb 3-1: SerialNumber: syz [ 87.516544][ T5923] usb 1-1: config 0 descriptor?? [ 87.527929][ T5901] usb 3-1: config 0 descriptor?? [ 87.535321][ T6097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.548983][ T5901] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 87.598337][ T5923] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 87.605054][ T5923] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 87.641977][ T5902] tipc: Node number set to 2886997162 [ 87.719741][ T5923] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 87.725863][ T5923] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 87.733018][ T5923] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 87.780970][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 87.886766][ T6097] bridge0: port 3(macsec0) entered blocking state [ 87.894377][ T6097] bridge0: port 3(macsec0) entered disabled state [ 87.920335][ T6097] macsec0: entered allmulticast mode [ 87.930917][ T6097] veth1_macvtap: entered allmulticast mode [ 88.020805][ T6097] macsec0: entered promiscuous mode [ 88.027886][ T6097] bridge0: port 3(macsec0) entered blocking state [ 88.035130][ T6097] bridge0: port 3(macsec0) entered forwarding state [ 88.051352][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 88.691769][ T5901] gspca_stk1135: reg_w 0x5 err -110 [ 88.698037][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 89.127243][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 89.127270][ T30] audit: type=1400 audit(1756453228.944:199): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.127287][ T5901] gspca_stk1135: Sensor write failed [ 89.159312][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 89.165660][ T5901] gspca_stk1135: Sensor write failed [ 89.171003][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 89.177322][ T5901] gspca_stk1135: Sensor read failed [ 89.182570][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 89.188880][ T5901] gspca_stk1135: Sensor read failed [ 89.194118][ T5901] gspca_stk1135: Detected sensor type unknown (0x0) [ 89.200732][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 89.207135][ T5901] gspca_stk1135: Sensor read failed [ 89.220904][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 89.227225][ T5901] gspca_stk1135: Sensor read failed [ 89.232472][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 89.238783][ T5901] gspca_stk1135: Sensor write failed [ 89.244116][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 89.251338][ T5901] gspca_stk1135: Sensor write failed [ 89.261032][ T5901] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 89.424300][ T30] audit: type=1400 audit(1756453229.244:200): avc: denied { read write } for pid=6126 comm="syz.1.38" name="sg0" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.456645][ T30] audit: type=1400 audit(1756453229.264:201): avc: denied { open } for pid=6126 comm="syz.1.38" path="/dev/sg0" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.807760][ T5902] usb 1-1: USB disconnect, device number 3 [ 89.827022][ T5902] mcba_usb 1-1:0.0 can0: device disconnected [ 89.971970][ T30] audit: type=1400 audit(1756453229.794:202): avc: denied { read open } for pid=6132 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.033957][ T30] audit: type=1400 audit(1756453229.794:203): avc: denied { getattr } for pid=6132 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.332342][ T6139] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.39'. [ 90.650188][ T10] usb 3-1: USB disconnect, device number 3 [ 90.650967][ T30] audit: type=1400 audit(1756453230.264:204): avc: denied { write } for pid=6133 comm="syz.0.39" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.883184][ T6144] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.40'. [ 91.171366][ T6151] FAULT_INJECTION: forcing a failure. [ 91.171366][ T6151] name failslab, interval 1, probability 0, space 0, times 1 [ 91.184281][ T6151] CPU: 0 UID: 0 PID: 6151 Comm: syz.4.42 Not tainted syzkaller #0 PREEMPT(full) [ 91.184306][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.184315][ T6151] Call Trace: [ 91.184321][ T6151] [ 91.184329][ T6151] dump_stack_lvl+0x16c/0x1f0 [ 91.184354][ T6151] should_fail_ex+0x512/0x640 [ 91.184381][ T6151] should_failslab+0xc2/0x120 [ 91.184401][ T6151] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 91.184422][ T6151] ? skb_clone+0x190/0x3f0 [ 91.184447][ T6151] skb_clone+0x190/0x3f0 [ 91.184468][ T6151] netlink_deliver_tap+0xabd/0xd30 [ 91.184494][ T6151] netlink_unicast+0x64c/0x870 [ 91.184517][ T6151] ? __pfx_netlink_unicast+0x10/0x10 [ 91.184539][ T6151] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 91.184567][ T6151] netlink_sendmsg+0x8d1/0xdd0 [ 91.184591][ T6151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.184624][ T6151] ____sys_sendmsg+0xa98/0xc70 [ 91.184649][ T6151] ? copy_msghdr_from_user+0x10a/0x160 [ 91.184669][ T6151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.184705][ T6151] ___sys_sendmsg+0x134/0x1d0 [ 91.184727][ T6151] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.184781][ T6151] __sys_sendmsg+0x16d/0x220 [ 91.184800][ T6151] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.184839][ T6151] do_syscall_64+0xcd/0x4c0 [ 91.184862][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.184882][ T6151] RIP: 0033:0x7fd2b1f8ebe9 [ 91.184897][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.184915][ T6151] RSP: 002b:00007fd2b01b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.184933][ T6151] RAX: ffffffffffffffda RBX: 00007fd2b21b6180 RCX: 00007fd2b1f8ebe9 [ 91.184946][ T6151] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 91.184957][ T6151] RBP: 00007fd2b01b4090 R08: 0000000000000000 R09: 0000000000000000 [ 91.184968][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.184979][ T6151] R13: 00007fd2b21b6218 R14: 00007fd2b21b6180 R15: 00007ffe86bedaa8 [ 91.185005][ T6151] [ 91.185863][ T6151] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 91.215911][ T5901] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.220569][ T5902] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 91.372525][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 91.378862][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.390278][ T6150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.42'. [ 91.403897][ T6151] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 91.411200][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 91.631642][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 91.731008][ C0] net_ratelimit: 3 callbacks suppressed [ 91.731025][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 91.748948][ T6150] Zero length message leads to an empty skb [ 91.750922][ T30] audit: type=1400 audit(1756453231.454:205): avc: denied { ioctl } for pid=6149 comm="syz.1.43" path="socket:[8784]" dev="sockfs" ino=8784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.022739][ T5902] usb 4-1: Invalid ep0 maxpacket: 16 [ 92.051280][ T30] audit: type=1400 audit(1756453231.464:206): avc: denied { create } for pid=6149 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.082131][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 92.102160][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.117566][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.126987][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.139448][ T5901] usb 3-1: Product: syz [ 92.152151][ T5902] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 92.198720][ T30] audit: type=1400 audit(1756453231.964:207): avc: denied { add_name } for pid=6128 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.225995][ T5901] usb 3-1: Manufacturer: syz [ 92.236165][ T5901] usb 3-1: SerialNumber: syz [ 92.257252][ T5901] usb 3-1: config 0 descriptor?? [ 92.345154][ T30] audit: type=1400 audit(1756453232.084:208): avc: denied { create } for pid=6128 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.422394][ T5901] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.450780][ T5901] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 92.600969][ T5902] usb 4-1: Invalid ep0 maxpacket: 16 [ 92.712545][ T5902] usb usb4-port1: attempt power cycle [ 92.766397][ T6169] netlink: 56 bytes leftover after parsing attributes in process `syz.0.46'. [ 92.771137][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 92.987467][ T6175] hfsplus: unable to find HFS+ superblock [ 93.002542][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.45'. [ 93.011572][ T6175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.45'. [ 93.362884][ T5901] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 93.398448][ T5902] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 93.416573][ T5901] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 93.766357][ T5901] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 93.795710][ T5901] em28xx 3-1:0.0: No AC97 audio processor [ 93.810915][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 93.867958][ T5902] usb 4-1: device descriptor read/8, error -71 [ 93.919913][ T10] libceph: connect (1)[c::]:6789 error -101 [ 93.940799][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 94.022983][ T6179] ceph: No mds server is up or the cluster is laggy [ 94.241291][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 94.244778][ T30] audit: type=1400 audit(1756453234.014:215): avc: denied { ioctl } for pid=6185 comm="syz.3.49" path="/dev/sg0" dev="devtmpfs" ino=782 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.276416][ T10] libceph: connect (1)[c::]:6789 error -101 [ 94.276602][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 94.640197][ T6192] mmap: syz.3.49 (6192) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.851025][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 94.865992][ T30] audit: type=1400 audit(1756453234.674:216): avc: denied { map } for pid=6178 comm="syz.1.47" path="socket:[9618]" dev="sockfs" ino=9618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.976423][ T6204] netlink: 'syz.4.51': attribute type 10 has an invalid length. [ 94.985930][ T6204] team0: entered promiscuous mode [ 94.991050][ T6204] team_slave_0: entered promiscuous mode [ 94.996803][ T6204] team_slave_1: entered promiscuous mode [ 95.006839][ T6204] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.014709][ T6204] bond0: (slave team0): Enslaving as an active interface with an up link [ 95.117048][ T30] audit: type=1400 audit(1756453234.684:217): avc: denied { read accept } for pid=6178 comm="syz.1.47" path="socket:[9618]" dev="sockfs" ino=9618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.183833][ T30] audit: type=1400 audit(1756453234.964:218): avc: denied { ioctl } for pid=6203 comm="syz.4.51" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.261091][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.49'. [ 95.305150][ T30] audit: type=1400 audit(1756453234.964:219): avc: denied { set_context_mgr } for pid=6203 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 95.441889][ T30] audit: type=1400 audit(1756453235.254:220): avc: denied { accept } for pid=6211 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 95.755492][ T30] audit: type=1400 audit(1756453235.574:221): avc: denied { create } for pid=6217 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.891137][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 95.891283][ T6220] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 95.904649][ T6220] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.913857][ T6220] vhci_hcd vhci_hcd.0: Device attached [ 96.404265][ T30] audit: type=1400 audit(1756453235.744:222): avc: denied { bind } for pid=6219 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.424865][ T6225] vhci_hcd: connection closed [ 96.444376][ T1086] vhci_hcd: stop threads [ 96.497751][ T5902] usb 3-1: USB disconnect, device number 4 [ 96.504361][ T5902] em28xx 3-1:0.0: Disconnecting em28xx [ 96.528320][ T1086] vhci_hcd: release socket [ 96.534501][ T1086] vhci_hcd: disconnect device [ 96.619334][ T6231] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 96.734685][ T5901] vhci_hcd: vhci_device speed not set [ 96.753372][ T30] audit: type=1400 audit(1756453236.524:223): avc: denied { name_bind } for pid=6221 comm="syz.4.55" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 96.931003][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.084214][ T6238] hfsplus: unable to find HFS+ superblock [ 97.202732][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.57'. [ 97.214662][ T6238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.57'. [ 97.452222][ T5902] em28xx 3-1:0.0: Freeing device [ 97.981103][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 98.052095][ T30] audit: type=1400 audit(1756453237.874:224): avc: denied { setopt } for pid=6247 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.191860][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.736007][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 98.934558][ T5902] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.959089][ T5902] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.983095][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.010925][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 99.019288][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.080159][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.105805][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.159634][ T5902] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.183078][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.214791][ T5902] usb 2-1: config 0 descriptor?? [ 99.337836][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 99.337852][ T30] audit: type=1400 audit(1756453239.154:229): avc: denied { create } for pid=6264 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.447198][ T5902] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 99.494437][ T30] audit: type=1400 audit(1756453239.284:230): avc: denied { bind } for pid=6264 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.539583][ T5902] usb 2-1: USB disconnect, device number 4 [ 99.547958][ T5902] usblp0: removed [ 99.604267][ T6270] netlink: 'syz.2.65': attribute type 10 has an invalid length. [ 99.613053][ T6270] team0: entered promiscuous mode [ 99.618065][ T6270] team_slave_0: entered promiscuous mode [ 99.623834][ T6270] team_slave_1: entered promiscuous mode [ 99.632871][ T6270] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.640554][ T6270] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.782084][ T30] audit: type=1400 audit(1756453239.604:231): avc: denied { ioctl } for pid=6244 comm="syz.1.58" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.979152][ T1562] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.050931][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 100.206611][ T30] audit: type=1400 audit(1756453240.014:232): avc: denied { sqpoll } for pid=6253 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.401556][ T1562] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 100.410723][ T1562] usb 5-1: config 0 has no interface number 0 [ 100.986920][ T1562] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d [ 101.010308][ T1562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.036731][ T1562] usb 5-1: Product: syz [ 101.043381][ T1562] usb 5-1: Manufacturer: syz [ 101.048050][ T1562] usb 5-1: SerialNumber: syz [ 101.074026][ T1562] usb 5-1: config 0 descriptor?? [ 101.090905][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 101.168879][ T5923] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.291197][ T30] audit: type=1400 audit(1756453241.024:233): avc: denied { ioctl } for pid=6279 comm="syz.0.67" path="socket:[9067]" dev="sockfs" ino=9067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.317016][ T1562] usbtest 5-1:0.85: Linux gadget zero [ 101.391143][ T5923] usb 2-1: device descriptor read/64, error -71 [ 101.469691][ T1562] usbtest 5-1:0.85: high-speed {control in/out int-out} tests (+alt) [ 101.484815][ T30] audit: type=1400 audit(1756453241.024:234): avc: denied { bind } for pid=6279 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.610277][ T30] audit: type=1400 audit(1756453241.394:235): avc: denied { setopt } for pid=6284 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.731128][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.979073][ T30] audit: type=1404 audit(1756453241.414:236): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 101.995690][ T30] audit: type=1400 audit(1756453241.454:237): avc: denied { create } for pid=6284 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 102.130940][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 102.167163][ T30] audit: type=1400 audit(1756453241.454:238): avc: denied { create } for pid=6284 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 102.703870][ T6299] FAULT_INJECTION: forcing a failure. [ 102.703870][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 102.723915][ T6299] CPU: 1 UID: 0 PID: 6299 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT(full) [ 102.723941][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.723950][ T6299] Call Trace: [ 102.723956][ T6299] [ 102.723962][ T6299] dump_stack_lvl+0x16c/0x1f0 [ 102.723986][ T6299] should_fail_ex+0x512/0x640 [ 102.724004][ T6299] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 102.724035][ T6299] should_failslab+0xc2/0x120 [ 102.724058][ T6299] __kmalloc_cache_noprof+0x6a/0x3e0 [ 102.724087][ T6299] ? rtnl_newlink+0x11b/0x2000 [ 102.724111][ T6299] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.724129][ T6299] rtnl_newlink+0x11b/0x2000 [ 102.724157][ T6299] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.724176][ T6299] ? find_held_lock+0x2b/0x80 [ 102.724198][ T6299] ? avc_has_perm_noaudit+0x117/0x3b0 [ 102.724238][ T6299] ? avc_has_perm_noaudit+0x149/0x3b0 [ 102.724264][ T6299] ? __lock_acquire+0x62e/0x1ce0 [ 102.724305][ T6299] ? find_held_lock+0x2b/0x80 [ 102.724323][ T6299] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.724342][ T6299] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.724360][ T6299] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 102.724382][ T6299] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.724402][ T6299] rtnetlink_rcv_msg+0x95b/0xe90 [ 102.724424][ T6299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.724448][ T6299] ? netlink_rcv_skb+0x248/0x420 [ 102.724471][ T6299] ? kasan_check_range+0x163/0x1b0 [ 102.724500][ T6299] netlink_rcv_skb+0x155/0x420 [ 102.724527][ T6299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.724551][ T6299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.724583][ T6299] ? netlink_deliver_tap+0x1ae/0xd30 [ 102.724610][ T6299] netlink_unicast+0x5aa/0x870 [ 102.724634][ T6299] ? __pfx_netlink_unicast+0x10/0x10 [ 102.724657][ T6299] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 102.724686][ T6299] netlink_sendmsg+0x8d1/0xdd0 [ 102.724708][ T6299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.724734][ T6299] ____sys_sendmsg+0xa98/0xc70 [ 102.724757][ T6299] ? copy_msghdr_from_user+0x10a/0x160 [ 102.724775][ T6299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.724805][ T6299] ___sys_sendmsg+0x134/0x1d0 [ 102.724822][ T6299] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.724870][ T6299] __sys_sendmsg+0x16d/0x220 [ 102.724889][ T6299] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.724917][ T6299] ? fput+0x9b/0xd0 [ 102.724949][ T6299] do_syscall_64+0xcd/0x4c0 [ 102.724970][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.724989][ T6299] RIP: 0033:0x7fa605b8ebe9 [ 102.725004][ T6299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.725021][ T6299] RSP: 002b:00007fa6069c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.725038][ T6299] RAX: ffffffffffffffda RBX: 00007fa605db6090 RCX: 00007fa605b8ebe9 [ 102.725051][ T6299] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 102.725061][ T6299] RBP: 00007fa6069c5090 R08: 0000000000000000 R09: 0000000000000000 [ 102.725071][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.725082][ T6299] R13: 00007fa605db6128 R14: 00007fa605db6090 R15: 00007ffecaa799a8 [ 102.725108][ T6299] [ 103.036433][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.171819][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 103.453080][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.74'. [ 103.514652][ T1562] usb 5-1: USB disconnect, device number 3 [ 104.220908][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.342205][ T30] kauditd_printk_skb: 537 callbacks suppressed [ 104.342221][ T30] audit: type=1400 audit(1756453244.164:776): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.372399][ T6325] FAULT_INJECTION: forcing a failure. [ 104.372399][ T6325] name failslab, interval 1, probability 0, space 0, times 0 [ 104.389486][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.405282][ T5841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.412395][ T5513] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 104.412414][ T5513] audit: backlog limit exceeded [ 104.412538][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.431644][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 104.431665][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.431674][ T6325] Call Trace: [ 104.431680][ T6325] [ 104.431686][ T6325] dump_stack_lvl+0x16c/0x1f0 [ 104.431713][ T6325] should_fail_ex+0x512/0x640 [ 104.431733][ T6325] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 104.431755][ T6325] should_failslab+0xc2/0x120 [ 104.431775][ T6325] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 104.431791][ T6325] ? __might_fault+0x13b/0x190 [ 104.431808][ T6325] ? __alloc_skb+0x2b2/0x380 [ 104.431828][ T6325] ? __pfx___mutex_lock+0x10/0x10 [ 104.431851][ T6325] __alloc_skb+0x2b2/0x380 [ 104.431868][ T6325] ? __pfx___alloc_skb+0x10/0x10 [ 104.431885][ T6325] ? __skb_try_recv_from_queue+0x7e0/0x7f0 [ 104.431914][ T6325] ? __lock_acquire+0xb97/0x1ce0 [ 104.431948][ T6325] netlink_dump+0x19b/0xd30 [ 104.431973][ T6325] ? __pfx_netlink_dump+0x10/0x10 [ 104.432013][ T6325] netlink_recvmsg+0x7dc/0xa90 [ 104.432035][ T6325] ? __pfx_netlink_recvmsg+0x10/0x10 [ 104.432059][ T6325] ? iovec_from_user+0xbb/0x140 [ 104.432092][ T6325] ____sys_recvmsg+0x5f6/0x6b0 [ 104.432130][ T6325] ? __pfx_____sys_recvmsg+0x10/0x10 [ 104.432163][ T6325] ? kfree+0x24f/0x4d0 [ 104.432186][ T6325] ? __lock_acquire+0x62e/0x1ce0 [ 104.432214][ T6325] ___sys_recvmsg+0x114/0x1a0 [ 104.432235][ T6325] ? __pfx____sys_recvmsg+0x10/0x10 [ 104.432272][ T6325] ? __pfx___might_resched+0x10/0x10 [ 104.432300][ T6325] do_recvmmsg+0x2fe/0x750 [ 104.432322][ T6325] ? __pfx_do_recvmmsg+0x10/0x10 [ 104.432348][ T6325] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 104.432376][ T6325] ? __fget_files+0x20e/0x3c0 [ 104.432405][ T6325] __x64_sys_recvmmsg+0x22a/0x280 [ 104.432428][ T6325] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 104.432458][ T6325] do_syscall_64+0xcd/0x4c0 [ 104.432482][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.432501][ T6325] RIP: 0033:0x7f148a18ebe9 [ 104.432517][ T6325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.432537][ T6325] RSP: 002b:00007f148b0b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 104.432554][ T6325] RAX: ffffffffffffffda RBX: 00007f148a3b5fa0 RCX: 00007f148a18ebe9 [ 104.432565][ T6325] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000004 [ 104.432576][ T6325] RBP: 00007f148b0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 104.432586][ T6325] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 104.432596][ T6325] R13: 00007f148a3b6038 R14: 00007f148a3b5fa0 R15: 00007ffceaf983d8 [ 