last executing test programs: 45.863317618s ago: executing program 2 (id=76): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x57de, 0x0, 0xf00000000000000, 0x0, 0x0) 45.255350866s ago: executing program 2 (id=79): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x201, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x1, 0x100) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="0349ee47070c03607b5bae292ac8b762044157dd1ea30758ca9a7bfbd23efe5ba3cf173f0478438cbae7a57fe81ae074996dfd64d0c8db1c53c331a33a95a0d2cb94d0cd09f710c11df6be5cc730821bae016a0ea4073e7e4bd62cc1aff09c799d1ebe2a8388a02e50dd19c4b7b1e91a0a1d8904b32b45710d16dc796b719e7adabac89602c834ff01f6b5839643d5a2d8edb9d77af834a7fb82c2fdbdedbab80f961971ed25e2cee13220d342969544a6ce40ead993604e38deb309b330177ed7d23f919596f483ece2d540a95568272a0e879281d83615f589c89e1a7b0cea2a2fac406dbe67256f354a79cb99de0f7e1f4aa617405f284bca8cea6048f1155a89e98746e6912a7509caca768fd2b1ae942cce6a29d848f660b18ca860f9e5f9d95562c4a19fdd9b59932a453a934f0b98fa91129d29dfa2f8f21424c590ed8fe31a79ba09ef72c497ddd5ce7826e096e30746772e34cfc47e9eb5b56187132d87702b56e40d6751a58f9e6aa732d610f7aa631759a3afa266f730a0ee4a8d93555ba710d1bfb9ea4d633faee1529b8565af53eb34cfaca3e31dda587c2be2df3fe5a5a0e2a500eb8cc40db50854a6ec225fca2900148eb7a83c9189cedd69b7eb874f92f00f7635510d2dc062cfcfd8c9a473ac15c7ffbcc56399f6150750d7090917358870f16f684528a9d69bac3046256ad4e101073115712a89b0dd76fe5e8648696ce8dfe82b3220807dd7a446cd158fdf9426b7ddab8584eefb4152d25757e2642b77a21b364327ea38e911f60e6e6718730942c1db47cf80f16aac0950a5c2d412c620b526dca7f601a25b0089f69652889f0ac0667980d074e48dd8d20096097b772317cb8ba11531bd353d584f278e5b2565456f4997f73541add2e336a9beba29baeea7df3bbc5ad5f00c7c6f3c1ba93fbc1dba159497752eefa611d14f26b7c9a07aacda2e9b7572ea3fa66f67c04ee30f0e8f94038c01de81689c12fc44c71ed2b93b31ddc0d9acf62e6e9d71699d0d987ae87c529fcd79ab48433a43ed86d09095bf8d9798f80bbdd36d4ddeb90e752ac9e96079cfa4595daaed34df23e3771b791f3a54f86be3fe4a41f41c8d0f3a28cac2bf926eb95c8badf9fd2d0eb767664872417a08dade17937cadc00a8e3afe349d0e7a3cdfc1b1af108a7a5142a2b5832e99aff5ef27b525d4ea83d1523210c6cc673bcf42cc2e4561d2e8abad128992074d0aaa467eae584f62d347b70fa4f282f463ea0c916ec2e5b8490c87347bc70a11e9748a844d45cc744847e89acbb2e0bc03014c4865d426f52a460b1c0354fb90e4b882e23b674606737e5b878d1f18628f8f2389a071b0d2c64bcdb634b59e2effaabed7ee7812002956e776c039b16bd1cb0b663f4c8a16ad422856f7e6de282b33f268ff11f7972678bd337373b399e514c4dbebfcb812edc05f0e60b68df71682244b458009b85ee038722fc4b6b0c322d6d59ae9d290870d9c86707ad7f080f53d883454526ca942d6b6232cac0b378f0f2bb5209d93e2487a80a9677ac6b850d88cf1f8d47a5f5b534ad4cbf459235fd3662513ac1c53f0ba321b3cf9ede7b9a7e712fc5bf0b17cd164ef34178b3b06ec995106af31c7ffbe5a2bda35a9df9cd31d877d304dd1bd16caf5560ed991dadf378d9deb8f495b0d084ff28f87b305a3a849efcabd48b3e515dc6acd7b61589c10bb0e68dc10eef57e9e59aaba78c04c59c6f8c1d860227133fca4ff352634eb6caad1afbbbfe47fa2646819ec282ca1fb73bcbbc7315782e574b2fb1e842ed83862f9fc380a7e92b3c02af1", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70ba82603356704de3f11", 0x12}, {&(0x7f0000000200)="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", 0x10e}], 0x3}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x541}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="e14197099518697c79cf37898ea300da0c2c353eea95b0648f6dcf8c80a99aa836283fe704b236f5ecad37fdc70e8dbd85a8308f1424019d6a0ce43be696a884cad415b94cd6846d46870523e2b4644e17eafda922b3", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000002f01f4fff0ffffff85100000fcffffff85200000050000009500000000000000c443fefff0ffffffbf91000000000000b7020000000000008500000085000000b700000000000000950000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 45.097178605s ago: executing program 0 (id=80): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=[{0x20, 0x84, 0x8, "941f6721e757691d02"}], 0x20}, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0701000000f809000500feff"], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 44.893219931s ago: executing program 0 (id=83): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a31000000001800078005000300310000000c00018008000140ac1e0101050005000200000005000100ff"], 0x60}, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x4, 0xd48, {{0x18, 0x4, 0x2, 0xb, 0x60, 0x64, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x31}, {[@ssrr={0x89, 0xb, 0x3a, [@dev={0xac, 0x14, 0x14, 0x33}, @broadcast]}, @noop, @timestamp_addr={0x44, 0x3c, 0xb2, 0x1, 0x6, [{@broadcast, 0x9}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010102, 0xffffd135}, {@rand_addr=0x64010101, 0x2}, {@rand_addr=0x64010102, 0x8001}, {@loopback, 0x5}]}, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x700, 0x40, 0x26a, 0x0, {{0x36, 0x4, 0x3, 0xd, 0xd8, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @remote, {[@end, @cipso={0x86, 0x57, 0x0, [{0x6, 0x7, "56fe35f328"}, {0x0, 0xc, "ce6d53cb502f90c9a637"}, {0x0, 0x5, "8d9302"}, {0x7, 0x7, "d603503983"}, {0x7, 0x4, "c6b8"}, {0x7, 0xc, "986dd3e6cb9dc5584b44"}, {0x6, 0x9, "b090079b51b91e"}, {0x6, 0x10, "2aa917951db0663a89be2e9a7408"}, {0x1, 0x9, "cd1e38a5d67286"}]}, @timestamp_prespec={0x44, 0x34, 0x5, 0x3, 0x0, [{@broadcast, 0x3}, {@empty, 0x1}, {@broadcast, 0x9}, {@empty, 0x1}, {@multicast2, 0x4}, {@local, 0xcfd0}]}, @rr={0x7, 0x17, 0xc3, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast2, @local, @broadcast, @local]}, @generic={0x94, 0xd, "015d93f741ab3cfc6cd05c"}, @rr={0x7, 0x13, 0x3a, [@private=0x4, @multicast1, @local, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x40, 0x40, 0x80000001, 0x377, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x64, 0x0, 0x6, 0x29, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x8, [{@private=0xa010100, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000680)={@rand_addr, @local, 0x0}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x10, 0x8000, 0x9, 0x10000, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010100, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000dc0)={0x620, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffc3f2}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xac}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x81, 0xf, 0xc125}, {0x5, 0x9, 0x5, 0x3ff}, {0x347d, 0x0, 0x3}, {0x80, 0x5e, 0x4, 0x5}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x1, 0x5, 0xd}, {0x7de, 0x2, 0x8, 0x1}, {0x3, 0x8, 0x2, 0x7}, {0x1, 0xc, 0x2, 0x200}, {0xb00, 0xff, 0xa, 0x3}, {0xfff, 0x50, 0x5, 0x8}, {0x925, 0xf8, 0x6, 0xe}]}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r13}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x620}}, 0x20004040) socket$packet(0x11, 0x2, 0x300) r14 = getpid() sched_setscheduler(r14, 0x2, &(0x7f0000000200)=0x6) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r15, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r16, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c5}, 0x20004000) sched_setaffinity(r14, 0x8, &(0x7f0000000080)=0x8001) close_range(r0, 0xffffffffffffffff, 0x0) 42.023205497s ago: executing program 2 (id=91): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1bc, r0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @local, 0x2f4b}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) r1 = socket(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 41.428075025s ago: executing program 0 (id=93): syz_clone(0x20848000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4bfa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = add_key(0x0, 0x0, 0x0, 0xfffffffffffffd3d, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c0000001000370429bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c0400000000003c0012800b000100697036746e6c00002c00028014000300fc020000000000000000000000000000140002000000000000000000000093"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) madvise(&(0x7f000006f000/0x4000)=nil, 0x4000, 0x19) 40.082336358s ago: executing program 4 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x7, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff04800000080039503230"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) 38.366630877s ago: executing program 4 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0x8, &(0x7f0000000140)={0xad, 0x1003}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00006ac000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xe0f24000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmmsg$unix(r3, &(0x7f00000012c0)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000400)="b4c15de04b4482ef39381eb6b25e75a37e09b22a6dfee647735642979df8ba034b2b428ff0664c0f1d57389e908dab0653c2de92971e48dd13f89e443f81b324dd9ca3c44a824473de9a472f6dfbe5ee7ce60a883bb3f96839e12d6b6179bb3ba83463adb02edd95f614c95da0097c240ffd57fe3ddbe00bcf6d6d75ee0a991b9c49db474b2bab784186eee1e63d848c7628a030bcba9b25805f4d25d0da9d580512d2d3d0bed3ab6e923ede3a17e3ea40", 0xb1}, {&(0x7f0000000540)="cf4f4fb6c6600858325a3f239abf8efff9b1f6e3d0a6bff13baf44e74828a1d395ad8ba47c5e77d37f52cffb42ed9546b8737f1755055a934667538561cbdf59dce6f4463a361e4f5c82e1fee193002c7dc4bc9e18359de6e9daaa6a27d41cf83401e4800b1c20460bd8ec58237bb7bb4a6bb0b799da532cd8080870b5cbaed9a1d6007e476ad73079febea2ca1cdacf5ec996fc11cbafc74c626e35bb6894d6f8c9ed5da279da33c468b9", 0xab}, {&(0x7f0000000600)="5e9c74eb6037243a6a36666602439b56ce4dae1e5f9e86aefd09277ac23460efe510db65a4e683e75832c82db3902ae5afb0056ac3a1ca5ef06e926f48fece253391e02805", 0x45}], 0x3, &(0x7f0000000180)=[@rights={{0x20, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, r3]}}], 0x20, 0x4c040}}, {{&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000880)="345330ea3d4b4d8c6871eb0cc46825449b0ee68dfbae2714ea1119a4f0796f1bf9bdc53db5ba692092237a8ff1f264576f78b49975a623f5b2deea4dda25e422509c67baccaef22e5c16cbd39ecd2510510517a143cc6b2056d1c07bfee56467214140b5c080d6d5e9883622b123a84c2258d0a29762e9d8d3c661092257eb5a2f1322f61848df1b7bb92695c1308c913a0c3818fd6fcc9a5b33d48e67d1072f21694e6edde5bfb4fa2e7df5be4d8e97d28016f63f827d2e2342b7de212b98b47c", 0xc1}, {&(0x7f0000000240)="cdaaf9334adea23b128d5e69785ec4e4d8ae6f45da913f0677c588a019d309fa255c2c7ab99db9046406a861", 0x2c}, {&(0x7f0000000980)="e7aae91934419db0ff0c4d83f78b45d22f46af3d6714c46798a6260a2746c0c9588a6d0807278ef14b59e939ffe2f413f95fcf7ee5e8967face3ceb387ffe4fe4552608ab86f49eada974a25bf9693137427749fd4ec95ae900ccc60946638e5905c9f43a0ba0193294a724d77df4d4805368a85dea06e27c5d6922bccbba7a30c941a5cbdca2fc36d4001802a2d203964a2c3dfad9472de97a60840c5059a3bf713117de100fbc543b6073c657e9230b3cfb8ba384b13ccaee193a91037911f1a1db78795b47875e7cdefc68d56754a32", 0xd1}, {&(0x7f0000000a80)="46c52053838de878fa22b20cf9c0a4a2c321a7811b164552c72388a90a4375235aa611b57971ae2ceea35c6f5fc9720b4bd9572368026d2d2224ec29c1cdbac57ed8272097583f16b1aa1b70b8dff7b5a82bb58ec58914b9796f448fef8c1c4e300d4cd84b728048d05fa7b5c276abab86a9d73028b33b0a5748ea36ea21abc11c9901e8c26f843c4ff67cfd7b6663ddebfafd4df4b4f78d95e7972323dba92cac11a60d57926fb6e986c6da44b35e9e6fefb913173e45ad258a80e458c6fe3aefe144bfb45fa558efa2e2baae0ac6b9918b7fbfb9bd8a2b91626d5507a50540d9", 0xe1}, {&(0x7f0000000b80)="6311dc188d6b953373803bd8110a0b8fcb9346facb517847e09af48c711eeb9b270b753be8e62617e294bae7b50d262975da7943a80e45a82542a0bf1d7c483d424ca2d78dd35ba0a67a0f107e8e7a9f1c4a79dd4d58f1cb4d458827057a574de2b6900500a33ae368444be9e9c0900542c2f1f392033b473d62d82aff87cdf1a053e87e31d73429679efb6228c24c534f11fb2161a469a1da1fa325642463db942e5c9cc3201ad1e1d43ae002ba4a01f40ff37cc794c9ac432ba4cbf2af6196f31abf1ed356b1efae91e4b1533b", 0xce}], 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000180000000000000001000000010000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32], 0x118, 0xd53cd62ded2645e8}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a00, 0x0) 38.214571382s ago: executing program 2 (id=103): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYRES64=r1], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, &(0x7f0000000040)={0x4, "11988c7ba5bb888131cac156c94e0a000000000000df5be03664724d1dd748c3fa198dcd95bf761a3a4c868b46327ff700000000000000005026b76100"}) write$UHID_DESTROY(r6, &(0x7f00000001c0), 0x4) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES8=r5], 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x800, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r10 = dup3(r9, r8, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000680)=[@release={0x40046306, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/3, 0x3, 0x0, 0x1d}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/89, 0x59, 0x0, 0x28}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000c40)={0x68, 0x0, &(0x7f00000004c0)=[@dead_binder_done, @increfs_done={0x40106308, 0x3}, @dead_binder_done, @increfs_done={0x40106308, 0x3}, @dead_binder_done, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x10b, 0x3}, @fda={0x66646185, 0x4, 0x2, 0x3b}, @fda={0x66646185, 0x1, 0x0, 0x33}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)="f1", 0x1) 37.514538557s ago: executing program 0 (id=104): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00007d8000/0x1000)=nil) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 37.274954027s ago: executing program 4 (id=106): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1a, 0xa, 0x0, "ba2000fc0000000000ffff00"}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) 37.183209868s ago: executing program 3 (id=107): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'ip_vti0\x00'}) r5 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r5, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000001000030400000000000096ac43d2b922", @ANYRES32=0x0, @ANYBLOB="20000000089800002c00128009000100766c616e000000001c0002800600010000000000100003800c000100400000000600020008000a00", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="0500100001000000"], 0x64}, 0x1, 0xba01, 0x0, 0x20004401}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'caif0\x00'}) 35.881347919s ago: executing program 3 (id=108): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0x0, [0x8000, 0xffff, 0x7, 0x5, 0x4, 0x80], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x108) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x8360}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e23, 0x7a, @local, 0x2}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @loopback}], 0x94) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/dsp\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001010}, 0x50) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r8, 0x0, 0x84) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10}) close_range(r1, 0xffffffffffffffff, 0x0) 35.63023159s ago: executing program 0 (id=109): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000740)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x20, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)=',', 0x1}, {0x0}], 0x2) socket$kcm(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 35.05868888s ago: executing program 3 (id=110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x38, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0xc0002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140)="260000002200470105a600070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 34.921730658s ago: executing program 1 (id=111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$getflags(r4, 0xb) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r6, 0x3b8d, &(0x7f0000000280)={0x20, r7, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d80000001c0081044e81f782db44b904021d080214000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803610cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x80) 34.282561067s ago: executing program 2 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) r1 = inotify_init1(0x0) ppoll(&(0x7f0000000340)=[{r1, 0x4018}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x101001) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000125c0), 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000012600)=@l={0x92, 0x8, 0xb0, 0x1b, 0x8, 0xdb, 0x8}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000000c0), 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x1a0, 0x21, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in=@remote, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x33, 0x1, 0x0, 0x3502, 0x2, 0xa}, {@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@remote, @in6=@remote, 0x33, 0x3, 0x0, 0x0, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in=@empty, @in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x32, 0x1, 0x0, 0x3506, 0x1c, 0x2}, {@in6=@empty, @in=@multicast1, @in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x25, 0x0, 0x0, 0x3504, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in6=@private1}}]}, 0x1a0}}, 0x20000100) 33.401105787s ago: executing program 4 (id=113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 32.801602333s ago: executing program 3 (id=114): syz_open_dev$dri(0x0, 0x140000000000000, 0x149042) r0 = socket(0x10, 0x2, 0x0) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f00000000c0)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0xc, 0x258bd5, 0x2e7883}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000003400)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_ACCEPT_LIST={{0x4}, 0xfd}}}, 0x7) 32.727774954s ago: executing program 1 (id=115): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe8d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r7, &(0x7f00000015c0)=[{&(0x7f00000001c0)="020054", 0x3}], 0x1) pidfd_getfd(r6, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) socket$inet(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(0x0, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e1, 0x3f, 0x1, 0x1, 0x0, 0x0, {0x0, 0x40000}, {0xfffffffd}, {0x0, 0x0, 0xfffffffc}, {0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) 31.586738636s ago: executing program 1 (id=116): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00007d8000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000800000/0x800000)=nil) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 31.527161493s ago: executing program 4 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0x8, &(0x7f0000000140)={0xad, 0x1003}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00006ac000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xe0f24000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmmsg$unix(r3, &(0x7f00000012c0)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000400)="b4c15de04b4482ef39381eb6b25e75a37e09b22a6dfee647735642979df8ba034b2b428ff0664c0f1d57389e908dab0653c2de92971e48dd13f89e443f81b324dd9ca3c44a824473de9a472f6dfbe5ee7ce60a883bb3f96839e12d6b6179bb3ba83463adb02edd95f614c95da0097c240ffd57fe3ddbe00bcf6d6d75ee0a991b9c49db474b2bab784186eee1e63d848c7628a030bcba9b25805f4d25d0da9d580512d2d3d0bed3ab6e923ede3a17e3ea40", 0xb1}, {&(0x7f0000000540)="cf4f4fb6c6600858325a3f239abf8efff9b1f6e3d0a6bff13baf44e74828a1d395ad8ba47c5e77d37f52cffb42ed9546b8737f1755055a934667538561cbdf59dce6f4463a361e4f5c82e1fee193002c7dc4bc9e18359de6e9daaa6a27d41cf83401e4800b1c20460bd8ec58237bb7bb4a6bb0b799da532cd8080870b5cbaed9a1d6007e476ad73079febea2ca1cdacf5ec996fc11cbafc74c626e35bb6894d6f8c9ed5da279da33c468b9", 0xab}, {&(0x7f0000000600)="5e9c74eb6037243a6a36666602439b56ce4dae1e5f9e86aefd09277ac23460efe510db65a4e683e75832c82db3902ae5afb0056ac3a1ca5ef06e926f48fece253391e02805", 0x45}], 0x3, &(0x7f0000000180)=[@rights={{0x20, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, r3]}}], 0x20, 0x4c040}}, {{&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000880)="345330ea3d4b4d8c6871eb0cc46825449b0ee68dfbae2714ea1119a4f0796f1bf9bdc53db5ba692092237a8ff1f264576f78b49975a623f5b2deea4dda25e422509c67baccaef22e5c16cbd39ecd2510510517a143cc6b2056d1c07bfee56467214140b5c080d6d5e9883622b123a84c2258d0a29762e9d8d3c661092257eb5a2f1322f61848df1b7bb92695c1308c913a0c3818fd6fcc9a5b33d48e67d1072f21694e6edde5bfb4fa2e7df5be4d8e97d28016f63f827d2e2342b7de212b98b47c", 0xc1}, {&(0x7f0000000240)="cdaaf9334adea23b128d5e69785ec4e4d8ae6f45da913f0677c588a019d309fa255c2c7ab99db9046406a861", 0x2c}, {&(0x7f0000000980)="e7aae91934419db0ff0c4d83f78b45d22f46af3d6714c46798a6260a2746c0c9588a6d0807278ef14b59e939ffe2f413f95fcf7ee5e8967face3ceb387ffe4fe4552608ab86f49eada974a25bf9693137427749fd4ec95ae900ccc60946638e5905c9f43a0ba0193294a724d77df4d4805368a85dea06e27c5d6922bccbba7a30c941a5cbdca2fc36d4001802a2d203964a2c3dfad9472de97a60840c5059a3bf713117de100fbc543b6073c657e9230b3cfb8ba384b13ccaee193a91037911f1a1db78795b47875e7cdefc68d56754a32", 0xd1}, {&(0x7f0000000a80)="46c52053838de878fa22b20cf9c0a4a2c321a7811b164552c72388a90a4375235aa611b57971ae2ceea35c6f5fc9720b4bd9572368026d2d2224ec29c1cdbac57ed8272097583f16b1aa1b70b8dff7b5a82bb58ec58914b9796f448fef8c1c4e300d4cd84b728048d05fa7b5c276abab86a9d73028b33b0a5748ea36ea21abc11c9901e8c26f843c4ff67cfd7b6663ddebfafd4df4b4f78d95e7972323dba92cac11a60d57926fb6e986c6da44b35e9e6fefb913173e45ad258a80e458c6fe3aefe144bfb45fa558efa2e2baae0ac6b9918b7fbfb9bd8a2b91626d5507a50540d9", 0xe1}, {&(0x7f0000000b80)="6311dc188d6b953373803bd8110a0b8fcb9346facb517847e09af48c711eeb9b270b753be8e62617e294bae7b50d262975da7943a80e45a82542a0bf1d7c483d424ca2d78dd35ba0a67a0f107e8e7a9f1c4a79dd4d58f1cb4d458827057a574de2b6900500a33ae368444be9e9c0900542c2f1f392033b473d62d82aff87cdf1a053e87e31d73429679efb6228c24c534f11fb2161a469a1da1fa325642463db942e5c9cc3201ad1e1d43ae002ba4a01f40ff37cc794c9ac432ba4cbf2af6196f31abf1ed356b1efae91e4b1533b", 0xce}], 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000180000000000000001000000010000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32], 0x118, 0xd53cd62ded2645e8}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a00, 0x0) 31.211624046s ago: executing program 0 (id=118): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1}}) syz_open_dev$sg(0x0, 0x2, 0x4ce681) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x5602, &(0x7f0000000000)={0x0, "96d3e9659db3f50cb3c4e683f4fae026a3b284dd56630882be4bc0f34042227a71f06b95d73e34c8ecf3325e43f75f16f13d8905d3bdce627dc6ae0b14840f4c8bebc40872293c61ddd293631a22c6d5c8c9b16b987f4326874ddc5e2610c5505cea115e51bf6feb3e93cf89b8f44394fa2ac7f6cf757a9416c7545c5e5caa34450f0397d179f2225b57f644ce8ad31b15547b9364daef8e784f2036a75c3c5cfd124cdd424a558ea90d054d36c0d1d0db92e5e7f668dadcbfaed92c7cf3204be0c4904d308feba3447d7f41a58bc2fd4682e306a592696e4de9427d87c008d3e172cf162cc35f00915fe9fc9ea84e28838940e4bb2fda4c55a34abdf6db63d547c91a17211a1ce43a2933f8227e8b6767ab70bc9223e62a2d3ad9b13f74e2000961e62eaea005088d6d74a19eb0c56ce314323143fcfe27e410e10bd21a2140783385bdb1a7d33038427e336829ccfb63c04e537ca51ddae5fdf29505fca04fc4b2a13d6dad7db2eace60e9589712719a49a2d2d44587465037851b1fe93a0ed46822294671098fd53e79fe428bf6ae3846299ab1d238ad07be6cc01b5fcaacfce829c209e67d5548a38b637f3b44905b8be24dfba30e1b6d074b43e53fcded14a4190a585949baa43fef6c70ce7b1612299d734c07feed23252886a1317358cf5ecaf0186d2dbdb3eab8a9c3c21d4828ef8a9dd89207f2884a57679fcd495a"}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) set_mempolicy(0x2002, &(0x7f0000000040)=0xa, 0x89) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000700), 0xeba, 0x80) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 31.014089548s ago: executing program 2 (id=119): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00007d8000/0x1000)=nil) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 29.976287589s ago: executing program 1 (id=120): syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000000580)=""/102400, 0x19000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0xfffffffffffffc03, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f0000000500)) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@hyper, 0x6}, 0x400, "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"}, 0x418}) 29.974102116s ago: executing program 3 (id=121): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x201, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x1, 0x100) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="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", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70ba82603356704de3f11", 0x12}, {&(0x7f0000000200)="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", 0x117}], 0x3}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x541}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="e14197099518697c79cf37898ea300da0c2c353eea95b0648f6dcf8c80a99aa836283fe704b236f5ecad37fdc70e8dbd85a8308f1424019d6a0ce43be696a884cad415b94cd6846d46870523e2b4644e17eafda922b3", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000002f01f4fff0ffffff85100000fcffffff85200000050000009500000000000000c443fefff0ffffffbf91000000000000b7020000000000008500000085000000b700000000000000950000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 29.972729506s ago: executing program 4 (id=122): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000150a01020000c20000000000000000000800034000000006"], 0x1c}, 0x1, 0x0, 0x0, 0x10024804}, 0x24040808) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000190c0)}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000001240)=""/4076, &(0x7f00000010c0)=0xfec) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) accept4(r6, 0x0, 0x0, 0x800) 29.324390441s ago: executing program 1 (id=123): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, 0x0, 0x0) 29.082468365s ago: executing program 1 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102372, 0xffffffc2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) socket(0x11, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r5 = syz_open_procfs(0x0, &(0x7f0000001a80)='net/snmp\x00') preadv(r5, &(0x7f0000003c00)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1, 0x2, 0x77f83464) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400010029bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB=' ', @ANYBLOB="00a79500ff020000230000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 26.929540067s ago: executing program 3 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, 0x0, 0xffdd) 6.35140708s ago: executing program 32 (id=118): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1}}) syz_open_dev$sg(0x0, 0x2, 0x4ce681) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x5602, &(0x7f0000000000)={0x0, "96d3e9659db3f50cb3c4e683f4fae026a3b284dd56630882be4bc0f34042227a71f06b95d73e34c8ecf3325e43f75f16f13d8905d3bdce627dc6ae0b14840f4c8bebc40872293c61ddd293631a22c6d5c8c9b16b987f4326874ddc5e2610c5505cea115e51bf6feb3e93cf89b8f44394fa2ac7f6cf757a9416c7545c5e5caa34450f0397d179f2225b57f644ce8ad31b15547b9364daef8e784f2036a75c3c5cfd124cdd424a558ea90d054d36c0d1d0db92e5e7f668dadcbfaed92c7cf3204be0c4904d308feba3447d7f41a58bc2fd4682e306a592696e4de9427d87c008d3e172cf162cc35f00915fe9fc9ea84e28838940e4bb2fda4c55a34abdf6db63d547c91a17211a1ce43a2933f8227e8b6767ab70bc9223e62a2d3ad9b13f74e2000961e62eaea005088d6d74a19eb0c56ce314323143fcfe27e410e10bd21a2140783385bdb1a7d33038427e336829ccfb63c04e537ca51ddae5fdf29505fca04fc4b2a13d6dad7db2eace60e9589712719a49a2d2d44587465037851b1fe93a0ed46822294671098fd53e79fe428bf6ae3846299ab1d238ad07be6cc01b5fcaacfce829c209e67d5548a38b637f3b44905b8be24dfba30e1b6d074b43e53fcded14a4190a585949baa43fef6c70ce7b1612299d734c07feed23252886a1317358cf5ecaf0186d2dbdb3eab8a9c3c21d4828ef8a9dd89207f2884a57679fcd495a"}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) set_mempolicy(0x2002, &(0x7f0000000040)=0xa, 0x89) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000700), 0xeba, 0x80) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 5.241917512s ago: executing program 33 (id=119): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00007d8000/0x1000)=nil) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.685214001s ago: executing program 34 (id=122): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000150a01020000c20000000000000000000800034000000006"], 0x1c}, 0x1, 0x0, 0x0, 0x10024804}, 0x24040808) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000190c0)}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000001240)=""/4076, &(0x7f00000010c0)=0xfec) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) accept4(r6, 0x0, 0x0, 0x800) 1.734048265s ago: executing program 35 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102372, 0xffffffc2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) socket(0x11, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r5 = syz_open_procfs(0x0, &(0x7f0000001a80)='net/snmp\x00') preadv(r5, &(0x7f0000003c00)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1, 0x2, 0x77f83464) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400010029bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB=' ', @ANYBLOB="00a79500ff020000230000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 0s ago: executing program 36 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, 0x0, 0xffdd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 58.433959][ T30] audit: type=1400 audit(1747795698.520:66): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.437699][ T5799] cgroup: Unknown subsys name 'net' [ 58.456717][ T30] audit: type=1400 audit(1747795698.520:67): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.487212][ T30] audit: type=1400 audit(1747795698.580:68): avc: denied { unmount } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.673060][ T5799] cgroup: Unknown subsys name 'cpuset' [ 58.680934][ T5799] cgroup: Unknown subsys name 'rlimit' [ 58.816287][ T30] audit: type=1400 audit(1747795698.900:69): avc: denied { setattr } for pid=5799 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.851335][ T30] audit: type=1400 audit(1747795698.900:70): avc: denied { create } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.872220][ T30] audit: type=1400 audit(1747795698.900:71): avc: denied { write } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.892906][ T30] audit: type=1400 audit(1747795698.900:72): avc: denied { read } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.913347][ T30] audit: type=1400 audit(1747795698.920:73): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.934296][ T30] audit: type=1400 audit(1747795698.930:74): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.942477][ T5803] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.959198][ T30] audit: type=1400 audit(1747795698.930:75): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.886344][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.502462][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 63.502476][ T30] audit: type=1400 audit(1747795703.590:82): avc: denied { create } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.572107][ T30] audit: type=1400 audit(1747795703.610:83): avc: denied { read write } for pid=5809 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.606809][ T30] audit: type=1400 audit(1747795703.610:84): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.628468][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.630973][ T30] audit: type=1400 audit(1747795703.630:85): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="socket:[3022]" dev="sockfs" ino=3022 