last executing test programs: 9.67473248s ago: executing program 1 (id=167): r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x503, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x8) fsetxattr$security_capability(r0, 0x0, 0x0, 0x4a, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000180)={0x6, 0x5, 0x2, 0x4, 0x1, 0x0, [{0x10, 0x75264262, 0x5, '\x00', 0x102}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x0, 0x3, r5, 0x0}]) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe66) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_init_net_socket$x25(0x9, 0x5, 0x0) 9.62961335s ago: executing program 3 (id=168): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0xc004, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187014, &(0x7f0000000180)) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607435dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900909500000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x2000000000000199, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4f23, 0x0, @remote}, 0x1c) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x58041, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000100)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x36]}}]}) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x6, &(0x7f00000001c0)=[{0xc919, 0x5f, 0x81, 0x10}, {0x9, 0x4, 0x5c, 0x10}, {0x3ff, 0x8, 0xc, 0x7fd}, {0x0, 0x16, 0x16, 0xe6}, {0x101, 0xb, 0x2, 0x42}, {0x4, 0x2, 0xf9, 0x400}]}) sendto(r4, &(0x7f0000000440)="c6391f3822", 0x5, 0x4040004, 0x0, 0x0) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000140)=0x80000000, 0x4) 8.329695579s ago: executing program 3 (id=171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf252500000005002a0017000000050029000300000018000200", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) 8.323486872s ago: executing program 0 (id=172): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c82026002200010002ad0e000000000000fd04000800040003000800000202000c0002000a0702000d001e931a9a741489933c4222c395727303c90b5e2050cc8e8e34e3183fa0fe6fe77848b3d4ea2f747e2c95df550c1ac9ffb69c53ce0e0a"], 0x2b) getdents(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10fea7, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 7.766015981s ago: executing program 3 (id=173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000004060108000000000000000002004400050001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48080) 7.744067824s ago: executing program 1 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x27d1, 0x0, &(0x7f0000000140), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 7.627375264s ago: executing program 2 (id=176): r0 = socket(0x40000000015, 0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xdddd1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x5d}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x9f, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0xa, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x5}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x84, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019780)=""/102373, &(0x7f00000003c0)=0x18fe5) 7.244034168s ago: executing program 1 (id=177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000020000006fee01668a9ec579000000000000020057d3064f856997c81dddbc7c4c4562f393677c7e3a4c1c8bb76376924c8455a67d15b53b11aa9a8522ab3e3c25be4b2e021d4f6d48707763cf06a4a7731e022add676be422db203d225c6c552b4f61e66fb87442217e09b587c6413eb44a991e541b80f3437678e3c89e943d8532091e41b905a3aec56cdd75fd3bcb0a7089038caf13ed99464685ab615c9b14140382a11ea39bc8654b8fda551867d36cc7db741b8f69b396bfc19ee67f06dcd7c81866841b9f97f3e91d4a0baca8dad2f0ec39f82e327c48a7dd71b0f04bca47a30000000000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe45e8000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="0100000000000002000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_rr_get_interval(r1, &(0x7f0000000040)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x4) 7.04605236s ago: executing program 3 (id=179): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) 6.757372006s ago: executing program 1 (id=180): openat$random(0xffffffffffffff9c, 0x0, 0x40082, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r0, &(0x7f0000004d40)={0x2020}, 0x2020) ioctl$KDSETLED(r0, 0x4b32, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r5) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 6.673888706s ago: executing program 2 (id=182): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) (async) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="1fab4e545a5f6845"], 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x189202, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x1bf) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='cachefiles_ref\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x158) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x873, 0x3, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d120000718498000000e2000000000000000000000100"}}) 6.53191775s ago: executing program 4 (id=183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001280)=ANY=[@ANYRES16=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x23, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pwrite64(r1, &(0x7f00000011c0), 0x0, 0x7) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0073000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5.848521767s ago: executing program 2 (id=184): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22c02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x8, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe0e}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x48090}, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, 0x0, 0x0, 0x7d, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61726b"], 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0042, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x7dd9, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3df}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0}) 5.471532582s ago: executing program 4 (id=185): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fchdir(0xffffffffffffffff) fanotify_mark(r0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) listen(r6, 0x4000) close(r6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00100011000500000067fd548f3800000003000007000000", @ANYRES32=r8, @ANYBLOB="01000000000000000c001a800800048004000680"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.32040251s ago: executing program 0 (id=186): write$sequencer(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a3000000002"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20fffffff50a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 4.581751054s ago: executing program 0 (id=187): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x6c05}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x0, 0x1, 0x7, 0x81, r9}) bind$inet(r8, 0x0, 0x0) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.410161418s ago: executing program 4 (id=188): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x300, 0x0, 0x1}, 0x14}}, 0x700000000000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0xfffffffffffffd9d, 0x4000004) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 4.074328583s ago: executing program 3 (id=189): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000000)={0x10, {{0x29, 0x0, 0x3000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x12, 0xd8}, [@ldst={0x6, 0x0, 0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) socket$unix(0x1, 0xc17a9ab45fe0440f, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x24000800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = dup(r3) bind$unix(r4, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0xfffffffffffffffa) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe8c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe78, 