104.432619][ T6325] [ 104.435048][ T6330] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.516619][ T5841] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 104.521317][ T30] audit: type=1400 audit(1756453244.164:777): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.534389][ T5841] audit: backlog limit exceeded [ 104.961593][ T6338] bridge_slave_0: left allmulticast mode [ 105.025290][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.182844][ T6338] bridge_slave_1: left allmulticast mode [ 105.191052][ T6338] bridge_slave_1: left promiscuous mode [ 105.209784][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.250940][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 105.262052][ T6338] bond0: (slave bond_slave_0): Releasing backup interface [ 105.284774][ T6338] bond0: (slave bond_slave_1): Releasing backup interface [ 105.480086][ T6338] team0: Port device team_slave_0 removed [ 105.546848][ T6338] team0: Port device team_slave_1 removed [ 105.707217][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.715652][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.770561][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.785472][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.290912][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 106.875063][ T6368] mkiss: ax0: crc mode is auto. [ 107.340915][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 107.435519][ T6370] bridge_slave_0: left allmulticast mode [ 107.448241][ T6370] bridge_slave_0: left promiscuous mode [ 107.472621][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.528740][ T6370] bridge_slave_1: left allmulticast mode [ 107.538391][ T6370] bridge_slave_1: left promiscuous mode [ 107.564789][ T6380] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 107.576369][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.614695][ T6370] bond0: (slave bond_slave_0): Releasing backup interface [ 107.628479][ T6370] bond0: (slave bond_slave_1): Releasing backup interface [ 107.676706][ T6370] team0: Port device team_slave_0 removed [ 107.705350][ T6370] team0: Port device team_slave_1 removed [ 107.724773][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.740297][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.756331][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.768178][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.811898][ T6370] macsec0: left allmulticast mode [ 107.822064][ T6370] veth1_macvtap: left allmulticast mode [ 107.832597][ T6370] macsec0: left promiscuous mode [ 107.838189][ T6370] bridge0: port 3(macsec0) entered disabled state [ 108.380910][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.129265][ T6414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.385570][ T30] kauditd_printk_skb: 7548 callbacks suppressed [ 109.385581][ T30] audit: type=1400 audit(1756453249.204:6276): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.413271][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.489301][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.499893][ T30] audit: type=1400 audit(1756453249.264:6277): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.536796][ T5513] audit: audit_lost=687 audit_rate_limit=0 audit_backlog_limit=64 [ 109.560825][ T5847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.561662][ T5513] audit: backlog limit exceeded [ 109.574332][ T5847] audit: audit_lost=688 audit_rate_limit=0 audit_backlog_limit=64 [ 109.582631][ T30] audit: type=1400 audit(1756453249.264:6278): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.605293][ T5847] audit: backlog limit exceeded [ 109.610508][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.857286][ T5168] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 110.450915][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 111.492012][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 112.530927][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 112.774419][ T6481] netlink: 56 bytes leftover after parsing attributes in process `syz.1.122'. [ 113.570898][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 114.227275][ T6503] bond0: (slave team0): Releasing backup interface [ 114.257980][ T6503] bridge_slave_0: left allmulticast mode [ 114.265760][ T6503] bridge_slave_0: left promiscuous mode [ 114.290173][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.303712][ T6503] bridge_slave_1: left allmulticast mode [ 114.309456][ T6503] bridge_slave_1: left promiscuous mode [ 114.316817][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.392951][ T30] kauditd_printk_skb: 5422 callbacks suppressed [ 114.392967][ T30] audit: type=1400 audit(1756453254.213:10568): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.447238][ T6503] bond0: (slave bond_slave_0): Releasing backup interface [ 114.471372][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.486794][ T5513] audit: audit_lost=1067 audit_rate_limit=0 audit_backlog_limit=64 [ 114.497285][ T30] audit: type=1400 audit(1756453254.243:10569): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.519367][ T6503] bond0: (slave bond_slave_1): Releasing backup interface [ 114.528810][ T5513] audit: backlog limit exceeded [ 114.547038][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.556630][ T30] audit: type=1400 audit(1756453254.243:10570): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.570883][ T5513] audit: audit_lost=1068 audit_rate_limit=0 audit_backlog_limit=64 [ 114.607693][ T6503] team_slave_0: left promiscuous mode [ 114.610906][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 114.637212][ T30] audit: type=1400 audit(1756453254.243:10571): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.640904][ T5513] audit: backlog limit exceeded [ 114.675134][ T6503] team0: Port device team_slave_0 removed [ 114.779844][ T6503] team_slave_1: left promiscuous mode [ 114.819799][ T6503] team0: Port device team_slave_1 removed [ 114.842166][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.851521][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.873904][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.881638][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.650915][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 116.020773][ T6543] FAULT_INJECTION: forcing a failure. [ 116.020773][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.095670][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(full) [ 116.095697][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.095708][ T6543] Call Trace: [ 116.095714][ T6543] [ 116.095721][ T6543] dump_stack_lvl+0x16c/0x1f0 [ 116.095748][ T6543] should_fail_ex+0x512/0x640 [ 116.095774][ T6543] _copy_from_iter+0x29f/0x1720 [ 116.095803][ T6543] ? __alloc_skb+0x200/0x380 [ 116.095823][ T6543] ? __pfx__copy_from_iter+0x10/0x10 [ 116.095850][ T6543] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 116.095882][ T6543] netlink_sendmsg+0x829/0xdd0 [ 116.095910][ T6543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.095942][ T6543] sock_write_iter+0x4fc/0x5b0 [ 116.095967][ T6543] ? __pfx_sock_write_iter+0x10/0x10 [ 116.096002][ T6543] ? __pfx_file_has_perm+0x10/0x10 [ 116.096029][ T6543] do_iter_readv_writev+0x662/0x9e0 [ 116.096061][ T6543] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 116.096124][ T6543] ? selinux_file_permission+0x126/0x660 [ 116.096154][ T6543] ? bpf_lsm_file_permission+0x9/0x10 [ 116.096186][ T6543] ? security_file_permission+0x71/0x210 [ 116.096214][ T6543] ? rw_verify_area+0xcf/0x6c0 [ 116.096252][ T6543] vfs_writev+0x35f/0xde0 [ 116.096273][ T6543] ? __lock_acquire+0x62e/0x1ce0 [ 116.096303][ T6543] ? __pfx_vfs_writev+0x10/0x10 [ 116.096359][ T6543] ? __fget_files+0x20e/0x3c0 [ 116.096378][ T6543] ? __fget_files+0x1b0/0x3c0 [ 116.096406][ T6543] ? do_writev+0x28c/0x340 [ 116.096421][ T6543] do_writev+0x28c/0x340 [ 116.096439][ T6543] ? __pfx_do_writev+0x10/0x10 [ 116.096465][ T6543] do_syscall_64+0xcd/0x4c0 [ 116.096489][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.096509][ T6543] RIP: 0033:0x7fdb2c18ebe9 [ 116.096524][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.096541][ T6543] RSP: 002b:00007fdb2cf30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 116.096560][ T6543] RAX: ffffffffffffffda RBX: 00007fdb2c3b5fa0 RCX: 00007fdb2c18ebe9 [ 116.096573][ T6543] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 116.096584][ T6543] RBP: 00007fdb2cf30090 R08: 0000000000000000 R09: 0000000000000000 [ 116.096595][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.096606][ T6543] R13: 00007fdb2c3b6038 R14: 00007fdb2c3b5fa0 R15: 00007ffdd0c06968 [ 116.096633][ T6543] [ 116.690891][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 116.864613][ T6553] bond0: (slave team0): Releasing backup interface [ 116.901880][ T6553] bond0: (slave batadv0): Releasing backup interface [ 117.018181][ T6553] bridge_slave_0: left allmulticast mode [ 117.025333][ T6553] bridge_slave_0: left promiscuous mode [ 117.053055][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.067826][ T6553] bridge_slave_1: left allmulticast mode [ 117.077563][ T6553] bridge_slave_1: left promiscuous mode [ 117.094118][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.135336][ T6553] bond0: (slave bond_slave_0): Releasing backup interface [ 117.176415][ T6553] bond0: (slave bond_slave_1): Releasing backup interface [ 117.201088][ T6553] team_slave_0: left promiscuous mode [ 117.225961][ T6553] team0: Port device team_slave_0 removed [ 117.243504][ T6553] team_slave_1: left promiscuous mode [ 117.269296][ T6553] team0: Port device team_slave_1 removed [ 117.301472][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.377216][ T6553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.450373][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.458921][ T6553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.731004][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 118.152227][ T6588] capability: warning: `syz.1.152' uses 32-bit capabilities (legacy support in use) [ 118.770903][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 119.432722][ T30] kauditd_printk_skb: 4612 callbacks suppressed [ 119.432738][ T30] audit: type=1400 audit(1756453259.253:14702): avc: denied { create } for pid=6612 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 119.448323][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.475807][ T5513] audit: audit_lost=1230 audit_rate_limit=0 audit_backlog_limit=64 [ 119.487696][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.487826][ T5513] audit: backlog limit exceeded [ 119.515215][ T5852] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.525958][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.538330][ T5852] audit: audit_lost=1231 audit_rate_limit=0 audit_backlog_limit=64 [ 119.546734][ T5513] audit: audit_lost=1232 audit_rate_limit=0 audit_backlog_limit=64 [ 119.551555][ T5849] audit: audit_lost=1233 audit_rate_limit=0 audit_backlog_limit=64 [ 119.810994][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.108391][ T6636] FAULT_INJECTION: forcing a failure. [ 120.108391][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 120.148835][ T6636] CPU: 1 UID: 0 PID: 6636 Comm: syz.4.167 Not tainted syzkaller #0 PREEMPT(full) [ 120.148856][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.148864][ T6636] Call Trace: [ 120.148868][ T6636] [ 120.148873][ T6636] dump_stack_lvl+0x16c/0x1f0 [ 120.148891][ T6636] should_fail_ex+0x512/0x640 [ 120.148905][ T6636] ? fs_reclaim_acquire+0xae/0x150 [ 120.148921][ T6636] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 120.148938][ T6636] should_failslab+0xc2/0x120 [ 120.148951][ T6636] __kmalloc_noprof+0xd2/0x510 [ 120.148967][ T6636] tomoyo_realpath_from_path+0xc2/0x6e0 [ 120.148985][ T6636] ? tomoyo_profile+0x47/0x60 [ 120.148997][ T6636] tomoyo_path_number_perm+0x245/0x580 [ 120.149011][ T6636] ? tomoyo_path_number_perm+0x237/0x580 [ 120.149026][ T6636] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.149041][ T6636] ? find_held_lock+0x2b/0x80 [ 120.149069][ T6636] ? find_held_lock+0x2b/0x80 [ 120.149085][ T6636] ? hook_file_ioctl_common+0x145/0x410 [ 120.149100][ T6636] ? __fget_files+0x20e/0x3c0 [ 120.149117][ T6636] security_file_ioctl+0x9b/0x240 [ 120.149138][ T6636] __x64_sys_ioctl+0xb7/0x210 [ 120.149167][ T6636] do_syscall_64+0xcd/0x4c0 [ 120.149190][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.149210][ T6636] RIP: 0033:0x7fd2b1f8ebe9 [ 120.149231][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.149247][ T6636] RSP: 002b:00007fd2b01f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.149267][ T6636] RAX: ffffffffffffffda RBX: 00007fd2b21b5fa0 RCX: 00007fd2b1f8ebe9 [ 120.149279][ T6636] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000003 [ 120.149292][ T6636] RBP: 00007fd2b01f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.149303][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.149314][ T6636] R13: 00007fd2b21b6038 R14: 00007fd2b21b5fa0 R15: 00007ffe86bedaa8 [ 120.149343][ T6636] [ 120.149407][ T6636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.861025][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.782311][ T6661] FAULT_INJECTION: forcing a failure. [ 121.782311][ T6661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.795456][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) [ 121.795478][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.795485][ T6661] Call Trace: [ 121.795491][ T6661] [ 121.795497][ T6661] dump_stack_lvl+0x16c/0x1f0 [ 121.795514][ T6661] should_fail_ex+0x512/0x640 [ 121.795537][ T6661] _copy_from_user+0x2e/0xd0 [ 121.795563][ T6661] __sys_bpf+0x21d/0x4de0 [ 121.795581][ T6661] ? __pfx___sys_bpf+0x10/0x10 [ 121.795596][ T6661] ? ksys_write+0x190/0x250 [ 121.795610][ T6661] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 121.795632][ T6661] ? fput+0x9b/0xd0 [ 121.795647][ T6661] ? ksys_write+0x1ac/0x250 [ 121.795657][ T6661] ? __pfx_ksys_write+0x10/0x10 [ 121.795671][ T6661] __x64_sys_bpf+0x78/0xc0 [ 121.795686][ T6661] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.795697][ T6661] do_syscall_64+0xcd/0x4c0 [ 121.795712][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.795725][ T6661] RIP: 0033:0x7f148a18ebe9 [ 121.795735][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.795745][ T6661] RSP: 002b:00007f148b0b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.795756][ T6661] RAX: ffffffffffffffda RBX: 00007f148a3b5fa0 RCX: 00007f148a18ebe9 [ 121.795763][ T6661] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 121.795770][ T6661] RBP: 00007f148b0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 121.795776][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.795782][ T6661] R13: 00007f148a3b6038 R14: 00007f148a3b5fa0 R15: 00007ffceaf983d8 [ 121.795797][ T6661] [ 121.890889][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 122.015322][ T6662] netlink: 'syz.2.175': attribute type 2 has an invalid length. [ 122.027648][ T6662] netlink: 68 bytes leftover after parsing attributes in process `syz.2.175'. [ 122.930904][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 123.970919][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 124.453122][ T30] kauditd_printk_skb: 17609 callbacks suppressed [ 124.453134][ T30] audit: type=1400 audit(1756453264.273:19960): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.517344][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.524329][ T5513] audit: audit_lost=5350 audit_rate_limit=0 audit_backlog_limit=64 [ 124.532783][ T30] audit: type=1400 audit(1756453264.303:19961): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.559349][ T5513] audit: backlog limit exceeded [ 124.574732][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.584288][ T5847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.711013][ T30] audit: type=1400 audit(1756453264.303:19962): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.735956][ T5847] audit: audit_lost=5351 audit_rate_limit=0 audit_backlog_limit=64 [ 124.758001][ T5852] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.010950][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.117913][ T6705] team0: left promiscuous mode [ 126.060990][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.108314][ T6039] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.174863][ T6039] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.205378][ T6039] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.295448][ T6039] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.090989][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 127.200636][ T6739] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 127.272700][ T6739] bond1: entered promiscuous mode [ 127.314016][ T6739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.461824][ T6743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.470239][ T6743] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 127.480784][ T6743] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 127.495414][ T6743] bond1: (slave vcan1): making interface the new active one [ 127.504855][ T6743] vcan1: entered promiscuous mode [ 127.512657][ T6743] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 127.563563][ T6750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.141967][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.080329][ T6787] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 129.113066][ T6789] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 129.129249][ T6787] bond1: entered promiscuous mode [ 129.135370][ T6787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.150989][ T6789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.217'. [ 129.171000][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.249922][ T6789] team0: Port device geneve0 added [ 129.319834][ T6787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.421633][ T6787] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 129.436572][ T6787] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 129.457404][ T6787] bond1: (slave vcan1): making interface the new active one [ 129.464792][ T30] kauditd_printk_skb: 5807 callbacks suppressed [ 129.464803][ T30] audit: type=1400 audit(1756453269.273:25723): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.494909][ T6787] vcan1: entered promiscuous mode [ 129.494957][ T30] audit: type=1400 audit(1756453269.273:25724): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.522496][ T6787] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 129.573047][ T30] audit: type=1400 audit(1756453269.273:25725): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.599612][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.624104][ T5513] audit: audit_lost=5368 audit_rate_limit=0 audit_backlog_limit=64 [ 129.634360][ T30] audit: type=1400 audit(1756453269.323:25727): avc: denied { create } for pid=6792 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 129.666472][ T5513] audit: backlog limit exceeded [ 129.670617][ T30] audit: type=1400 audit(1756453269.323:25728): avc: denied { prog_load } for pid=6792 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.691314][ T30] audit: type=1400 audit(1756453269.323:25729): avc: denied { allowed } for pid=6792 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 129.714277][ T30] audit: type=1400 audit(1756453269.273:25726): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.210917][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.706571][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 130.728506][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 131.031178][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 131.050408][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 131.251060][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 131.411400][ T6818] ceph: No mds server is up or the cluster is laggy [ 131.608489][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.229'. [ 131.894459][ T6833] bond1 (unregistering): Released all slaves [ 132.291016][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.634771][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.645403][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.330912][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.370900][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.495062][ T30] kauditd_printk_skb: 8074 callbacks suppressed [ 134.495073][ T30] audit: type=1400 audit(1756453274.313:33333): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.529200][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.539390][ T5513] audit: audit_lost=5526 audit_rate_limit=0 audit_backlog_limit=64 [ 134.552491][ T6898] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.561084][ T6898] audit: audit_lost=5527 audit_rate_limit=0 audit_backlog_limit=64 [ 134.569234][ T5513] audit: backlog limit exceeded [ 134.569326][ T30] audit: type=1400 audit(1756453274.313:33334): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.596404][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.605005][ T6898] audit: backlog limit exceeded [ 134.609989][ T5513] audit: audit_lost=5528 audit_rate_limit=0 audit_backlog_limit=64 [ 135.410919][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 135.765745][ T6924] netlink: 'syz.1.256': attribute type 1 has an invalid length. [ 135.874058][ T6924] bond1: entered promiscuous mode [ 135.893624][ T6924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.950343][ T6929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.985216][ T6929] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 135.997053][ T6929] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 136.065772][ T6929] bond1: (slave vcan1): making interface the new active one [ 136.074503][ T6929] vcan1: entered promiscuous mode [ 136.105286][ T6929] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 136.452210][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 136.913414][ T6938] netlink: 9 bytes leftover after parsing attributes in process `syz.0.260'. [ 136.925581][ T6938] gretap0: entered promiscuous mode [ 137.471677][ T6942] bond1: (slave vcan1): Releasing backup interface [ 137.490899][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.494275][ T6942] vcan1: left promiscuous mode [ 137.891251][ T5853] Bluetooth: hci5: command 0x1003 tx timeout [ 137.891290][ T5168] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 138.530886][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.502660][ T30] kauditd_printk_skb: 7556 callbacks suppressed [ 139.517174][ T30] audit: type=1400 audit(1756453279.323:40668): avc: denied { mounton } for pid=6986 comm="syz.4.278" path="/61/file1" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 139.570889][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.606823][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.615714][ T30] audit: type=1400 audit(1756453279.323:40669): avc: denied { map_create } for pid=6986 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 139.645595][ T5513] audit: audit_lost=5603 audit_rate_limit=0 audit_backlog_limit=64 [ 139.682083][ T5513] audit: backlog limit exceeded [ 139.687261][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.702368][ T5852] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.709815][ T6996] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.724634][ T5852] audit: audit_lost=5604 audit_rate_limit=0 audit_backlog_limit=64 [ 139.726146][ T30] audit: type=1400 audit(1756453279.323:40670): avc: denied { map_create } for pid=6986 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.610906][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 140.844624][ T7014] FAULT_INJECTION: forcing