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.660688][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.671702][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.679148][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.686773][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.695169][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.702795][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.710232][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.715237][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.718219][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.732499][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.738848][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.741268][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.748262][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.754870][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.761716][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.768599][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.775213][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.788768][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.789336][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.796851][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.805112][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.811330][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.829291][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.836479][ T30] audit: type=1400 audit(1747795703.910:86): avc: denied { read } for pid=5814 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.858272][ T30] audit: type=1400 audit(1747795703.910:87): avc: denied { open } for pid=5812 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.891955][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.898957][ T30] audit: type=1400 audit(1747795703.930:88): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.222804][ T30] audit: type=1400 audit(1747795704.310:89): avc: denied { module_request } for pid=5809 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 64.343748][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 64.390809][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 64.434517][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 64.482034][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 64.569454][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 64.639777][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.647076][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.655121][ T5809] bridge_slave_0: entered allmulticast mode [ 64.662030][ T5809] bridge_slave_0: entered promiscuous mode [ 64.671448][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.678689][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.685919][ T5809] bridge_slave_1: entered allmulticast mode [ 64.693422][ T5809] bridge_slave_1: entered promiscuous mode [ 64.707531][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.714738][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.722009][ T5814] bridge_slave_0: entered allmulticast mode [ 64.728824][ T5814] bridge_slave_0: entered promiscuous mode [ 64.739047][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.746381][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.753550][ T5811] bridge_slave_0: entered allmulticast mode [ 64.761637][ T5811] bridge_slave_0: entered promiscuous mode [ 64.768858][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.776091][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.783269][ T5811] bridge_slave_1: entered allmulticast mode [ 64.790450][ T5811] bridge_slave_1: entered promiscuous mode [ 64.808289][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.815549][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.822706][ T5814] bridge_slave_1: entered allmulticast mode [ 64.829344][ T5814] bridge_slave_1: entered promiscuous mode [ 64.901095][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.908167][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.915962][ T5812] bridge_slave_0: entered allmulticast mode [ 64.922722][ T5812] bridge_slave_0: entered promiscuous mode [ 64.931826][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.943478][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.954381][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.982513][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.991883][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.998982][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.006904][ T5812] bridge_slave_1: entered allmulticast mode [ 65.013827][ T5812] bridge_slave_1: entered promiscuous mode [ 65.039522][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.056554][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.063716][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.071277][ T5818] bridge_slave_0: entered allmulticast mode [ 65.077922][ T5818] bridge_slave_0: entered promiscuous mode [ 65.086253][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.127124][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.134454][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.141902][ T5818] bridge_slave_1: entered allmulticast mode [ 65.148542][ T5818] bridge_slave_1: entered promiscuous mode [ 65.170983][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.182988][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.194546][ T5811] team0: Port device team_slave_0 added [ 65.202973][ T5811] team0: Port device team_slave_1 added [ 65.210980][ T5809] team0: Port device team_slave_0 added [ 65.227876][ T5814] team0: Port device team_slave_0 added [ 65.251522][ T5809] team0: Port device team_slave_1 added [ 65.264659][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.275729][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.287351][ T5814] team0: Port device team_slave_1 added [ 65.303777][ T5812] team0: Port device team_slave_0 added [ 65.344813][ T5812] team0: Port device team_slave_1 added [ 65.361689][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.368631][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.394933][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.431964][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.438929][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.465285][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.485141][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.494954][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.521190][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.537743][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.544966][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.571237][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.584324][ T5818] team0: Port device team_slave_0 added [ 65.592382][ T5818] team0: Port device team_slave_1 added [ 65.598594][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.605572][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.631489][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.642983][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.650099][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.676023][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.687933][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.694923][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.720857][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.733050][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.740076][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.766389][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.811113][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.818076][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.844057][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.888215][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.892308][ T5128] Bluetooth: hci0: command tx timeout [ 65.895411][ T5816] Bluetooth: hci3: command tx timeout [ 65.900895][ T5128] Bluetooth: hci2: command tx timeout [ 65.906159][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.937938][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.962757][ T5811] hsr_slave_0: entered promiscuous mode [ 65.969038][ T5811] hsr_slave_1: entered promiscuous mode [ 65.970066][ T5128] Bluetooth: hci1: command tx timeout [ 65.974698][ T54] Bluetooth: hci4: command tx timeout [ 65.991247][ T5814] hsr_slave_0: entered promiscuous mode [ 65.997231][ T5814] hsr_slave_1: entered promiscuous mode [ 66.003916][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.011713][ T5814] Cannot create hsr debugfs directory [ 66.065766][ T5809] hsr_slave_0: entered promiscuous mode [ 66.071876][ T5809] hsr_slave_1: entered promiscuous mode [ 66.077699][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.085381][ T5809] Cannot create hsr debugfs directory [ 66.124884][ T5812] hsr_slave_0: entered promiscuous mode [ 66.131770][ T5812] hsr_slave_1: entered promiscuous mode [ 66.137592][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.145297][ T5812] Cannot create hsr debugfs directory [ 66.156751][ T5818] hsr_slave_0: entered promiscuous mode [ 66.162959][ T5818] hsr_slave_1: entered promiscuous mode [ 66.168819][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.176459][ T5818] Cannot create hsr debugfs directory [ 66.542543][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.556125][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.565887][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.582799][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.632793][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.643896][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.655199][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.669667][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.737058][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.748400][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.759542][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.769513][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.857389][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.868382][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.879674][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.891280][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.908055][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.976601][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.996880][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.005829][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.017905][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.038170][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.045324][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.054974][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.064414][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.091243][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.098348][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.132631][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.147580][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.171918][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.178993][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.187836][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.194920][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.222405][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.246042][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.253188][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.329399][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.336593][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.345889][ T30] audit: type=1400 audit(1747795707.440:90): avc: denied { sys_module } for pid=5811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.445206][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.505401][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.546214][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.553405][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.573022][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.580184][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.606753][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.624505][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.704008][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.768645][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.775827][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.821100][ T5811] veth0_vlan: entered promiscuous mode [ 67.837511][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.844697][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.866410][ T5811] veth1_vlan: entered promiscuous mode [ 67.878011][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.959166][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.970858][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.970971][ T54] Bluetooth: hci2: command tx timeout [ 67.987746][ T54] Bluetooth: hci3: command tx timeout [ 67.993420][ T54] Bluetooth: hci0: command tx timeout [ 68.008834][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.051267][ T5128] Bluetooth: hci4: command tx timeout [ 68.051648][ T54] Bluetooth: hci1: command tx timeout [ 68.154653][ T5811] veth0_macvtap: entered promiscuous mode [ 68.176969][ T5818] veth0_vlan: entered promiscuous mode [ 68.187939][ T5811] veth1_macvtap: entered promiscuous mode [ 68.206065][ T5818] veth1_vlan: entered promiscuous mode [ 68.223917][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.278792][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.325684][ T5818] veth0_macvtap: entered promiscuous mode [ 68.345349][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.377448][ T5809] veth0_vlan: entered promiscuous mode [ 68.385662][ T5818] veth1_macvtap: entered promiscuous mode [ 68.415908][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.425629][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.434663][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.443686][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.466199][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.476896][ T5809] veth1_vlan: entered promiscuous mode [ 68.502238][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.513048][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.552073][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.566415][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.575679][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.584528][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.598618][ T5814] veth0_vlan: entered promiscuous mode [ 68.653249][ T5814] veth1_vlan: entered promiscuous mode [ 68.675139][ T5809] veth0_macvtap: entered promiscuous mode [ 68.683793][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.696990][ T5809] veth1_macvtap: entered promiscuous mode [ 68.704136][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.777082][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.795127][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.796755][ T5812] veth0_vlan: entered promiscuous mode [ 68.809214][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.822733][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.854001][ T5814] veth0_macvtap: entered promiscuous mode [ 68.864584][ T30] audit: type=1400 audit(1747795708.950:91): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.aAZtcC/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.872878][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.899002][ T30] audit: type=1400 audit(1747795708.950:92): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.909586][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.924314][ T30] audit: type=1400 audit(1747795708.950:93): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.aAZtcC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.929594][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.966019][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.966227][ T30] audit: type=1400 audit(1747795708.950:94): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.997164][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.012643][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.017016][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.020219][ T30] audit: type=1400 audit(1747795708.980:95): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.aAZtcC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.047685][ T5814] veth1_macvtap: entered promiscuous mode [ 69.065469][ T30] audit: type=1400 audit(1747795708.980:96): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.aAZtcC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.094819][ T30] audit: type=1400 audit(1747795708.980:97): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.121892][ T30] audit: type=1400 audit(1747795709.070:98): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.130032][ T5812] veth1_vlan: entered promiscuous mode [ 69.147020][ T30] audit: type=1400 audit(1747795709.070:99): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="gadgetfs" ino=6399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.179556][ T30] audit: type=1400 audit(1747795709.070:100): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.212783][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.248802][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.275120][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.297794][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.328261][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.344164][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.353475][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.362309][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.398781][ T5812] veth0_macvtap: entered promiscuous mode [ 69.444029][ T5812] veth1_macvtap: entered promiscuous mode [ 69.510604][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.518445][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.535828][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.562714][ T5898] syz_tun: entered allmulticast mode [ 69.569533][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.612783][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.625576][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.642713][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.657653][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.690639][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.723885][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.817943][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.831809][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.909443][ T5912] FAULT_INJECTION: forcing a failure. [ 69.909443][ T5912] name failslab, interval 1, probability 0, space 0, times 1 [ 69.923931][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: syz.2.8 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 69.923955][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.923965][ T5912] Call Trace: [ 69.923971][ T5912] [ 69.923977][ T5912] dump_stack_lvl+0x16c/0x1f0 [ 69.924007][ T5912] should_fail_ex+0x512/0x640 [ 69.924035][ T5912] should_failslab+0xc2/0x120 [ 69.924055][ T5912] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 69.924076][ T5912] ? sidtab_sid2str_get+0x17a/0x680 [ 69.924107][ T5912] kmemdup_noprof+0x29/0x60 [ 69.924127][ T5912] sidtab_sid2str_get+0x17a/0x680 [ 69.924155][ T5912] sidtab_entry_to_string+0x33/0x110 [ 69.924183][ T5912] security_sid_to_context_core+0x35c/0x640 [ 69.924211][ T5912] avc_audit_post_callback+0x109/0x8f0 [ 69.924241][ T5912] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 69.924268][ T5912] ? skb_put+0x138/0x1b0 [ 69.924292][ T5912] ? audit_log_n_string+0x253/0x540 [ 69.924324][ T5912] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 69.924351][ T5912] common_lsm_audit+0x24e/0x300 [ 69.924375][ T5912] ? __pfx_common_lsm_audit+0x10/0x10 [ 69.924400][ T5912] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 69.924423][ T5912] slow_avc_audit+0x186/0x210 [ 69.924441][ T5912] ? __pfx_slow_avc_audit+0x10/0x10 [ 69.924465][ T5912] ? find_held_lock+0x2b/0x80 [ 69.924486][ T5912] ? avc_has_extended_perms+0x33a/0x1090 [ 69.924507][ T5912] avc_has_extended_perms+0xa40/0x1090 [ 69.924539][ T5912] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 69.924558][ T5912] ? kasan_quarantine_put+0x10a/0x240 [ 69.924584][ T5912] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.924611][ T5912] ? find_held_lock+0x2b/0x80 [ 69.924638][ T5912] ? tomoyo_path_number_perm+0x18d/0x580 [ 69.924671][ T5912] ? __pfx___might_resched+0x10/0x10 [ 69.924703][ T5912] ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 69.924734][ T5912] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.924770][ T5912] ? hook_file_ioctl_common+0x145/0x410 [ 69.924796][ T5912] ? selinux_file_ioctl+0x180/0x270 [ 69.924822][ T5912] selinux_file_ioctl+0x180/0x270 [ 69.924851][ T5912] security_file_ioctl+0xc6/0x240 [ 69.924877][ T5912] __x64_sys_ioctl+0xb7/0x200 [ 69.924903][ T5912] do_syscall_64+0xcd/0x260 [ 69.924930][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.924948][ T5912] RIP: 0033:0x7f2b7c78e969 [ 69.924962][ T5912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.924978][ T5912] RSP: 002b:00007f2b7d618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.924994][ T5912] RAX: ffffffffffffffda RBX: 00007f2b7c9b6080 RCX: 00007f2b7c78e969 [ 69.925005][ T5912] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000004 [ 69.925015][ T5912] RBP: 00007f2b7d618090 R08: 0000000000000000 R09: 0000000000000000 [ 69.925025][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.925035][ T5912] R13: 0000000000000000 R14: 00007f2b7c9b6080 R15: 00007fffbd59b588 [ 69.925058][ T5912] [ 69.927427][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.986576][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.060130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.256087][ T54] Bluetooth: hci0: command tx timeout [ 70.263602][ T5912] nullb0: AHDI p1 [ 70.263764][ T54] Bluetooth: hci3: command tx timeout [ 70.273607][ T54] Bluetooth: hci2: command tx timeout [ 70.279390][ T54] Bluetooth: hci1: command tx timeout [ 70.279927][ T5128] Bluetooth: hci4: command tx timeout [ 70.309179][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.321200][ T5897] syz_tun: left allmulticast mode [ 70.455405][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.547526][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.598318][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.610721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.610777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.628120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 70.880378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 71.089932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 71.247464][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.275101][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.331452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.394308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 71.403109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.411783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.628938][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 71.653607][ T5928] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5928 comm=syz.0.11 [ 72.423797][ T5128] Bluetooth: hci1: command tx timeout [ 72.423809][ T5816] Bluetooth: hci2: command tx timeout [ 72.423838][ T5816] Bluetooth: hci3: command tx timeout [ 72.440425][ T54] Bluetooth: hci0: command tx timeout [ 72.445993][ T54] Bluetooth: hci4: command tx timeout [ 72.997881][ T5946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 73.169401][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 73.298804][ T5952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5952 comm=syz.1.15 [ 73.498142][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 73.726908][ T5960] fuse: Bad value for 'user_id' [ 73.748308][ T5960] fuse: Bad value for 'user_id' [ 73.845453][ T5968] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 73.852141][ T5968] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.972514][ T5968] vhci_hcd vhci_hcd.0: Device attached [ 73.987461][ T5863] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.165067][ T5820] vhci_hcd: vhci_device speed not set [ 74.273085][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 74.342226][ T5820] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 74.437957][ T5863] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 74.447101][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.536800][ T5863] usb 5-1: config 0 descriptor?? [ 74.564683][ T5863] cp210x 5-1:0.0: cp210x converter detected [ 74.592954][ T5969] vhci_hcd: connection reset by peer [ 74.608281][ T1091] vhci_hcd: stop threads [ 74.620630][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 74.620662][ T30] audit: type=1400 audit(1747795714.710:170): avc: denied { ioctl } for pid=5978 comm="syz.1.23" path="socket:[7911]" dev="sockfs" ino=7911 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.627321][ T1091] vhci_hcd: release socket [ 74.708600][ T30] audit: type=1400 audit(1747795714.770:171): avc: denied { read } for pid=5978 comm="syz.1.23" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.719715][ T5981] fuseblk: Bad value for 'user_id' [ 74.737388][ T5982] fuseblk: Bad value for 'user_id' [ 74.750758][ T1091] vhci_hcd: disconnect device [ 74.751423][ T5982] fuseblk: Bad value for 'user_id' [ 74.757722][ T30] audit: type=1400 audit(1747795714.780:172): avc: denied { open } for pid=5978 comm="syz.1.23" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.780510][ T5981] fuseblk: Bad value for 'user_id' [ 74.837198][ T30] audit: type=1400 audit(1747795714.890:173): avc: denied { sqpoll } for pid=5957 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.967506][ T30] audit: type=1400 audit(1747795715.000:174): avc: denied { create } for pid=5978 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.990316][ T30] audit: type=1400 audit(1747795715.000:175): avc: denied { write } for pid=5978 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.450579][ T6030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 76.211557][ T975] cfg80211: failed to load regulatory.db [ 76.281781][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.346880][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.551124][ T6061] overlay: ./bus is not a directory [ 76.569422][ T30] audit: type=1400 audit(1747795716.640:176): avc: denied { mounton } for pid=6043 comm="syz.1.26" path="/4/bus/bus" dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.746974][ T6067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 77.767365][ T6067] netlink: 'syz.0.29': attribute type 12 has an invalid length. [ 77.775109][ T6067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.29'. [ 77.795256][ T30] audit: type=1400 audit(1747795717.830:177): avc: denied { connect } for pid=6064 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.296867][ T30] audit: type=1400 audit(1747795718.370:178): avc: denied { create } for pid=6068 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.383112][ T30] audit: type=1400 audit(1747795718.410:179): avc: denied { setopt } for pid=6068 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.585656][ T5863] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 78.650074][ T6078] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 78.673907][ T6078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 79.021837][ T5863] cp210x 5-1:0.0: querying part number failed [ 79.404271][ T5863] usb 5-1: cp210x converter now attached to ttyUSB0 [ 79.585096][ T5863] usb 5-1: USB disconnect, device number 2 [ 79.596666][ T5820] vhci_hcd: vhci_device speed not set [ 79.608262][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 79.623870][ T5863] cp210x 5-1:0.0: device disconnected [ 80.349954][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 80.349973][ T30] audit: type=1400 audit(1747795720.400:191): avc: denied { bind } for pid=6094 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.381387][ T30] audit: type=1400 audit(1747795720.400:192): avc: denied { setopt } for pid=6094 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.571113][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.787488][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 80.797466][ T6097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6097 comm=syz.1.39 [ 80.930288][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 80.940382][ T5908] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 80.961203][ T5908] usb 4-1: config 0 has no interface number 0 [ 81.078222][ T5905] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 81.264511][ T5908] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.277992][ T5908] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 81.287337][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.299943][ T5908] usb 4-1: Product: syz [ 81.306329][ T5908] usb 4-1: Manufacturer: syz [ 81.318727][ T5908] usb 4-1: SerialNumber: syz [ 81.440204][ T5905] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.455613][ T5908] usb 4-1: config 0 descriptor?? [ 81.462142][ T5905] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.555938][ T6111] fuse: Invalid rootmode [ 81.989952][ T30] audit: type=1400 audit(1747795721.630:193): avc: denied { mount } for pid=6107 comm="syz.1.42" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.022615][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.111923][ T5908] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 83.107839][ T30] audit: type=1400 audit(1747795723.160:194): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.391908][ T5905] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 84.062640][ T6121] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.218989][ T6003] usb 4-1: Failed to submit usb control message: -110 [ 84.407106][ T30] audit: type=1400 audit(1747795724.490:195): avc: denied { create } for pid=6119 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.468107][ T6003] usb 4-1: unable to send the bmi data to the device: -110 [ 85.159907][ T6003] usb 4-1: unable to get target info from device [ 85.228750][ T6003] usb 4-1: could not get target info (-110) [ 85.392263][ T30] audit: type=1400 audit(1747795724.600:196): avc: denied { ioctl } for pid=6119 comm="syz.1.43" path="socket:[8312]" dev="sockfs" ino=8312 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.432176][ T6003] usb 4-1: could not probe fw (-110) [ 85.924439][ T5905] usb 1-1: Product: syz [ 85.928656][ T5905] usb 1-1: Manufacturer: syz [ 85.934866][ T5908] usb 4-1: USB disconnect, device number 2 [ 85.957826][ T5905] usb 1-1: can't set config #4, error -71 [ 85.967544][ T5905] usb 1-1: USB disconnect, device number 2 [ 85.992730][ T30] audit: type=1400 audit(1747795724.630:197): avc: denied { create } for pid=6119 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.059618][ T30] audit: type=1400 audit(1747795726.140:198): avc: denied { write } for pid=6129 comm="syz.3.48" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 86.418777][ T30] audit: type=1400 audit(1747795726.210:199): avc: denied { accept } for pid=6131 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.600057][ T5128] Bluetooth: hci2: Unknown advertising packet type: 0x19 [ 86.600087][ T5128] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 86.608102][ T5128] Bluetooth: hci2: Unknown advertising packet type: 0x31 [ 86.617615][ T5128] Bluetooth: hci2: Malformed LE Event: 0x0d [ 86.690151][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.702151][ T30] audit: type=1400 audit(1747795726.680:200): avc: denied { setopt } for pid=6140 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.825502][ T6145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6145 comm=syz.0.51 [ 86.841515][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.872889][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.903562][ T5908] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 86.916364][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.926761][ T5908] usb 4-1: config 0 descriptor?? [ 87.059932][ T5862] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 87.131740][ T6149] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 87.157802][ T6149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.632233][ T30] audit: type=1400 audit(1747795727.710:201): avc: denied { create } for pid=6152 comm="syz.4.54" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.679958][ T5862] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 87.709561][ T30] audit: type=1400 audit(1747795727.710:202): avc: denied { link } for pid=6152 comm="syz.4.54" name="#7" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.739585][ T30] audit: type=1400 audit(1747795727.710:203): avc: denied { rename } for pid=6152 comm="syz.4.54" name="#8" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.734286][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.870708][ T5908] usb 4-1: string descriptor 0 read error: -22 [ 88.893669][ T30] audit: type=1400 audit(1747795728.240:204): avc: denied { ioctl } for pid=6150 comm="syz.1.53" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.126440][ T5862] usb 3-1: Product: syz [ 89.130672][ T5862] usb 3-1: Manufacturer: syz [ 89.135261][ T5862] usb 3-1: SerialNumber: syz [ 89.201120][ T5862] usb 3-1: config 0 descriptor?? [ 89.264277][ T5908] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input6 [ 89.276809][ T30] audit: type=1400 audit(1747795728.810:205): avc: denied { bind } for pid=6155 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.323359][ T5908] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input7 [ 89.395975][ T5908] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input8 [ 89.425601][ T5862] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 89.557136][ T6165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 89.563674][ T6165] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.571342][ T6165] vhci_hcd vhci_hcd.0: Device attached [ 89.582778][ T5908] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input9 [ 89.655370][ T6174] netlink: 'syz.4.58': attribute type 12 has an invalid length. [ 89.663284][ T6174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.58'. [ 90.143576][ T5908] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 90.191432][ T5905] vhci_hcd: vhci_device speed not set [ 90.637786][ T5905] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 90.988576][ T6171] vhci_hcd: connection reset by peer [ 91.048635][ T6032] vhci_hcd: stop threads [ 91.058996][ T6032] vhci_hcd: release socket [ 91.099203][ T6032] vhci_hcd: disconnect device [ 91.196536][ T5862] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 91.210657][ T975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.244858][ T5862] usb 3-1: USB disconnect, device number 2 [ 91.913078][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 91.939884][ T975] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 91.949600][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 91.980183][ T975] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 91.995615][ T975] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 92.029931][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.044349][ T975] usb 1-1: config 0 descriptor?? [ 92.070938][ T6194] FAULT_INJECTION: forcing a failure. [ 92.070938][ T6194] name failslab, interval 1, probability 0, space 0, times 0 [ 92.088139][ T6194] CPU: 1 UID: 0 PID: 6194 Comm: syz.1.63 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 92.088164][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.088173][ T6194] Call Trace: [ 92.088178][ T6194] [ 92.088185][ T6194] dump_stack_lvl+0x16c/0x1f0 [ 92.088214][ T6194] should_fail_ex+0x512/0x640 [ 92.088237][ T6194] ? fs_reclaim_acquire+0xae/0x150 [ 92.088264][ T6194] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 92.088289][ T6194] should_failslab+0xc2/0x120 [ 92.088308][ T6194] __kmalloc_noprof+0xd2/0x510 [ 92.088329][ T6194] tomoyo_realpath_from_path+0xc2/0x6e0 [ 92.088356][ T6194] ? tomoyo_profile+0x47/0x60 [ 92.088374][ T6194] tomoyo_path_number_perm+0x245/0x580 [ 92.088395][ T6194] ? tomoyo_path_number_perm+0x237/0x580 [ 92.088418][ T6194] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 92.088441][ T6194] ? find_held_lock+0x2b/0x80 [ 92.088483][ T6194] ? find_held_lock+0x2b/0x80 [ 92.088501][ T6194] ? hook_file_ioctl_common+0x145/0x410 [ 92.088524][ T6194] ? __fget_files+0x20e/0x3c0 [ 92.088543][ T6194] security_file_ioctl+0x9b/0x240 [ 92.088569][ T6194] __x64_sys_ioctl+0xb7/0x200 [ 92.088595][ T6194] do_syscall_64+0xcd/0x260 [ 92.088621][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.088637][ T6194] RIP: 0033:0x7fdddd38e969 [ 92.088651][ T6194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.088666][ T6194] RSP: 002b:00007fddde1ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.088686][ T6194] RAX: ffffffffffffffda RBX: 00007fdddd5b5fa0 RCX: 00007fdddd38e969 [ 92.088696][ T6194] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 92.088706][ T6194] RBP: 00007fddde1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 92.088715][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.088724][ T6194] R13: 0000000000000000 R14: 00007fdddd5b5fa0 R15: 00007ffe3b26c718 [ 92.088749][ T6194] [ 92.088770][ T6194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.239975][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.309433][ T5908] usb 4-1: USB disconnect, device number 3 [ 92.358475][ T975] hdpvr 1-1:0.0: firmware version 0x0 dated [ 92.365406][ T975] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 92.427459][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 92.427474][ T30] audit: type=1400 audit(1747795732.510:210): avc: denied { shutdown } for pid=6196 comm="syz.3.64" lport=48622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.548377][ T30] audit: type=1400 audit(1747795732.520:211): avc: denied { getopt } for pid=6196 comm="syz.3.64" lport=48622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.569312][ T975] hdpvr 1-1:0.0: device init failed [ 92.592864][ T975] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 92.622866][ T6201] binder: 6200:6201 ioctl 8933 200000000300 returned -22 [ 92.643512][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.651116][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.670400][ T30] audit: type=1400 audit(1747795732.700:212): avc: denied { set_context_mgr } for pid=6200 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 92.704892][ T6203] binder: 6200:6203 ioctl 89f2 200000000480 returned -22 [ 92.708596][ T975] usb 1-1: USB disconnect, device number 3 [ 92.721998][ T6201] binder: 6200:6201 ioctl 89f2 200000000540 returned -22 [ 92.736747][ T30] audit: type=1400 audit(1747795732.710:213): avc: denied { create } for pid=6200 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.761153][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.789299][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 92.823313][ T6201] virt_wifi0: mtu greater than device maximum [ 93.120121][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.129200][ T30] audit: type=1400 audit(1747795732.890:214): avc: denied { write } for pid=6200 comm="syz.3.66" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.160256][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 93.172351][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 93.194454][ T30] audit: type=1400 audit(1747795732.890:215): avc: denied { map } for pid=6200 comm="syz.3.66" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.234298][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.243628][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.351460][ T10] usb 3-1: Product: syz [ 93.356218][ T10] usb 3-1: Manufacturer: syz [ 93.362471][ T30] audit: type=1400 audit(1747795732.890:216): avc: denied { call } for pid=6200 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.364439][ T6206] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 93.382430][ T30] audit: type=1400 audit(1747795732.890:217): avc: denied { transfer } for pid=6200 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.413092][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 93.418431][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 93.544555][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 93.552361][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 93.561534][ T30] audit: type=1400 audit(1747795733.120:218): avc: denied { create } for pid=6183 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.580948][ T30] audit: type=1400 audit(1747795733.120:219): avc: denied { lock } for pid=6183 comm="syz.4.60" path="socket:[8445]" dev="sockfs" ino=8445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 93.640751][ T6191] Zero length message leads to an empty skb [ 93.655283][ T6205] IPVS: stopping backup sync thread 6206 ... [ 93.729502][ T24] usb 3-1: USB disconnect, device number 3 [ 94.399901][ T5906] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 94.555460][ T5906] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 94.569295][ T5906] usb 4-1: config 0 has no interface number 0 [ 94.606029][ T5906] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 94.635070][ T5906] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 94.656071][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.676350][ T5906] usb 4-1: Product: syz [ 94.686734][ T5906] usb 4-1: Manufacturer: syz [ 94.721167][ T5906] usb 4-1: SerialNumber: syz [ 94.748535][ T5906] usb 4-1: config 0 descriptor?? [ 94.781954][ T6229] overlayfs: missing 'lowerdir' [ 94.929440][ T6234] overlay: ./bus is not a directory [ 94.981072][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.003919][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.211223][ T6222] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.378822][ T6242] trusted_key: encrypted_key: key user:syz not found [ 95.487205][ T5820] kernel write not supported for file /input/event2 (pid: 5820 comm: kworker/1:4) [ 95.544539][ T5906] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 95.553365][ T5906] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 95.629777][ T5906] usb 4-1: USB disconnect, device number 4 [ 95.720071][ T5908] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 95.881873][ T5908] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.897314][ T5908] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.933598][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 95.956847][ T5908] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 95.965379][ T5905] vhci_hcd: vhci_device speed not set [ 95.990180][ T5908] usb 3-1: Product: syz [ 95.994388][ T5908] usb 3-1: Manufacturer: syz [ 96.013594][ T5908] hub 3-1:4.0: USB hub found [ 96.071573][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.190115][ T5820] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 96.370020][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.372139][ T5820] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.441970][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.463464][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.474593][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 96.826838][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 97.075163][ T5820] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.087103][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.091370][ T5820] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 97.104102][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.114498][ T10] usb 1-1: Product: syz [ 97.114518][ T10] usb 1-1: Manufacturer: syz [ 97.126959][ T5820] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 97.126981][ T5820] usb 5-1: Product: syz [ 97.126991][ T5820] usb 5-1: Manufacturer: syz [ 97.157324][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 97.168411][ T5820] hub 5-1:4.0: USB hub found [ 97.171945][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 97.218118][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 97.231013][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 97.400903][ T5865] usb 1-1: USB disconnect, device number 4 [ 97.591916][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 97.591948][ T30] audit: type=1400 audit(1747795737.680:242): avc: denied { ioctl } for pid=6264 comm="syz.1.86" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.071162][ T30] audit: type=1400 audit(1747795738.020:243): avc: denied { read append } for pid=6252 comm="syz.4.82" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.099899][ T30] audit: type=1400 audit(1747795738.020:244): avc: denied { open } for pid=6252 comm="syz.4.82" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.440839][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.485031][ T30] audit: type=1400 audit(1747795738.570:245): avc: denied { bind } for pid=6273 comm="syz.3.89" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.505826][ T30] audit: type=1400 audit(1747795738.570:246): avc: denied { name_bind } for pid=6273 comm="syz.3.89" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 98.528313][ T30] audit: type=1400 audit(1747795738.570:247): avc: denied { node_bind } for pid=6273 comm="syz.3.89" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 98.608564][ T30] audit: type=1400 audit(1747795738.570:248): avc: denied { write } for pid=6273 comm="syz.3.89" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.630271][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.637742][ T5908] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 98.710824][ T5908] usb 3-1: USB disconnect, device number 4 [ 98.719049][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.760674][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.90'. [ 98.970686][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.153738][ T5820] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 99.207437][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 99.227798][ T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 99.236317][ T5820] usb 5-1: USB disconnect, device number 3 [ 99.264865][ T10] usb 2-1: Product: syz [ 99.269131][ T10] usb 2-1: Manufacturer: syz [ 99.297767][ T30] audit: type=1400 audit(1747795739.380:249): avc: denied { write } for pid=6278 comm="syz.2.91" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.301566][ T6284] FAULT_INJECTION: forcing a failure. [ 99.301566][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 99.359583][ T10] hub 2-1:4.0: USB hub found [ 99.384145][ T30] audit: type=1400 audit(1747795739.470:250): avc: denied { create } for pid=6286 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 99.408640][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.4.92 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 99.408665][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.408674][ T6284] Call Trace: [ 99.408679][ T6284] [ 99.408686][ T6284] dump_stack_lvl+0x16c/0x1f0 [ 99.408714][ T6284] should_fail_ex+0x512/0x640 [ 99.408736][ T6284] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 