0x1, [@m_pedit={0xe74, 0x1, 0x0, 0x0, {{0xa}, {0xe48, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xe}, 0x2}, [{}, {}, {}, {}, {0x5943}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffff8000}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2ca2}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {0x2, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47d6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffc00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x40000000, 0x1}, {0x2}, {}, {0x80000, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0xffffffff, 0x6}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x4}, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x9d}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x6}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe8c}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 3.79170924s ago: executing program 0 (id=190): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) shmctl$SHM_LOCK(0x0, 0xb) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc}) 2.966048092s ago: executing program 4 (id=191): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@mcast2, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0xfa, 0x10, 0x0, 0x3, 0x10}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x109a80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0xffc9, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.906764584s ago: executing program 1 (id=192): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000007e40)={'wpan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000084) fsmount(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002140)=@can_delroute={0xb4, 0x19, 0x8, 0x70bd27, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_MOD_UID={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "000000ffffffe800"}, 0x3}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "b169aa0e212ea83d"}, 0x2}}, @CGW_SRC_IF={0x8, 0x9, r4}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x2, 0x2, 0x0, 0x0, "e3ca5304160fb493"}, 0x5}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "ddddc406bbffbb85"}, 0x4}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1}, 0x1, 0x0, 0x0, 0x0, "6fc6ab286155b5f2"}, 0x4}}]}, 0xb4}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x4001c00) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000002000)=[{{&(0x7f0000000900)=@ll={0x11, 0x10, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000980)="c32688bb549623242280afdc435e4eefb3c6cbafb726be9c52fcd49fc0c67e7120207f343a1403f1b3a3970dbd296c22efa82fb224673ea0b1f75d64fe1c8e469c7cd4ce157a70ef14c9281414bfa45097feabaf210437300b3ea1ec60e7ad29154f4c2e937776a3748b1a5b36c57528b860c6dcf62b4195af5e2801bda6000005048b9a6845f96a08", 0x89}, {&(0x7f0000000a40)="6588c8ada9ed48b27ac95d998213093ec33cb7bef1923ac327a38b4a749de64d84bcf25ed9ca5559d9d7ab8ea1b14b1409d424945ba6c6fecfb691d5acc06486164f3a1495b45be4f877f01e4a53ce090a96eefed7972a7bd4535d1fb9589cd09b6ffc8aafafb7424db0e3a21db12590241dbd0664d1570518820208bad6c709f49b988ed23b", 0x86}, {&(0x7f0000000b00)="b9be11a54312b72d7a832db96fe96f5fc2f2b3345762479e4ca125bbc292dadcfe6fed0e0dc76a7b578543282e62f165c54dc343e35df955f2c5e1e67600322214de1f930e2ed366580cad345fd84b3e78c736047e65dd25dfd94a7718ed7957e6def573b2f93bb62978c357286dbec5cc7c23b8008e43fa31988b00489d6dfcaaa7c5de1fe8c80980ad493e8f7927c98f6a8fb296e5f30c9112ae7601f74296cd4fde23c4466cae9462a631eedf8cca6a9c98d9e4a1f236c90bf170a6793e8ce55ca6822ca142cec9b24e83ed34a34d5b38448e4f626cf99f378c0cd12c56a5c3d012b79b0804d149fda3f222fefb553239e1", 0xf3}, {&(0x7f0000000400)}, {&(0x7f0000000c00)="36128247160e69fb584c795fe5d6b19d30b38c7ee78afa8bc0582c201594fcd30aecaf054ca184a5e9482417b12a8079dd3c2154cb4f3a262127a54eed14678cdbf5a9cefddcd18efa4eae48f8b7f8d33fdc20db0f8b03580b3bcecbe24ae028b3e92d2846a3c10e8fb641dd4ccb25ac656bde20edcd951a168e38f981810fc7f1260302225192d1c92f310675f8f4a095913f8f6af9770e12ad202157e33b", 0x9f}, {&(0x7f0000000cc0)="b17f6bb1091b765ebd997e16b67230d963b206cb97775c3ccc9faf6dabf4bb58978d25a9b05e281f469554fa300d44b09ee88cc1c4a8d76e487cd8d300c1da92671732e2adcda38b3e4cd60502c2d0f7225f6dc6581964819919dcb844fcdea9c5020b6cccb30d6fee58685f4d2f598fae53e2860bf4ab0804bcad95ba54bbe1d81ca3054801ef91af31389797058de1b4b9fae73a137725290d0a6be9911e204ed98146d268e0911114aeb0071bc13358f16d497df649bde18825f727e6e14da38a57661047813a9dbf30a797a36b", 0xcf}, {&(0x7f0000000dc0)="6f8be127012bdc48e11dab5e5cd7e914478b7b4694713b653b1bdfe724605fe2317af47a9d4a941bbefc2a9629be7b504fc12bbc8778e1b6ebb5f3693ed83aa7513d8a9ab6bb5fd42a16882b22490f3008f60a9621246bd9c54ed4464270989abf335a4efced9e3d4a047cd8bc61a944fd98652e3779a69d52b63d6637f1898a2e0b31fcaba458bfdf9c45fd2b2f5fe7f497b3252c84aee6ce060011dfce9c70be0ae5a5dc4d2d793d98fea325bbcec366392bd6ffb60651ac096a61e7ff3e88172024b737", 0xc5}], 0x7, &(0x7f000001ca40)=[{0x60, 0x10b, 0x5, "b6d531f8350fa3b1e62b33b0236cac2c1ab1bec2c1e575fe1385ee9fc17782c0b690071ab2134e53220b714a9d872c30462e4c20ccc8998b5ed08d80bbadcf49d3085c60ac7a7d5516c0e262f5"}, {0x18, 0x113, 0xe, "80"}, {0x10, 0x0, 0x3}, {0x68, 0x29, 0x1, "9fd632a22baa0bff93cc079b4b71c2849c3eb6eab6d94a6be943453c2526de2af6baa265c59770812b921f9f625400e21ca29f5877d54b3882fa491aae9ba1d101ec9bb4e665bef0d77fcf5a326a2ceae8"}, {0x1010, 0x116, 0x3, "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"}, {0xb0, 0x1, 0xd, "e415b72bb55e14d69cb89e942b46cf475fc9bbe7b8458a67c5babde35478242c622bae5fd691928ce0ec8a64f00ae5c97b9833bab4b2042902b5af4753420e6302581527bf3e8390f1ed92195e71600cc1f3e74aca604879a591dcbdc5a1ad38f855b5f32b5a44becc9bf81454c1c147eb512057eb48eb2b53d2e082335b6d1c281eda32c41e7698676d008fbf2066887e6b9c8f1d1083f5247be5fcf7"}, {0x40, 0x10f, 0x6, "c4e099d619c449b49ec88ea9feb405d94d5506b9ab2c1e9de5771ae246cc1724c8c88f1ee6d5ac95748548"}, {0xf0, 0x107, 0x0, "3306e8de1bfe13ab4c3feb8b0fa5f1ac4e6543fac97f9e013fa948a4ae50e98a8723d5f80733b24f774dab28922e4f9b42f1f879322d201924500340822260ba934afa3a4d1bd8dd12e04506b960811b950ba339424729b0ee14dc2edcd158a9267d4d1dbb0a716369290932a86aa27906cdde36a5201c1c424080e06df7b1fff21b5789ad7485c837680002d62c6c019124e144370562cd4dec341891350babae57bd9ce540a89bd31f7e604af26067aa331d71fd841ebf35b2ae23a968ddb187926af97939be3666ae657f512dd0f59639893dd9ee78c915ced219935b"}], 0x12e0}}], 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000000)=0x2863, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x40200, 0x100) fcntl$notify(r6, 0x402, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) 2.792740428s ago: executing program 4 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {}, 0x0, 0xffe4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0x98, 0x100, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 2.707849344s ago: executing program 1 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x3, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffef7fc200000086dd6012100800083a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa80009078000000006d4b63b5556db4b28507f902749e1af09406387d273346995bd183bfa78f0882b0c94753fed7c4c671f295ec56f6ea147f2261542e83d7291532a42f0266ee07c8b841cd615f40db0e6c7557c2c9176ca953805ceabc5425f960891b525b6f39a10a2bc638ed6b890f4931be489d20193737c5139e15733d847f32028263c56ef6fb58fb"], 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x8}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'lo\x00', {0x15}, 0xf962}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='kyber_throttled\x00', r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x60000000}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c000400"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)}}, 