a failure. [ 140.844624][ T7014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.865469][ T7014] CPU: 1 UID: 0 PID: 7014 Comm: syz.4.284 Not tainted syzkaller #0 PREEMPT(full) [ 140.865495][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.865505][ T7014] Call Trace: [ 140.865512][ T7014] [ 140.865519][ T7014] dump_stack_lvl+0x16c/0x1f0 [ 140.865553][ T7014] should_fail_ex+0x512/0x640 [ 140.865579][ T7014] _copy_to_user+0x32/0xd0 [ 140.865606][ T7014] simple_read_from_buffer+0xcb/0x170 [ 140.865629][ T7014] proc_fail_nth_read+0x197/0x240 [ 140.865652][ T7014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.865677][ T7014] ? rw_verify_area+0xcf/0x6c0 [ 140.865704][ T7014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.865729][ T7014] vfs_read+0x1e4/0xcf0 [ 140.865752][ T7014] ? __pfx___mutex_lock+0x10/0x10 [ 140.865775][ T7014] ? __pfx_vfs_read+0x10/0x10 [ 140.865802][ T7014] ? __fget_files+0x20e/0x3c0 [ 140.865832][ T7014] ksys_read+0x12a/0x250 [ 140.865851][ T7014] ? __pfx_ksys_read+0x10/0x10 [ 140.865880][ T7014] do_syscall_64+0xcd/0x4c0 [ 140.865904][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.865924][ T7014] RIP: 0033:0x7fd2b1f8d5fc [ 140.865941][ T7014] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.865958][ T7014] RSP: 002b:00007fd2b01f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.865976][ T7014] RAX: ffffffffffffffda RBX: 00007fd2b21b5fa0 RCX: 00007fd2b1f8d5fc [ 140.865989][ T7014] RDX: 000000000000000f RSI: 00007fd2b01f60a0 RDI: 0000000000000003 [ 140.866000][ T7014] RBP: 00007fd2b01f6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.866012][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.866023][ T7014] R13: 00007fd2b21b6038 R14: 00007fd2b21b5fa0 R15: 00007ffe86bedaa8 [ 140.866051][ T7014] [ 141.650903][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.670581][ T7042] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.690903][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.779273][ T7046] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 142.785807][ T7046] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.800285][ T7046] vhci_hcd vhci_hcd.0: Device attached [ 143.084738][ T7047] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 143.111352][ T5916] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 143.173705][ T59] vhci_hcd: stop threads [ 143.179852][ T59] vhci_hcd: release socket [ 143.205035][ T59] vhci_hcd: disconnect device [ 143.730878][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.178025][ T7069] sctp: [Deprecated]: syz.4.301 (pid 7069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.178025][ T7069] Use struct sctp_sack_info instead [ 144.195023][ T7069] sctp: [Deprecated]: syz.4.301 (pid 7069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.195023][ T7069] Use struct sctp_sack_info instead [ 144.515595][ T30] kauditd_printk_skb: 4713 callbacks suppressed [ 144.515629][ T30] audit: type=1400 audit(1756453284.333:44548): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.545435][ T30] audit: type=1400 audit(1756453284.333:44549): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.567744][ T30] audit: type=1400 audit(1756453284.333:44550): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.589575][ T30] audit: type=1400 audit(1756453284.333:44551): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.611681][ T30] audit: type=1400 audit(1756453284.333:44552): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.658312][ T30] audit: type=1400 audit(1756453284.333:44553): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.705237][ T30] audit: type=1400 audit(1756453284.333:44554): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.730994][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.739682][ T7075] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.756224][ T5513] audit: audit_lost=5884 audit_rate_limit=0 audit_backlog_limit=64 [ 144.771333][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.810911][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.850874][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.963773][ T7087] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 147.215118][ T7087] bond1: entered promiscuous mode [ 147.510469][ T7087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.584070][ T7088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.610177][ T7088] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 147.621354][ T7088] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 147.649524][ T7088] bond1: (slave vcan1): making interface the new active one [ 147.657543][ T7088] vcan1: entered promiscuous mode [ 147.665069][ T7088] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 147.890978][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.280987][ T5916] vhci_hcd: vhci_device speed not set [ 148.850088][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 148.930876][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.522895][ T30] kauditd_printk_skb: 16041 callbacks suppressed [ 149.522910][ T30] audit: type=1400 audit(1756453289.333:52397): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.549361][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.550935][ T30] audit: type=1400 audit(1756453289.343:52398): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.579331][ T30] audit: type=1400 audit(1756453289.343:52399): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.582655][ T5513] audit: audit_lost=8618 audit_rate_limit=0 audit_backlog_limit=64 [ 149.608860][ T30] audit: type=1400 audit(1756453289.343:52400): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.633165][ T5513] audit: backlog limit exceeded [ 149.633565][ T30] audit: type=1400 audit(1756453289.343:52401): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.638723][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.663800][ T30] audit: type=1400 audit(1756453289.343:52402): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.970969][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.010880][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.050928][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.432932][ T7184] FAULT_INJECTION: forcing a failure. [ 152.432932][ T7184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.622947][ T7184] CPU: 1 UID: 0 PID: 7184 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(full) [ 152.622974][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.622985][ T7184] Call Trace: [ 152.622992][ T7184] [ 152.623000][ T7184] dump_stack_lvl+0x16c/0x1f0 [ 152.623027][ T7184] should_fail_ex+0x512/0x640 [ 152.623053][ T7184] _copy_to_user+0x32/0xd0 [ 152.623080][ T7184] simple_read_from_buffer+0xcb/0x170 [ 152.623103][ T7184] proc_fail_nth_read+0x197/0x240 [ 152.623125][ T7184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.623147][ T7184] ? rw_verify_area+0xcf/0x6c0 [ 152.623174][ T7184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.623197][ T7184] vfs_read+0x1e4/0xcf0 [ 152.623220][ T7184] ? __pfx___mutex_lock+0x10/0x10 [ 152.623245][ T7184] ? __pfx_vfs_read+0x10/0x10 [ 152.623272][ T7184] ? __fget_files+0x20e/0x3c0 [ 152.623303][ T7184] ksys_read+0x12a/0x250 [ 152.623321][ T7184] ? __pfx_ksys_read+0x10/0x10 [ 152.623349][ T7184] do_syscall_64+0xcd/0x4c0 [ 152.623373][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.623393][ T7184] RIP: 0033:0x7fa605b8d5fc [ 152.623409][ T7184] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.623427][ T7184] RSP: 002b:00007fa6069e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.623446][ T7184] RAX: ffffffffffffffda RBX: 00007fa605db5fa0 RCX: 00007fa605b8d5fc [ 152.623459][ T7184] RDX: 000000000000000f RSI: 00007fa6069e60a0 RDI: 0000000000000004 [ 152.623470][ T7184] RBP: 00007fa6069e6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.623482][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.623493][ T7184] R13: 00007fa605db6038 R14: 00007fa605db5fa0 R15: 00007ffecaa799a8 [ 152.623520][ T7184] [ 153.091009][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.130913][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.532188][ T7221] netlink: 'syz.2.345': attribute type 10 has an invalid length. [ 154.539983][ T30] kauditd_printk_skb: 3370 callbacks suppressed [ 154.539998][ T30] audit: type=1400 audit(1756453294.343:55708): avc: denied { prog_load } for pid=7219 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 154.545025][ T7221] netlink: 2 bytes leftover after parsing attributes in process `syz.2.345'. [ 154.578944][ T7221] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.589784][ T7221] bridge0: port 1(team0) entered blocking state [ 154.596677][ T30] audit: type=1400 audit(1756453294.353:55709): avc: denied { create } for pid=7219 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 154.599822][ T7221] bridge0: port 1(team0) entered disabled state [ 154.636608][ T7224] FAULT_INJECTION: forcing a failure. [ 154.636608][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 154.655639][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(full) [ 154.655655][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.655662][ T7224] Call Trace: [ 154.655666][ T7224] [ 154.655671][ T7224] dump_stack_lvl+0x16c/0x1f0 [ 154.655688][ T7224] should_fail_ex+0x512/0x640 [ 154.655702][ T7224] ? __kmalloc_noprof+0xbf/0x510 [ 154.655715][ T7224] ? hci_alloc_dev_priv+0x1d/0x28a0 [ 154.655725][ T7224] should_failslab+0xc2/0x120 [ 154.655738][ T7224] __kmalloc_noprof+0xd2/0x510 [ 154.655753][ T7224] hci_alloc_dev_priv+0x1d/0x28a0 [ 154.655764][ T7224] hci_uart_tty_ioctl+0x38f/0xc30 [ 154.655779][ T7224] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 154.655791][ T7224] tty_ioctl+0x6fd/0x1680 [ 154.655804][ T7224] ? __pfx_tty_ioctl+0x10/0x10 [ 154.655816][ T7224] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.655838][ T7224] ? hook_file_ioctl_common+0x145/0x410 [ 154.655854][ T7224] ? selinux_file_ioctl+0x180/0x270 [ 154.655869][ T7224] ? selinux_file_ioctl+0xb4/0x270 [ 154.655885][ T7224] ? __pfx_tty_ioctl+0x10/0x10 [ 154.655898][ T7224] __x64_sys_ioctl+0x18b/0x210 [ 154.655916][ T7224] do_syscall_64+0xcd/0x4c0 [ 154.655930][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.655942][ T7224] RIP: 0033:0x7f148a18ebe9 [ 154.655952][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.655963][ T7224] RSP: 002b:00007f148b0b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.655973][ T7224] RAX: ffffffffffffffda RBX: 00007f148a3b5fa0 RCX: 00007f148a18ebe9 [ 154.655981][ T7224] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000008 [ 154.655987][ T7224] RBP: 00007f148b0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 154.655994][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.656000][ T7224] R13: 00007f148a3b6038 R14: 00007f148a3b5fa0 R15: 00007ffceaf983d8 [ 154.656015][ T7224] [ 154.656020][ T7224] Bluetooth: Can't allocate HCI device [ 154.881976][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.889493][ T7221] team0: entered allmulticast mode [ 154.903766][ T7226] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 154.915818][ T7226] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 154.916440][ T30] audit: type=1400 audit(1756453294.373:55710): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.924218][ T7226] CPU: 0 UID: 0 PID: 7226 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(full) [ 154.924240][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.924250][ T7226] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 154.924278][ T7226] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 6a 30 41 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 154.924295][ T7226] RSP: 0018:ffffc9001ca9fbf0 EFLAGS: 00010293 [ 154.947678][ T30] audit: type=1400 audit(1756453294.373:55711): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.954507][ T7226] [ 154.954515][ T7226] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a5b4a [ 154.954528][ T7226] RDX: ffff8880284da440 RSI: ffffffff887a5b96 RDI: 0000000000000005 [ 154.954538][ T7226] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 154.954548][ T7226] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9001ca9fd88 [ 154.954559][ T7226] R13: ffffc9001ca9fd88 R14: 0000000000000001 R15: ffff888059a11400 [ 154.954571][ T7226] FS: 00007f148b0946c0(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 154.954587][ T7226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.954599][ T7226] CR2: 00007f148b093f98 CR3: 000000007423b000 CR4: 00000000003526f0 [ 154.954611][ T7226] Call Trace: [ 154.966317][ T30] audit: type=1400 audit(1756453294.373:55712): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.969716][ T7226] [ 154.993570][ T30] audit: type=1400 audit(1756453294.373:55713): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.995326][ T7226] ? __pfx_bcsp_recv+0x10/0x10 [ 155.016630][ T5513] audit: audit_lost=8641 audit_rate_limit=0 audit_backlog_limit=64 [ 155.018677][ T7226] hci_uart_tty_receive+0x254/0x7e0 [ 155.037119][ T5513] audit: backlog limit exceeded [ 155.042503][ T7226] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 155.042532][ T7226] tty_ioctl+0x580/0x1680 [ 155.042552][ T7226] ? __pfx_tty_ioctl+0x10/0x10 [ 155.042569][ T7226] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 155.174223][ T7226] ? hook_file_ioctl_common+0x145/0x410 [ 155.179774][ T7226] ? selinux_file_ioctl+0x180/0x270 [ 155.184968][ T7226] ? selinux_file_ioctl+0xb4/0x270 [ 155.190076][ T7226] ? __pfx_tty_ioctl+0x10/0x10 [ 155.194838][ T7226] __x64_sys_ioctl+0x18b/0x210 [ 155.199597][ T7226] do_syscall_64+0xcd/0x4c0 [ 155.204082][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.209956][ T7226] RIP: 0033:0x7f148a18ebe9 [ 155.214350][ T7226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.233939][ T7226] RSP: 002b:00007f148b094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.242328][ T7226] RAX: ffffffffffffffda RBX: 00007f148a3b6090 RCX: 00007f148a18ebe9 [ 155.250280][ T7226] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000008 [ 155.258230][ T7226] RBP: 00007f148a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 155.266175][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.274122][ T7226] R13: 00007f148a3b6128 R14: 00007f148a3b6090 R15: 00007ffceaf983d8 [ 155.282081][ T7226] [ 155.285076][ T7226] Modules linked in: [ 155.290782][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.294837][ T30] audit: type=1400 audit(1756453294.373:55714): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.298116][ T7226] ---[ end trace 0000000000000000 ]--- Aug 29 07:41:34 syzkaller kern.alert kernel: [ 154.915818][ T7226] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 155.365115][ T7226] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 155.370913][ T7226] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 6a 30 41 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 155.400647][ T7226] RSP: 0018:ffffc9001ca9fbf0 EFLAGS: 00010293 [ 155.407351][ T7226] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a5b4a [ 155.419277][ T7226] RDX: ffff8880284da440 RSI: ffffffff887a5b96 RDI: 0000000000000005 [ 155.427629][ T7226] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 155.437269][ T7226] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9001ca9fd88 [ 155.445802][ T7226] R13: ffffc9001ca9fd88 R14: 0000000000000001 R15: ffff888059a11400 [ 155.455564][ T7226] FS: 00007f148b0946c0(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 155.464805][ T7226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.473603][ T7226] CR2: 0000000000000000 CR3: 000000007423b000 CR4: 00000000003526f0 [ 155.481994][ T7226] Kernel panic - not syncing: Fatal exception [ 155.488295][ T7226] Kernel Offset: disabled [ 155.492594][ T7226] Rebooting in 86400 seconds..