99.408756][ T6284] should_failslab+0xc2/0x120 [ 99.408774][ T6284] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 99.408791][ T6284] ? __alloc_skb+0x2b2/0x380 [ 99.408811][ T6284] __alloc_skb+0x2b2/0x380 [ 99.408829][ T6284] ? __pfx___alloc_skb+0x10/0x10 [ 99.408849][ T6284] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 99.408875][ T6284] netlink_alloc_large_skb+0x69/0x130 [ 99.408898][ T6284] netlink_sendmsg+0x6a1/0xdd0 [ 99.408922][ T6284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.408949][ T6284] ____sys_sendmsg+0xa95/0xc70 [ 99.408975][ T6284] ? copy_msghdr_from_user+0x10a/0x160 [ 99.408993][ T6284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.409028][ T6284] ___sys_sendmsg+0x134/0x1d0 [ 99.409049][ T6284] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.409097][ T6284] __sys_sendmsg+0x16d/0x220 [ 99.409117][ T6284] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.409144][ T6284] ? rcu_is_watching+0x12/0xc0 [ 99.409173][ T6284] do_syscall_64+0xcd/0x260 [ 99.409205][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.409222][ T6284] RIP: 0033:0x7f55a2d8e969 [ 99.409234][ T6284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.409249][ T6284] RSP: 002b:00007f55a3b76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.409266][ T6284] RAX: ffffffffffffffda RBX: 00007f55a2fb5fa0 RCX: 00007f55a2d8e969 [ 99.409276][ T6284] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 99.409285][ T6284] RBP: 00007f55a3b76090 R08: 0000000000000000 R09: 0000000000000000 [ 99.409294][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.409303][ T6284] R13: 0000000000000000 R14: 00007f55a2fb5fa0 R15: 00007ffd38328248 [ 99.409324][ T6284] [ 99.437540][ T30] audit: type=1400 audit(1747795739.500:251): avc: denied { ioctl } for pid=6286 comm="syz.3.94" path="socket:[9342]" dev="sockfs" ino=9342 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 99.667528][ T6291] fuse: Bad value for 'user_id' [ 99.673162][ T6291] fuse: Bad value for 'user_id' [ 100.074749][ T6298] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 100.237623][ T6298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.527873][ T5908] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.935005][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 100.942892][ T5908] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 100.951254][ T5908] usb 3-1: config 0 has no interface number 0 [ 100.958586][ T5908] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.100726][ T6311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.110668][ T6311] netlink: 'syz.3.99': attribute type 12 has an invalid length. [ 101.118336][ T6311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.99'. [ 102.218673][ T10] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 102.265323][ T10] usb 2-1: USB disconnect, device number 2 [ 102.428360][ T5908] usb 3-1: string descriptor 0 read error: -71 [ 102.441378][ T5908] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 102.485543][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.560876][ T5908] usb 3-1: config 0 descriptor?? [ 103.100075][ T5908] usb 3-1: can't set config #0, error -71 [ 103.120056][ T5908] usb 3-1: USB disconnect, device number 5 [ 103.127286][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 103.127299][ T30] audit: type=1400 audit(1747795743.210:254): avc: denied { read write } for pid=6320 comm="syz.2.103" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.159990][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 103.182964][ T30] audit: type=1400 audit(1747795743.210:255): avc: denied { open } for pid=6320 comm="syz.2.103" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.371337][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.433190][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.471756][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 103.483699][ T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 103.498178][ T10] usb 2-1: Product: syz [ 103.508394][ T10] usb 2-1: Manufacturer: syz [ 103.529908][ T5908] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.688937][ T10] hub 2-1:4.0: USB hub found [ 103.710097][ T975] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.802814][ T30] audit: type=1400 audit(1747795743.860:256): avc: denied { name_connect } for pid=6337 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 103.834036][ T6340] bridge0: port 3(vlan2) entered blocking state [ 103.871546][ T6340] bridge0: port 3(vlan2) entered disabled state [ 103.878010][ T6340] vlan2: entered allmulticast mode [ 104.001632][ T975] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.012879][ T975] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 104.049061][ T5908] usb 3-1: device descriptor read/64, error -71 [ 104.056323][ T30] audit: type=1400 audit(1747795744.110:257): avc: denied { ioctl } for pid=6337 comm="syz.3.107" path="socket:[8758]" dev="sockfs" ino=8758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.061992][ T6340] bridge0: entered allmulticast mode [ 104.080714][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.105778][ T975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.116331][ T6340] vlan2: left allmulticast mode [ 104.125820][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.132972][ T6340] bridge0: left allmulticast mode [ 104.138713][ T975] usb 5-1: Product: syz [ 104.144223][ T975] usb 5-1: Manufacturer: syz [ 104.167787][ T975] usb 5-1: SerialNumber: syz [ 104.799908][ T5908] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.836463][ T6333] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 104.932088][ T5908] usb 3-1: device descriptor read/64, error -71 [ 105.071029][ T5908] usb usb3-port1: attempt power cycle [ 105.164209][ T6351] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 105.202194][ T6351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.439203][ T5908] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 105.552182][ T5908] usb 3-1: device descriptor read/8, error -71 [ 105.562083][ T6333] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 105.667052][ T6353] netlink: 'syz.3.110': attribute type 7 has an invalid length. [ 105.679991][ T5820] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.759363][ T10] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 105.778876][ T975] cdc_ncm 5-1:1.0: failed to get mac address [ 105.793054][ T10] usb 2-1: USB disconnect, device number 3 [ 105.803520][ T975] cdc_ncm 5-1:1.0: bind() failure [ 105.866037][ T6354] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.110'. [ 105.876009][ T6354] netlink: zone id is out of range [ 105.881418][ T6354] netlink: zone id is out of range [ 105.954515][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.095793][ T975] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 106.133941][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.239750][ T975] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 106.276426][ T5820] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 106.395214][ T975] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 106.429974][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.720625][ T6357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.729409][ T6357] netlink: 'syz.1.111': attribute type 12 has an invalid length. [ 106.737161][ T6357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.111'. [ 106.791128][ T5820] usb 1-1: config 0 descriptor?? [ 106.797682][ T975] usb 5-1: USB disconnect, device number 4 [ 107.595199][ T5820] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 107.698789][ T30] audit: type=1400 audit(1747795747.780:258): avc: denied { create } for pid=6349 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.720803][ T5820] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 107.931408][ T6360] 9pnet_fd: Insufficient options for proto=fd [ 107.965899][ T5820] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0002/input/input11 [ 107.979252][ T30] audit: type=1400 audit(1747795748.050:259): avc: denied { append } for pid=6362 comm="syz.4.113" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.055643][ T5820] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 108.485445][ T30] audit: type=1400 audit(1747795748.370:260): avc: denied { write } for pid=6359 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.485830][ T30] audit: type=1400 audit(1747795748.370:261): avc: denied { nlmsg_write } for pid=6359 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.486036][ T30] audit: type=1400 audit(1747795748.540:262): avc: denied { setcurrent } for pid=6367 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.767142][ T30] audit: type=1400 audit(1747795748.600:263): avc: denied { create } for pid=6367 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.809730][ T5820] usb 1-1: USB disconnect, device number 5 [ 108.855687][ T30] audit: type=1400 audit(1747795748.610:264): avc: denied { read write } for pid=6367 comm="syz.1.115" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.879251][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.919483][ T30] audit: type=1400 audit(1747795748.610:265): avc: denied { open } for pid=6367 comm="syz.1.115" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.947727][ T6370] fido_id[6370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 109.054668][ T30] audit: type=1400 audit(1747795748.610:266): avc: denied { ioctl } for pid=6367 comm="syz.1.115" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 109.080318][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.450024][ T5908] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.814919][ T5908] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 110.834733][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.847000][ T5908] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 110.860631][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 110.877990][ T5908] usb 1-1: Product: syz [ 110.882446][ T5905] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 110.893279][ T30] audit: type=1400 audit(1747795750.960:267): avc: denied { append } for pid=6396 comm="syz.4.122" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.916886][ T5908] usb 1-1: Manufacturer: syz [ 110.916906][ T5908] usb 1-1: SerialNumber: syz [ 110.929238][ T5908] usb 1-1: config 0 descriptor?? [ 110.947202][ T5908] usb 1-1: selecting invalid altsetting 0 [ 111.062337][ T30] audit: type=1400 audit(1747795750.980:268): avc: denied { create } for pid=6396 comm="syz.4.122" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.121838][ T5905] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.134538][ T5905] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.169483][ T6399] xt_connbytes: Forcing CT accounting to be enabled [ 111.176347][ T6399] Cannot find add_set index 0 as target [ 111.189868][ T30] audit: type=1400 audit(1747795751.270:269): avc: denied { setopt } for pid=6396 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.249861][ T5905] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 111.273271][ T5905] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 111.321570][ T5905] usb 4-1: Product: syz [ 111.334982][ T5905] usb 4-1: Manufacturer: syz [ 111.413191][ T5905] hub 4-1:4.0: USB hub found [ 111.431725][ T6401] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6401 comm=syz.1.123 [ 117.196764][ T5905] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 119.837142][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.689904][ T5905] usb 4-1: USB disconnect, device number 5 [ 132.481646][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.489824][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.543878][ T10] usb 2-1: device descriptor read/64, error -110 [ 134.293742][ T975] usb 1-1: USB disconnect, device number 6 [ 135.189619][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.402793][ T10] usb 2-1: device descriptor read/64, error -32 [ 137.452369][ T10] usb usb2-port1: attempt power cycle [ 139.529931][ T30] audit: type=1400 audit(1747795779.570:270): avc: denied { sys_module } for pid=6408 comm="syz.3.125" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 139.803193][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.969924][ T10] usb 2-1: device descriptor read/8, error -32 [ 142.215323][ T10] raw-gadget.2 gadget.1: failed to queue suspend event [ 144.242758][ T10] raw-gadget.2 gadget.1: failed to queue reset event [ 146.464550][ T10] raw-gadget.2 gadget.1: failed to queue resume event [ 147.732657][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.991450][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 149.037081][ T10] usb 2-1: device descriptor read/8, error -32 [ 150.868114][ T10] raw-gadget.2 gadget.1: failed to queue suspend event [ 151.169235][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.251744][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.320048][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.354429][ T10] usb usb2-port1: unable to enumerate USB device [ 151.443196][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.493741][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.570407][ T5829] Bluetooth: hci5: command tx timeout [ 153.874320][ T5128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.892055][ T5128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.902798][ T5128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.055121][ T5128] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.067386][ T5128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.649941][ T5128] Bluetooth: hci5: command tx timeout [ 156.770751][ T5128] Bluetooth: hci6: command tx timeout [ 157.144534][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.284106][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.314033][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.342449][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.385085][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.702700][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.731065][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.740105][ T54] Bluetooth: hci5: command tx timeout [ 157.754012][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.763813][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.775939][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.783397][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.800841][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.810648][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.828266][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.839385][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.850149][ T5829] Bluetooth: hci6: command tx timeout [ 159.483562][ T6026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.494258][ T5829] Bluetooth: hci0: command tx timeout [ 159.809868][ T5829] Bluetooth: hci5: command tx timeout [ 159.970962][ T5829] Bluetooth: hci4: command tx timeout [ 159.983560][ T5829] Bluetooth: hci7: command tx timeout [ 160.857629][ T6026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.930306][ T5829] Bluetooth: hci6: command tx timeout [ 160.949310][ T6026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.022202][ T6026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.100464][ T6404] raw-gadget.2 gadget.1: failed to queue disconnect event [ 161.156786][ T6419] chnl_net:caif_netlink_parms(): no params data found [ 161.378696][ T6026] bridge_slave_1: left allmulticast mode [ 161.384502][ T6026] bridge_slave_1: left promiscuous mode [ 161.390949][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.405976][ T6026] bridge_slave_0: left allmulticast mode [ 161.411741][ T6026] bridge_slave_0: left promiscuous mode [ 161.417406][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.570746][ T5829] Bluetooth: hci0: command tx timeout [ 161.649179][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.662503][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.672174][ T6026] bond0 (unregistering): Released all slaves [ 161.789439][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 161.815849][ T30] audit: type=1400 audit(1747795801.900:271): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.837711][ T30] audit: type=1400 audit(1747795801.910:272): avc: denied { read } for pid=5481 comm="dhcpcd" name="n100" dev="tmpfs" ino=2554 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.859803][ T30] audit: type=1400 audit(1747795801.910:273): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2554 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.884067][ T30] audit: type=1400 audit(1747795801.910:274): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2554 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.926755][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.934087][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.941426][ T6419] bridge_slave_0: entered allmulticast mode [ 161.948094][ T6419] bridge_slave_0: entered promiscuous mode [ 161.958208][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.965429][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.974813][ T6419] bridge_slave_1: entered allmulticast mode [ 161.982696][ T6419] bridge_slave_1: entered promiscuous mode [ 162.006635][ T6428] chnl_net:caif_netlink_parms(): no params data found [ 162.050172][ T5829] Bluetooth: hci7: command tx timeout [ 162.055620][ T5829] Bluetooth: hci4: command tx timeout [ 162.123915][ T30] audit: type=1400 audit(1747795802.210:275): avc: denied { read } for pid=6454 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.146967][ T30] audit: type=1400 audit(1747795802.210:276): avc: denied { open } for pid=6454 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.175543][ T30] audit: type=1400 audit(1747795802.210:277): avc: denied { getattr } for pid=6454 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.239718][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.285640][ T6431] chnl_net:caif_netlink_parms(): no params data found [ 162.307037][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.335323][ T6430] chnl_net:caif_netlink_parms(): no params data found [ 162.422993][ T30] audit: type=1400 audit(1747795802.510:278): avc: denied { write } for pid=6453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.455556][ T30] audit: type=1400 audit(1747795802.510:279): avc: denied { add_name } for pid=6453 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.484789][ T30] audit: type=1400 audit(1747795802.510:280): avc: denied { create } for pid=6453 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.562725][ T6026] hsr_slave_0: left promiscuous mode [ 162.568820][ T6026] hsr_slave_1: left promiscuous mode [ 162.574761][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.582220][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.590441][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.597853][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.618322][ T6026] veth1_macvtap: left promiscuous mode [ 162.624077][ T6026] veth0_macvtap: left promiscuous mode [ 162.629601][ T6026] veth1_vlan: left promiscuous mode [ 162.636021][ T6026] veth0_vlan: left promiscuous mode [ 162.889523][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 162.919548][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 163.020286][ T5829] Bluetooth: hci6: command tx timeout [ 163.153089][ T6419] team0: Port device team_slave_0 added [ 163.164121][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.172303][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.179444][ T6423] bridge_slave_0: entered allmulticast mode [ 163.188064][ T6423] bridge_slave_0: entered promiscuous mode [ 163.196408][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.204018][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.211211][ T6423] bridge_slave_1: entered allmulticast mode [ 163.218887][ T6423] bridge_slave_1: entered promiscuous mode [ 163.257941][ T6419] team0: Port device team_slave_1 added [ 163.321317][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.328424][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.335906][ T6428] bridge_slave_0: entered allmulticast mode [ 163.344016][ T6428] bridge_slave_0: entered promiscuous mode [ 163.367614][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.375032][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.382440][ T6430] bridge_slave_0: entered allmulticast mode [ 163.389108][ T6430] bridge_slave_0: entered promiscuous mode [ 163.405381][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.414212][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.422360][ T6428] bridge_slave_1: entered allmulticast mode [ 163.429518][ T6428] bridge_slave_1: entered promiscuous mode [ 163.457727][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.464920][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.491306][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.503485][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.510971][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.518100][ T6430] bridge_slave_1: entered allmulticast mode [ 163.524950][ T6430] bridge_slave_1: entered promiscuous mode [ 163.533602][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.568941][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.576762][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.602945][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.630223][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.650043][ T6428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.651473][ T5829] Bluetooth: hci0: command tx timeout [ 163.660264][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.677633][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.685215][ T6431] bridge_slave_0: entered allmulticast mode [ 163.693005][ T6431] bridge_slave_0: entered promiscuous mode [ 163.704637][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.711795][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.718933][ T6431] bridge_slave_1: entered allmulticast mode [ 163.726102][ T6431] bridge_slave_1: entered promiscuous mode [ 163.750076][ T6428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.791080][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.803823][ T6423] team0: Port device team_slave_0 added [ 163.812030][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.864343][ T6419] hsr_slave_0: entered promiscuous mode [ 163.871182][ T6419] hsr_slave_1: entered promiscuous mode [ 163.877319][ T6419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.886085][ T6419] Cannot create hsr debugfs directory [ 163.919192][ T6431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.953969][ T6423] team0: Port device team_slave_1 added [ 163.983830][ T6428] team0: Port device team_slave_0 added [ 163.994597][ T6428] team0: Port device team_slave_1 added [ 164.007966][ T6431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.026766][ T6430] team0: Port device team_slave_0 added [ 164.117780][ T6430] team0: Port device team_slave_1 added [ 164.132586][ T54] Bluetooth: hci7: command tx timeout [ 164.138066][ T5829] Bluetooth: hci4: command tx timeout [ 164.149180][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.159504][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.192833][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.206609][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.219015][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.244930][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.257531][ T6428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.308573][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.315770][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.341650][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.348117][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.359646][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.367053][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.394471][ T6428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.423772][ T6431] team0: Port device team_slave_0 added [ 164.440837][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.447811][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.478651][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.526643][ T6431] team0: Port device team_slave_1 added [ 164.552368][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.559352][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.587765][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.611326][ T6423] hsr_slave_0: entered promiscuous mode [ 164.617344][ T6423] hsr_slave_1: entered promiscuous mode [ 164.623658][ T6423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.631406][ T6423] Cannot create hsr debugfs directory [ 164.648304][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.655344][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.682601][ T6431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.694872][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.702304][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.728342][ T6431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.763693][ T6428] hsr_slave_0: entered promiscuous mode [ 164.770324][ T6428] hsr_slave_1: entered promiscuous mode [ 164.776351][ T6428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.784484][ T6428] Cannot create hsr debugfs directory [ 164.856483][ T6431] hsr_slave_0: entered promiscuous mode [ 164.863873][ T6431] hsr_slave_1: entered promiscuous mode [ 164.869993][ T6431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.877556][ T6431] Cannot create hsr debugfs directory [ 164.944092][ T6430] hsr_slave_0: entered promiscuous mode [ 164.951265][ T6430] hsr_slave_1: entered promiscuous mode [ 164.957447][ T6430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.965400][ T6430] Cannot create hsr debugfs directory [ 164.983414][ T6026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.126640][ T6026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.275794][ T6026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.393153][ T6419] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 165.415384][ T6026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.487752][ T6419] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 165.577010][ T6419] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 165.616355][ T6419] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 165.730320][ T54] Bluetooth: hci0: command tx timeout [ 165.761604][ T6428] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 165.786312][ T6428] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 165.807021][ T6428] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 165.840451][ T6428] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 165.884363][ T6026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.976572][ T6026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.029354][ T6423] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.097323][ T6026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.122707][ T6423] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.137703][ T6423] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.185072][ T6423] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.208788][ T6026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.220931][ T5829] Bluetooth: hci4: command tx timeout [ 166.226337][ T5829] Bluetooth: hci7: command tx timeout [ 166.303072][ T6431] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 166.361740][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.370451][ T6431] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 166.386891][ T6431] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.415513][ T6419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.427082][ T6431] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 166.514637][ T6430] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.526203][ T6430] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.539550][ T6419] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.563163][ T6428] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.571637][ T6430] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.583817][ T6430] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.649020][ T6026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.668592][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.675743][ T6025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.686377][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.693468][ T6025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.703481][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.710620][ T6025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.723855][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.730931][ T6025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.767334][ T6026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.824334][ T6026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.909678][ T6026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.954392][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.055938][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.111918][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.153581][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.160708][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.227195][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.234381][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.259076][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.278034][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.325958][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.333110][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.386678][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.488672][ T6026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.542197][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.549311][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.606782][ T6026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.682934][ T6428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.693225][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.729408][ T6423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.762201][ T6423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.823877][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.831030][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.878081][ T6026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.997156][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.004323][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.093968][ T6026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.215528][ T6419] veth0_vlan: entered promiscuous mode [ 168.339597][ T6419] veth1_vlan: entered promiscuous mode [ 168.505831][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.515978][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.549033][ T6419] veth0_macvtap: entered promiscuous mode [ 168.603933][ T6419] veth1_macvtap: entered promiscuous mode [ 168.707387][ T6026] bridge_slave_1: left allmulticast mode [ 168.729392][ T6026] bridge_slave_1: left promiscuous mode [ 168.737056][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.747448][ T6026] bridge_slave_0: left allmulticast mode [ 168.754694][ T6026] bridge_slave_0: left promiscuous mode [ 168.762176][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.777286][ T6026] bridge_slave_1: left allmulticast mode [ 168.787924][ T6026] bridge_slave_1: left promiscuous mode [ 168.797227][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.810239][ T6026] bridge_slave_0: left allmulticast mode [ 168.815947][ T6026] bridge_slave_0: left promiscuous mode [ 168.828218][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.846457][ T6026] bridge_slave_1: left allmulticast mode [ 168.853248][ T6026] bridge_slave_1: left promiscuous mode [ 168.859833][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.879660][ T6026] bridge_slave_0: left allmulticast mode [ 168.886822][ T6026] bridge_slave_0: left promiscuous mode [ 168.898515][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.910418][ T6026] bridge_slave_1: left allmulticast mode [ 168.916083][ T6026] bridge_slave_1: left promiscuous mode [ 168.926928][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.940082][ T6026] bridge_slave_0: left allmulticast mode [ 168.945794][ T6026] bridge_slave_0: left promiscuous mode [ 168.959378][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.655805][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.665662][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.675255][ T6026] bond0 (unregistering): Released all slaves [ 169.738179][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.748038][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.758167][ T6026] bond0 (unregistering): Released all slaves [ 169.822731][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.834363][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.843908][ T6026] bond0 (unregistering): Released all slaves [ 169.910286][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.921896][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.931965][ T6026] bond0 (unregistering): Released all slaves [ 169.951201][ T6428] veth0_vlan: entered promiscuous mode [ 169.987010][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.018230][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.065003][ T6428] veth1_vlan: entered promiscuous mode [ 170.104859][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.267988][ T6419] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.278721][ T6419] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.288691][ T6419] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.299271][ T6419] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.471397][ T6428] veth0_macvtap: entered promiscuous mode [ 170.516671][ T6431] veth0_vlan: entered promiscuous mode [ 170.528681][ T6428] veth1_macvtap: entered promiscuous mode [ 170.598015][ T6431] veth1_vlan: entered promiscuous mode [ 170.614826][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.627368][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.654926][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.667054][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.676998][ T6428] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.686470][ T6428] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.695562][ T6428] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.704447][ T6428] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.718598][ T6423] veth0_vlan: entered promiscuous mode [ 170.769584][ T6423] veth1_vlan: entered promiscuous mode [ 170.829256][ T6038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.838285][ T6431] veth0_macvtap: entered promiscuous mode [ 170.846230][ T6038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.893984][ T6431] veth1_macvtap: entered promiscuous mode [ 170.905905][ T6430] veth0_vlan: entered promiscuous mode [ 170.942396][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 170.942408][ T30] audit: type=1400 audit(1747795811.020:285): avc: denied { mounton } for pid=6419 comm="syz-executor" path="/root/syzkaller.BdYBP5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 171.028260][ T6430] veth1_vlan: entered promiscuous mode [ 171.047970][ T6430] ================================================================== [ 171.056067][ T6430] BUG: KASAN: global-out-of-bounds in fib6_add+0x3ced/0x4b60 [ 171.063460][ T6430] Read of size 4 at addr ffffffff9af9f5d0 by task syz-executor/6430 [ 171.071448][ T6430] [ 171.073781][ T6430] CPU: 1 UID: 0 PID: 6430 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 171.073805][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.073814][ T6430] Call Trace: [ 171.073820][ T6430] [ 171.073827][ T6430] dump_stack_lvl+0x116/0x1f0 [ 171.073856][ T6430] print_report+0xc3/0x670 [ 171.073875][ T6430] ? __virt_addr_valid+0x5e/0x590 [ 171.073899][ T6430] ? __phys_addr+0xc6/0x150 [ 171.073924][ T6430] ? fib6_add+0x3ced/0x4b60 [ 171.073943][ T6430] kasan_report+0xe0/0x110 [ 171.073961][ T6430] ? fib6_add+0x3ced/0x4b60 [ 171.073982][ T6430] fib6_add+0x3ced/0x4b60 [ 171.074006][ T6430] ? __pfx_fib6_add+0x10/0x10 [ 171.074024][ T6430] ? do_raw_spin_lock+0x12c/0x2b0 [ 171.074042][ T6430] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.074060][ T6430] ? lock_acquire+0x179/0x350 [ 171.074088][ T6430] ? ip6_route_add+0x8d/0x1c0 [ 171.074111][ T6430] ip6_route_add+0x8d/0x1c0 [ 171.074134][ T6430] addrconf_prefix_route+0x2fd/0x510 [ 171.074152][ T6430] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 171.074175][ T6430] ? mark_held_locks+0x49/0x80 [ 171.074199][ T6430] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 171.074216][ T6430] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.074240][ T6430] addrconf_notify+0x12c6/0x19e0 [ 171.074267][ T6430] notifier_call_chain+0xbc/0x410 [ 171.074292][ T6430] ? __pfx_addrconf_notify+0x10/0x10 [ 171.074316][ T6430] call_netdevice_notifiers_info+0xbe/0x140 [ 171.074340][ T6430] __dev_notify_flags+0x12c/0x2e0 [ 171.074356][ T6430] ? __pfx___dev_notify_flags+0x10/0x10 [ 171.074372][ T6430] ? __pfx___dev_change_flags+0x10/0x10 [ 171.074390][ T6430] ? do_setlink.constprop.0+0xa22/0x44b0 [ 171.074411][ T6430] netif_change_flags+0x108/0x160 [ 171.074429][ T6430] do_setlink.constprop.0+0xddf/0x44b0 [ 171.074452][ T6430] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 171.074471][ T6430] ? find_held_lock+0x2b/0x80 [ 171.074500][ T6430] ? __mutex_trylock_common+0xe9/0x250 [ 171.074529][ T6430] ? __pfx___mutex_trylock_common+0x10/0x10 [ 171.074557][ T6430] ? __pfx___might_resched+0x10/0x10 [ 171.074580][ T6430] ? rcu_is_watching+0x12/0xc0 [ 171.074600][ T6430] ? trace_contention_end+0xdd/0x130 [ 171.074617][ T6430] ? __mutex_lock+0x1ca/0xb90 [ 171.074644][ T6430] ? rtnl_newlink+0x600/0x2000 [ 171.074664][ T6430] ? __pfx___mutex_lock+0x10/0x10 [ 171.074688][ T6430] ? cap_capable+0xb3/0x250 [ 171.074716][ T6430] rtnl_newlink+0x1446/0x2000 [ 171.074740][ T6430] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.074759][ T6430] ? find_held_lock+0x2b/0x80 [ 171.074780][ T6430] ? avc_has_perm_noaudit+0x117/0x3b0 [ 171.074801][ T6430] ? avc_has_perm_noaudit+0x149/0x3b0 [ 171.074822][ T6430] ? __lock_acquire+0x5ca/0x1ba0 [ 171.074854][ T6430] ? find_held_lock+0x2b/0x80 [ 171.074873][ T6430] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.074892][ T6430] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.074910][ T6430] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 171.074931][ T6430] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.074951][ T6430] rtnetlink_rcv_msg+0x95b/0xe90 [ 171.074972][ T6430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.074999][ T6430] netlink_rcv_skb+0x16a/0x440 [ 171.075021][ T6430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.075042][ T6430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.075070][ T6430] ? netlink_deliver_tap+0x1ae/0xd30 [ 171.075092][ T6430] netlink_unicast+0x53d/0x7f0 [ 171.075114][ T6430] ? __pfx_netlink_unicast+0x10/0x10 [ 171.075139][ T6430] netlink_sendmsg+0x8d1/0xdd0 [ 171.075163][ T6430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.075189][ T6430] __sys_sendto+0x498/0x510 [ 171.075206][ T6430] ? __pfx___sys_sendto+0x10/0x10 [ 171.075232][ T6430] ? __pfx_fput_close_sync+0x10/0x10 [ 171.075253][ T6430] ? dnotify_flush+0x79/0x4c0 [ 171.075272][ T6430] __x64_sys_sendto+0xe0/0x1c0 [ 171.075288][ T6430] ? do_syscall_64+0x91/0x260 [ 171.075312][ T6430] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.075335][ T6430] do_syscall_64+0xcd/0x260 [ 171.075360][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.075378][ T6430] RIP: 0033:0x7f3f027907fc [ 171.075392][ T6430] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 171.075410][ T6430] RSP: 002b:00007ffcb80428f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 171.075427][ T6430] RAX: ffffffffffffffda RBX: 00007f3f034e4620 RCX: 00007f3f027907fc [ 171.075439][ T6430] RDX: 000000000000002c RSI: 00007f3f034e4670 RDI: 0000000000000003 [ 171.075450][ T6430] RBP: 0000000000000000 R08: 00007ffcb8042944 R09: 000000000000000c [ 171.075461][ T6430] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 171.075471][ T6430] R13: 0000000000000000 R14: 00007f3f034e4670 R15: 0000000000000000 [ 171.075493][ T6430] [ 171.075499][ T6430] [ 171.531622][ T6430] The buggy address belongs to the variable: [ 171.537578][ T6430] __key.0+0x10/0x40 [ 171.541465][ T6430] [ 171.543772][ T6430] The buggy address belongs to the physical page: [ 171.550161][ T6430] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af9f [ 171.558899][ T6430] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 171.566777][ T6430] raw: 00fff00000002000 ffffea00006be7c8 ffffea00006be7c8 0000000000000000 [ 171.575344][ T6430] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 171.583905][ T6430] page dumped because: kasan: bad access detected [ 171.590294][ T6430] page_owner info is not present (never set?) [ 171.596332][ T6430] [ 171.598635][ T6430] Memory state around the buggy address: [ 171.604244][ T6430] ffffffff9af9f480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 171.612286][ T6430] ffffffff9af9f500: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 171.620327][ T6430] >ffffffff9af9f580: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.628364][ T6430] ^ [ 171.635015][ T6430] ffffffff9af9f600: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 171.643057][ T6430] ffffffff9af9f680: 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 00 00 f9 f9 [ 171.651099][ T6430] ================================================================== [ 171.659177][ T6430] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.666375][ T6430] CPU: 1 UID: 0 PID: 6430 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 171.678531][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.688595][ T6430] Call Trace: [ 171.691872][ T6430] [ 171.694799][ T6430] dump_stack_lvl+0x3d/0x1f0 [ 171.699398][ T6430] panic+0x71c/0x800 [ 171.703297][ T6430] ? __pfx_panic+0x10/0x10 [ 171.707715][ T6430] ? mark_held_locks+0x49/0x80 [ 171.712492][ T6430] ? fib6_add+0x3ced/0x4b60 [ 171.717002][ T6430] ? check_panic_on_warn+0x1f/0xb0 [ 171.722110][ T6430] ? fib6_add+0x3ced/0x4b60 [ 171.726612][ T6430] check_panic_on_warn+0xab/0xb0 [ 171.731551][ T6430] end_report+0x107/0x170 [ 171.735896][ T6430] kasan_report+0xee/0x110 [ 171.740323][ T6430] ? fib6_add+0x3ced/0x4b60 [ 171.744826][ T6430] fib6_add+0x3ced/0x4b60 [ 171.749151][ T6430] ? __pfx_fib6_add+0x10/0x10 [ 171.753818][ T6430] ? do_raw_spin_lock+0x12c/0x2b0 [ 171.758830][ T6430] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.764189][ T6430] ? lock_acquire+0x179/0x350 [ 171.768859][ T6430] ? ip6_route_add+0x8d/0x1c0 [ 171.773527][ T6430] ip6_route_add+0x8d/0x1c0 [ 171.778020][ T6430] addrconf_prefix_route+0x2fd/0x510 [ 171.783290][ T6430] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 171.789082][ T6430] ? mark_held_locks+0x49/0x80 [ 171.793835][ T6430] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 171.799972][ T6430] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.805158][ T6430] addrconf_notify+0x12c6/0x19e0 [ 171.810086][ T6430] notifier_call_chain+0xbc/0x410 [ 171.815099][ T6430] ? __pfx_addrconf_notify+0x10/0x10 [ 171.820374][ T6430] call_netdevice_notifiers_info+0xbe/0x140 [ 171.826256][ T6430] __dev_notify_flags+0x12c/0x2e0 [ 171.831266][ T6430] ? __pfx___dev_notify_flags+0x10/0x10 [ 171.836797][ T6430] ? __pfx___dev_change_flags+0x10/0x10 [ 171.842327][ T6430] ? do_setlink.constprop.0+0xa22/0x44b0 [ 171.847949][ T6430] netif_change_flags+0x108/0x160 [ 171.852958][ T6430] do_setlink.constprop.0+0xddf/0x44b0 [ 171.858405][ T6430] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 171.864284][ T6430] ? find_held_lock+0x2b/0x80 [ 171.868948][ T6430] ? __mutex_trylock_common+0xe9/0x250 [ 171.874400][ T6430] ? __pfx___mutex_trylock_common+0x10/0x10 [ 171.880287][ T6430] ? __pfx___might_resched+0x10/0x10 [ 171.885560][ T6430] ? rcu_is_watching+0x12/0xc0 [ 171.890309][ T6430] ? trace_contention_end+0xdd/0x130 [ 171.895576][ T6430] ? __mutex_lock+0x1ca/0xb90 [ 171.900243][ T6430] ? rtnl_newlink+0x600/0x2000 [ 171.904992][ T6430] ? __pfx___mutex_lock+0x10/0x10 [ 171.910006][ T6430] ? cap_capable+0xb3/0x250 [ 171.914502][ T6430] rtnl_newlink+0x1446/0x2000 [ 171.919165][ T6430] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.924173][ T6430] ? find_held_lock+0x2b/0x80 [ 171.928834][ T6430] ? avc_has_perm_noaudit+0x117/0x3b0 [ 171.934192][ T6430] ? avc_has_perm_noaudit+0x149/0x3b0 [ 171.939550][ T6430] ? __lock_acquire+0x5ca/0x1ba0 [ 171.944487][ T6430] ? find_held_lock+0x2b/0x80 [ 171.949149][ T6430] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.954158][ T6430] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.959167][ T6430] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 171.964262][ T6430] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.969271][ T6430] rtnetlink_rcv_msg+0x95b/0xe90 [ 171.974197][ T6430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.979662][ T6430] netlink_rcv_skb+0x16a/0x440 [ 171.984413][ T6430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.989858][ T6430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.995137][ T6430] ? netlink_deliver_tap+0x1ae/0xd30 [ 172.000409][ T6430] netlink_unicast+0x53d/0x7f0 [ 172.005159][ T6430] ? __pfx_netlink_unicast+0x10/0x10 [ 172.010436][ T6430] netlink_sendmsg+0x8d1/0xdd0 [ 172.015192][ T6430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.020470][ T6430] __sys_sendto+0x498/0x510 [ 172.024959][ T6430] ? __pfx___sys_sendto+0x10/0x10 [ 172.029974][ T6430] ? __pfx_fput_close_sync+0x10/0x10 [ 172.035245][ T6430] ? dnotify_flush+0x79/0x4c0 [ 172.039907][ T6430] __x64_sys_sendto+0xe0/0x1c0 [ 172.044652][ T6430] ? do_syscall_64+0x91/0x260 [ 172.049319][ T6430] ? lockdep_hardirqs_on+0x7c/0x110 [ 172.054508][ T6430] do_syscall_64+0xcd/0x260 [ 172.059003][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.064879][ T6430] RIP: 0033:0x7f3f027907fc [ 172.069279][ T6430] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 172.088871][ T6430] RSP: 002b:00007ffcb80428f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 172.097270][ T6430] RAX: ffffffffffffffda RBX: 00007f3f034e4620 RCX: 00007f3f027907fc [ 172.105225][ T6430] RDX: 000000000000002c RSI: 00007f3f034e4670 RDI: 0000000000000003 [ 172.113178][ T6430] RBP: 0000000000000000 R08: 00007ffcb8042944 R09: 000000000000000c [ 172.121140][ T6430] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 172.129093][ T6430] R13: 0000000000000000 R14: 00007f3f034e4670 R15: 0000000000000000 [ 172.137053][ T6430] [ 172.140279][ T6430] Kernel Offset: disabled [ 172.144581][ T6430] Rebooting in 86400 seconds..