0x810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.606187692s ago: executing program 2 (id=195): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000180)={0xa, 0x4e21, 0x0, @private1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1800000000000000290000000400000062000000000000002400000000000000290000003200000000000000007ffffff700000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x58}, 0x40000) 1.459450487s ago: executing program 2 (id=196): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000002000)}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x100a, 0x9}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.304308347s ago: executing program 2 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0xe4ffffffffffffff, 0x0, 0x80}, 0x800) 1.198921168s ago: executing program 0 (id=198): r0 = fsopen(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000032200000085030000a000000095"], &(0x7f0000001300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) capset(&(0x7f0000000080)={0x20071026}, 0x0) writev(r3, &(0x7f0000000080), 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x60, 0x0, 0xa9e9e6f57de1a71, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}}, 0x20008000) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) fsmount(r0, 0x0, 0x0) 720.813182ms ago: executing program 3 (id=199): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fchdir(0xffffffffffffffff) fanotify_mark(r0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x4000) close(r5) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00100011000500000067fd548f3800000003000007000000", @ANYRES32, @ANYBLOB="01000000000000000c001a800800048004000680"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 644.34228ms ago: executing program 0 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r4, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$KDGETMODE(r5, 0x4b3b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800e4ffffff0500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 0s ago: executing program 4 (id=201): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a0000000020000000a0000000000000100"], 0x0, 0xba, 0x0, 0x0, 0x0, 0xa0000000}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 64.879431][ T30] audit: type=1400 audit(1751791649.407:62): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.882944][ T5816] cgroup: Unknown subsys name 'net' [ 64.902202][ T30] audit: type=1400 audit(1751791649.407:63): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.932512][ T30] audit: type=1400 audit(1751791649.457:64): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.118067][ T5816] cgroup: Unknown subsys name 'cpuset' [ 65.126397][ T5816] cgroup: Unknown subsys name 'rlimit' [ 65.241440][ T30] audit: type=1400 audit(1751791649.767:65): avc: denied { setattr } for pid=5816 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.264794][ T30] audit: type=1400 audit(1751791649.767:66): avc: denied { create } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.302440][ T30] audit: type=1400 audit(1751791649.767:67): avc: denied { write } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.322905][ T30] audit: type=1400 audit(1751791649.767:68): avc: denied { read } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.343194][ T30] audit: type=1400 audit(1751791649.787:69): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.368259][ T30] audit: type=1400 audit(1751791649.787:70): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.374086][ T5818] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.391533][ T30] audit: type=1400 audit(1751791649.817:71): avc: denied { read } for pid=5498 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 66.281655][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.025168][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 70.025184][ T30] audit: type=1400 audit(1751791654.547:78): avc: denied { create } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.056852][ T30] audit: type=1400 audit(1751791654.547:79): avc: denied { read write } for pid=5828 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.088960][ T30] audit: type=1400 audit(1751791654.547:80): avc: denied { open } for pid=5828 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.112859][ T30] audit: type=1400 audit(1751791654.587:81): avc: denied { ioctl } for pid=5828 comm="syz-executor" path="socket:[3908]" dev="sockfs" ino=3908 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.186326][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.194216][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.202344][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.203755][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.210619][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.224793][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.224850][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.232567][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.240535][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.247511][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.254093][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.261713][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.274201][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.276051][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.281939][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.289844][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.296975][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.303608][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.310467][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.318356][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.333666][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.341658][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.349118][ T30] audit: type=1400 audit(1751791654.857:82): avc: denied { read } for pid=5828 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.349191][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.415681][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.425617][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.441905][ T30] audit: type=1400 audit(1751791654.857:83): avc: denied { open } for pid=5828 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.477414][ T30] audit: type=1400 audit(1751791654.857:84): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 70.765117][ T30] audit: type=1400 audit(1751791655.287:85): avc: denied { module_request } for pid=5829 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.831901][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.916515][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.977494][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.040378][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.048491][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.098566][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.107426][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.114685][ T5829] bridge_slave_0: entered allmulticast mode [ 71.121813][ T5829] bridge_slave_0: entered promiscuous mode [ 71.129882][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 71.152753][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.160619][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.168136][ T5829] bridge_slave_1: entered allmulticast mode [ 71.175676][ T5829] bridge_slave_1: entered promiscuous mode [ 71.197867][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.204964][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.212376][ T5828] bridge_slave_0: entered allmulticast mode [ 71.219093][ T5828] bridge_slave_0: entered promiscuous mode [ 71.227092][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.234215][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.241661][ T5828] bridge_slave_1: entered allmulticast mode [ 71.248349][ T5828] bridge_slave_1: entered promiscuous mode [ 71.297619][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.316176][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 71.336257][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.348542][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.363843][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.371092][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.378492][ T5837] bridge_slave_0: entered allmulticast mode [ 71.385230][ T5837] bridge_slave_0: entered promiscuous mode [ 71.393678][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.418577][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.425936][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.433079][ T5837] bridge_slave_1: entered allmulticast mode [ 71.440042][ T5837] bridge_slave_1: entered promiscuous mode [ 71.466620][ T5829] team0: Port device team_slave_0 added [ 71.513844][ T5829] team0: Port device team_slave_1 added [ 71.550690][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.561494][ T5828] team0: Port device team_slave_0 added [ 71.589990][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.611204][ T5828] team0: Port device team_slave_1 added [ 71.618717][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.626153][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.652129][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.663578][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.671323][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.678673][ T5832] bridge_slave_0: entered allmulticast mode [ 71.685476][ T5832] bridge_slave_0: entered promiscuous mode [ 71.711301][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.718389][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.745028][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.756879][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.764040][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.772051][ T5832] bridge_slave_1: entered allmulticast mode [ 71.778886][ T5832] bridge_slave_1: entered promiscuous mode [ 71.804114][ T5837] team0: Port device team_slave_0 added [ 71.819552][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.829160][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.855552][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.898222][ T5837] team0: Port device team_slave_1 added [ 71.904097][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.911242][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.919302][ T5833] bridge_slave_0: entered allmulticast mode [ 71.926304][ T5833] bridge_slave_0: entered promiscuous mode [ 71.933596][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.941122][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.967038][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.979955][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.999532][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.007390][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.014486][ T5833] bridge_slave_1: entered allmulticast mode [ 72.021951][ T5833] bridge_slave_1: entered promiscuous mode [ 72.051857][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.078834][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.085889][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.111904][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.141889][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.162770][ T5832] team0: Port device team_slave_0 added [ 72.169215][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.176355][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.202300][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.218128][ T5829] hsr_slave_0: entered promiscuous mode [ 72.224225][ T5829] hsr_slave_1: entered promiscuous mode [ 72.232613][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.251111][ T5832] team0: Port device team_slave_1 added [ 72.298372][ T5828] hsr_slave_0: entered promiscuous mode [ 72.304529][ T5828] hsr_slave_1: entered promiscuous mode [ 72.311065][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.318930][ T5828] Cannot create hsr debugfs directory [ 72.326368][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.333306][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.359865][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.382354][ T5833] team0: Port device team_slave_0 added [ 72.395977][ T5842] Bluetooth: hci1: command tx timeout [ 72.396006][ T5844] Bluetooth: hci0: command tx timeout [ 72.413747][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.421124][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.447270][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.459722][ T5833] team0: Port device team_slave_1 added [ 72.475343][ T5842] Bluetooth: hci3: command tx timeout [ 72.475346][ T5834] Bluetooth: hci2: command tx timeout [ 72.486638][ T5844] Bluetooth: hci4: command tx timeout [ 72.561807][ T5837] hsr_slave_0: entered promiscuous mode [ 72.568470][ T5837] hsr_slave_1: entered promiscuous mode [ 72.574389][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.582495][ T5837] Cannot create hsr debugfs directory [ 72.605186][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.612148][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.638286][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.650872][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.658034][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.683994][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.750827][ T5832] hsr_slave_0: entered promiscuous mode [ 72.757257][ T5832] hsr_slave_1: entered promiscuous mode [ 72.763125][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.770817][ T5832] Cannot create hsr debugfs directory [ 72.862870][ T5833] hsr_slave_0: entered promiscuous mode [ 72.869381][ T5833] hsr_slave_1: entered promiscuous mode [ 72.875427][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.882976][ T5833] Cannot create hsr debugfs directory [ 73.054304][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.088432][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.119622][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.152958][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.191048][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.208012][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.224056][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.239245][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.258820][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.273087][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.283896][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.308090][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.373465][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.383748][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.419393][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.429094][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.519973][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.532390][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.542203][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.552042][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.597099][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.629273][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.666589][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.678427][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.701221][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.708498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.727856][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.750143][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.757288][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.782594][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.789687][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.806190][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.816197][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.836832][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.843915][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.866449][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.879846][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.904809][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.911937][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.922568][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.929683][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.941424][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.948550][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.974726][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.981834][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.023315][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.047166][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.112531][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.119780][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.127244][ T30] audit: type=1400 audit(1751791658.637:86): avc: denied { sys_module } for pid=5829 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.132314][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.155472][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.353473][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.469678][ T5829] veth0_vlan: entered promiscuous mode [ 74.493997][ T5844] Bluetooth: hci0: command tx timeout [ 74.499831][ T5834] Bluetooth: hci1: command tx timeout [ 74.510188][ T5829] veth1_vlan: entered promiscuous mode [ 74.548320][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.558089][ T5834] Bluetooth: hci4: command tx timeout [ 74.558104][ T5844] Bluetooth: hci2: command tx timeout [ 74.563494][ T5834] Bluetooth: hci3: command tx timeout [ 74.629970][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.681849][ T5829] veth0_macvtap: entered promiscuous mode [ 74.719174][ T5837] veth0_vlan: entered promiscuous mode [ 74.742300][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.752801][ T5829] veth1_macvtap: entered promiscuous mode [ 74.767940][ T5837] veth1_vlan: entered promiscuous mode [ 74.809565][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.839145][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.861343][ T5828] veth0_vlan: entered promiscuous mode [ 74.873437][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.897471][ T5828] veth1_vlan: entered promiscuous mode [ 74.908236][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.918454][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.927507][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.936355][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.992000][ T5837] veth0_macvtap: entered promiscuous mode [ 75.024302][ T5837] veth1_macvtap: entered promiscuous mode [ 75.083091][ T5828] veth0_macvtap: entered promiscuous mode [ 75.119482][ T5833] veth0_vlan: entered promiscuous mode [ 75.142231][ T5828] veth1_macvtap: entered promiscuous mode [ 75.148835][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.158984][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.160735][ T5833] veth1_vlan: entered promiscuous mode [ 75.187235][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.228787][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.243846][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.246879][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.259689][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.265412][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.278329][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.290567][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.300861][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.309738][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.324044][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.333487][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.342495][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.351559][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.372152][ T5832] veth0_vlan: entered promiscuous mode [ 75.386307][ T30] audit: type=1400 audit(1751791659.917:87): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.acSrTi/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.413296][ T30] audit: type=1400 audit(1751791659.917:88): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.437516][ T30] audit: type=1400 audit(1751791659.917:89): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.acSrTi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.463600][ T30] audit: type=1400 audit(1751791659.917:90): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.473438][ T5833] veth0_macvtap: entered promiscuous mode [ 75.501275][ T30] audit: type=1400 audit(1751791659.917:91): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.acSrTi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.503773][ T5832] veth1_vlan: entered promiscuous mode [ 75.541876][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.542805][ T30] audit: type=1400 audit(1751791659.917:92): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.acSrTi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.589961][ T30] audit: type=1400 audit(1751791659.917:93): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.634617][ T30] audit: type=1400 audit(1751791659.937:94): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.676765][ T5833] veth1_macvtap: entered promiscuous mode [ 75.693145][ T30] audit: type=1400 audit(1751791659.937:95): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="gadgetfs" ino=7345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.760026][ T30] audit: type=1400 audit(1751791659.937:96): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.790497][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.833438][ T5832] veth0_macvtap: entered promiscuous mode [ 75.860646][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.878639][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.888588][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.897705][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.906669][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.920170][ T5832] veth1_macvtap: entered promiscuous mode [ 75.928360][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.937900][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.980010][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.989073][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.027689][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.038105][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.064599][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.096901][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.122917][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.134841][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.135848][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.147501][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.179018][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.206366][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.324553][ T5117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.372869][ T5117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.441757][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.486830][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.532482][ T232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.557297][ T5834] Bluetooth: hci1: command tx timeout [ 76.557329][ T5844] Bluetooth: hci0: command tx timeout [ 76.571073][ T232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.634351][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.642522][ T5834] Bluetooth: hci2: command tx timeout [ 76.642558][ T5834] Bluetooth: hci4: command tx timeout [ 76.648511][ T5844] Bluetooth: hci3: command tx timeout [ 76.685609][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.032043][ T5965] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.042691][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 77.069500][ T5962] kernel profiling enabled (shift: 7) [ 77.254070][ T5963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.445007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.453546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.650035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.985492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.635372][ T5834] Bluetooth: hci0: command tx timeout [ 78.646049][ T5834] Bluetooth: hci1: command tx timeout [ 78.716611][ T5834] Bluetooth: hci3: command tx timeout [ 78.716637][ T5844] Bluetooth: hci2: command tx timeout [ 78.722029][ T5834] Bluetooth: hci4: command tx timeout [ 79.345995][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.770439][ T24] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 79.783243][ T24] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.798508][ T24] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.820747][ T5978] usb usb8: usbfs: process 5978 (syz.2.10) did not claim interface 0 before use [ 79.827349][ T5991] evm: overlay not supported [ 79.836124][ T24] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 79.854460][ T24] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 79.863210][ T24] usb 5-1: Manufacturer: syz [ 79.949035][ T24] usb 5-1: SerialNumber: syz [ 79.975579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.975678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.992583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.002645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.011886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.076706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.277074][ T5982] netlink: 264 bytes leftover after parsing attributes in process `syz.4.11'. [ 80.469148][ T24] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 80.498049][ T24] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input5 [ 80.538459][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 80.545618][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 80.552624][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 80.560753][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 80.568348][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 80.575369][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 80.582351][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 80.589321][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 80.596103][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 80.622115][ T24] usb 5-1: USB disconnect, device number 2 [ 80.655364][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 80.655381][ T30] audit: type=1400 audit(1751791665.177:151): avc: denied { read } for pid=5188 comm="acpid" name="event4" dev="devtmpfs" ino=2791 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.698333][ T6000] x_tables: ip_tables: osf match: only valid for protocol 6 [ 80.712550][ T30] audit: type=1400 audit(1751791665.177:152): avc: denied { open } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2791 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.797575][ T30] audit: type=1400 audit(1751791665.177:153): avc: denied { ioctl } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2791 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.906451][ T30] audit: type=1400 audit(1751791665.227:154): avc: denied { create } for pid=5997 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.069613][ T30] audit: type=1400 audit(1751791665.227:155): avc: denied { setopt } for pid=5997 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.088897][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.167329][ T30] audit: type=1400 audit(1751791665.287:156): avc: denied { setopt } for pid=5999 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.254420][ T6013] netlink: 'syz.2.20': attribute type 4 has an invalid length. [ 81.689427][ T1207] cfg80211: failed to load regulatory.db [ 81.697910][ T30] audit: type=1400 audit(1751791665.397:157): avc: denied { setopt } for pid=6006 comm="syz.3.19" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.749278][ T30] audit: type=1400 audit(1751791665.587:158): avc: granted { setsecparam } for pid=6008 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 81.973867][ T6015] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 82.217402][ T30] audit: type=1400 audit(1751791665.627:159): avc: denied { read write } for pid=6010 comm="syz.1.21" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.240655][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.262746][ T30] audit: type=1400 audit(1751791665.627:160): avc: denied { open } for pid=6010 comm="syz.1.21" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 85.231281][ T6055] fuse: Bad value for 'fd' [ 85.587489][ T6059] team0: entered allmulticast mode [ 85.600468][ T6059] team_slave_0: entered allmulticast mode [ 85.669779][ T6064] loop8: detected capacity change from 0 to 8 [ 85.685245][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 85.685261][ T30] audit: type=1400 audit(1751791670.197:171): avc: denied { create } for pid=6060 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.740981][ T6059] team_slave_1: entered allmulticast mode [ 85.791245][ T30] audit: type=1400 audit(1751791670.197:172): avc: denied { append } for pid=6060 comm="syz.3.36" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.818306][ T30] audit: type=1400 audit(1751791670.277:173): avc: denied { write } for pid=6060 comm="syz.3.36" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.854751][ T30] audit: type=1400 audit(1751791670.367:174): avc: denied { create } for pid=6051 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.911336][ T6069] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 85.990916][ T30] audit: type=1400 audit(1751791670.427:175): avc: denied { ioctl } for pid=6051 comm="syz.2.31" path="socket:[8316]" dev="sockfs" ino=8316 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.018400][ T30] audit: type=1400 audit(1751791670.427:176): avc: denied { write } for pid=6051 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 86.055517][ T30] audit: type=1400 audit(1751791670.587:177): avc: denied { create } for pid=6061 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.360145][ T30] audit: type=1400 audit(1751791670.887:178): avc: denied { create } for pid=6077 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.553854][ T6064] loop8: detected capacity change from 8 to 6 [ 86.789923][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 86.810381][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.819674][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 86.855098][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.864302][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 86.891220][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.900446][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 86.914622][ T6081] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 86.915705][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.932184][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 86.941611][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.950793][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 86.976374][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 87.005086][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.014247][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 87.022144][ C0] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.031308][ C0] Buffer I/O error on dev loop8, logical block 1, async page read [ 87.041488][ C0] I/O error, dev loop8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.050674][ C0] Buffer I/O error on dev loop8, logical block 2, async page read [ 87.070003][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 87.077938][ C0] Buffer I/O error on dev loop8, logical block 1, async page read [ 87.100889][ T30] audit: type=1400 audit(1751791671.627:179): avc: denied { create } for pid=6083 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.244267][ T30] audit: type=1400 audit(1751791671.647:180): avc: denied { write } for pid=6083 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.375714][ T6102] 9pnet_virtio: no channels available for device syz [ 88.528322][ T6104] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 89.509795][ T6111] capability: warning: `syz.2.48' uses deprecated v2 capabilities in a way that may be insecure [ 91.042570][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 91.042585][ T30] audit: type=1400 audit(1751791675.567:208): avc: denied { execute } for pid=6129 comm="syz.1.53" name="file1" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.072316][ T6130] process 'syz.1.53' launched './file1' with NULL argv: empty string added [ 91.125185][ T5892] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 91.179773][ T30] audit: type=1400 audit(1751791675.607:209): avc: denied { execute_no_trans } for pid=6129 comm="syz.1.53" path="/13/file1" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.228684][ T30] audit: type=1400 audit(1751791675.607:210): avc: denied { read write } for pid=6129 comm="syz.1.53" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.258455][ T30] audit: type=1400 audit(1751791675.617:211): avc: denied { open } for pid=6129 comm="syz.1.53" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.358111][ T30] audit: type=1400 audit(1751791675.887:212): avc: denied { ioctl } for pid=6133 comm="syz.4.54" path="socket:[8454]" dev="sockfs" ino=8454 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.378004][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.385308][ T30] audit: type=1400 audit(1751791675.897:213): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.394569][ T5892] usb 4-1: not running at top speed; connect to a high speed hub [ 91.429816][ T5892] usb 4-1: too many configurations: 110, using maximum allowed: 8 [ 91.764281][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 91.772905][ T5892] usb 4-1: can't read configurations, error -61 [ 91.917945][ T5892] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 91.987705][ T30] audit: type=1400 audit(1751791676.497:214): avc: denied { create } for pid=6137 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.061769][ T30] audit: type=1400 audit(1751791676.517:215): avc: denied { write } for pid=6137 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.125297][ T30] audit: type=1400 audit(1751791676.557:216): avc: denied { bind } for pid=6141 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.238844][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.264504][ T5892] usb 4-1: not running at top speed; connect to a high speed hub [ 92.281965][ T5892] usb 4-1: too many configurations: 110, using maximum allowed: 8 [ 92.341135][ T6152] netlink: 'syz.4.58': attribute type 4 has an invalid length. [ 92.401670][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 92.707566][ T30] audit: type=1400 audit(1751791676.557:217): avc: denied { setopt } for pid=6141 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.728072][ T5892] usb 4-1: can't read configurations, error -61 [ 92.736848][ T5892] usb usb4-port1: attempt power cycle [ 92.822121][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.404321][ T6159] gfs2: not a GFS2 filesystem [ 93.425633][ T5892] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 93.548559][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.645408][ T5892] usb 4-1: not running at top speed; connect to a high speed hub [ 93.680023][ T5892] usb 4-1: too many configurations: 110, using maximum allowed: 8 [ 93.699798][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 93.707676][ T5892] usb 4-1: can't read configurations, error -61 [ 93.921304][ T5892] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 94.217328][ T5892] usb 4-1: device not accepting address 5, error -71 [ 94.680191][ T5892] usb usb4-port1: unable to enumerate USB device [ 95.306262][ T6182] QAT: failed to copy from user cfg_data. [ 96.619393][ T6195] mmap: syz.2.68 (6195) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.723738][ T6195] pim6reg: entered allmulticast mode [ 96.963064][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 96.963078][ T30] audit: type=1400 audit(1751791681.477:272): avc: denied { name_bind } for pid=6199 comm="syz.0.70" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 97.066226][ T30] audit: type=1400 audit(1751791681.477:273): avc: denied { node_bind } for pid=6199 comm="syz.0.70" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 97.126431][ T6203] Zero length message leads to an empty skb [ 97.374820][ T30] audit: type=1400 audit(1751791681.577:274): avc: denied { listen } for pid=6201 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.175188][ T30] audit: type=1400 audit(1751791682.227:275): avc: denied { create } for pid=6204 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.237629][ T30] audit: type=1400 audit(1751791682.227:276): avc: denied { bind } for pid=6204 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.346277][ T30] audit: type=1400 audit(1751791682.227:277): avc: denied { accept } for pid=6204 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.414985][ T6217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 98.774858][ T30] audit: type=1400 audit(1751791683.297:278): avc: denied { create } for pid=6219 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.380349][ T30] audit: type=1400 audit(1751791683.297:279): avc: denied { connect } for pid=6219 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.444139][ T30] audit: type=1400 audit(1751791683.297:280): avc: denied { write } for pid=6219 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.691294][ T6230] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 99.751144][ T30] audit: type=1400 audit(1751791684.277:281): avc: denied { getopt } for pid=6225 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.714829][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.892561][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.215406][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.239922][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.250283][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 101.291218][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.345171][ T24] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.353301][ T24] usb 1-1: Manufacturer: syz [ 101.387016][ T24] usb 1-1: config 0 descriptor?? [ 101.470261][ T6253] netlink: 'syz.2.87': attribute type 4 has an invalid length. [ 102.038421][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 102.044426][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 102.122006][ T6264] pim6reg: entered allmulticast mode [ 102.461496][ T24] usb 1-1: USB disconnect, device number 2 [ 102.515380][ T5954] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.386569][ T5954] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.414348][ T5954] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 103.425225][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.433981][ T5954] usb 2-1: Product: syz [ 103.449507][ T5954] usb 2-1: Manufacturer: syz [ 103.462734][ T5954] usb 2-1: SerialNumber: syz [ 103.502483][ T5954] usb 2-1: config 0 descriptor?? [ 103.759392][ T30] audit: type=1400 audit(1751791688.287:282): avc: denied { bind } for pid=6296 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.791743][ T5892] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.824120][ T30] audit: type=1400 audit(1751791688.287:283): avc: denied { read } for pid=6296 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.913571][ T6299] wireguard0: entered promiscuous mode [ 103.921698][ T6299] wireguard0: entered allmulticast mode [ 104.015379][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.225594][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 104.406665][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.415021][ T24] usb 1-1: config 0 has no interface number 0 [ 104.421264][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 104.426546][ T5892] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.439541][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.441304][ T5892] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 104.448794][ T24] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 104.458235][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.466093][ T24] usb 1-1: Product: syz [ 104.477410][ T5892] usb 5-1: Product: syz [ 104.480700][ T24] usb 1-1: Manufacturer: syz [ 104.486997][ T24] usb 1-1: SerialNumber: syz [ 104.487382][ T5892] usb 5-1: Manufacturer: syz [ 104.495245][ T24] usb 1-1: config 0 descriptor?? [ 104.501646][ T5892] usb 5-1: SerialNumber: syz [ 104.504462][ T24] smsc75xx v1.0.0 [ 104.511564][ T5892] usb 5-1: config 0 descriptor?? [ 104.804154][ T30] audit: type=1400 audit(1751791689.327:284): avc: denied { listen } for pid=6265 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.944316][ T6319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.92'. [ 105.060254][ T6300] SELinux: policydb version -845211227 does not match my version range 15-34 [ 105.146750][ T30] audit: type=1400 audit(1751791689.327:285): avc: denied { accept } for pid=6265 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.188664][ T6300] SELinux: failed to load policy [ 105.249220][ T30] audit: type=1400 audit(1751791689.397:286): avc: denied { create } for pid=6265 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 105.268934][ T6303] SELinux: policydb version -845211227 does not match my version range 15-34 [ 105.295767][ T6303] SELinux: failed to load policy [ 105.316427][ T30] audit: type=1400 audit(1751791689.587:287): avc: denied { load_policy } for pid=6296 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.518577][ T30] audit: type=1400 audit(1751791689.967:288): avc: denied { getopt } for pid=6296 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.547854][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 105.781462][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 106.275279][ T1207] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.284490][ T6300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.370711][ T977] usb 2-1: USB disconnect, device number 2 [ 106.517049][ T1207] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 106.535177][ T1207] usb 3-1: config 0 has no interface number 0 [ 106.542689][ T1207] usb 3-1: config 0 interface 250 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 106.555218][ T1207] usb 3-1: config 0 interface 250 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 106.566509][ T1207] usb 3-1: config 0 interface 250 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 106.758051][ T6330] netlink: 72 bytes leftover after parsing attributes in process `syz.4.99'. [ 106.788194][ T1207] usb 3-1: config 0 interface 250 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 106.957352][ T1207] usb 3-1: New USB device found, idVendor=1e2d, idProduct=0060, bcdDevice=79.4a [ 106.975630][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.985924][ T1207] usb 3-1: Product: syz [ 106.990138][ T1207] usb 3-1: Manufacturer: syz [ 106.994899][ T1207] usb 3-1: SerialNumber: syz [ 107.004841][ T1207] usb 3-1: config 0 descriptor?? [ 107.017234][ T1207] option 3-1:0.250: GSM modem (1-port) converter detected [ 107.079517][ T30] audit: type=1400 audit(1751791691.607:289): avc: denied { getopt } for pid=6333 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.110050][ T30] audit: type=1400 audit(1751791691.617:290): avc: denied { ioctl } for pid=6333 comm="syz.1.107" path="socket:[9516]" dev="sockfs" ino=9516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.193044][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 107.207189][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 107.230881][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 107.257076][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 107.274524][ T24] usb 1-1: USB disconnect, device number 3 [ 107.321667][ T30] audit: type=1400 audit(1751791691.847:291): avc: denied { execute } for pid=6342 comm="syz.3.109" name="file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.467557][ T5918] usb 3-1: USB disconnect, device number 2 [ 108.515873][ T5918] option 3-1:0.250: device disconnected [ 108.585559][ T24] usb 5-1: USB disconnect, device number 3 [ 108.627520][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 109.265510][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 109.265524][ T30] audit: type=1400 audit(1751791693.797:297): avc: denied { read write } for pid=6372 comm="syz.1.119" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.382755][ T30] audit: type=1400 audit(1751791693.827:298): avc: denied { open } for pid=6372 comm="syz.1.119" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.409958][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.687013][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.721768][ T24] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 109.748143][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.766433][ T24] usb 3-1: Product: syz [ 109.778657][ T6388] netlink: 'syz.0.123': attribute type 11 has an invalid length. [ 109.793789][ T24] usb 3-1: Manufacturer: syz [ 109.797684][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.123'. [ 109.804692][ T24] usb 3-1: SerialNumber: syz [ 109.848619][ T24] usb 3-1: config 0 descriptor?? [ 109.958351][ T30] audit: type=1400 audit(1751791694.467:299): avc: denied { mount } for pid=6389 comm="syz.3.124" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 110.226805][ T30] audit: type=1400 audit(1751791694.757:300): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 110.346739][ T6402] 9pnet_virtio: no channels available for device syz [ 111.531562][ T6413] syz.1.130 uses obsolete (PF_INET,SOCK_PACKET) [ 111.861590][ T6421] netlink: 72 bytes leftover after parsing attributes in process `syz.2.117'. [ 112.241742][ T6428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6428 comm=syz.4.133 [ 112.258961][ T6423] lo speed is unknown, defaulting to 1000 [ 112.262863][ T30] audit: type=1400 audit(1751791696.787:301): avc: denied { setopt } for pid=6415 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.266792][ T6423] lo speed is unknown, defaulting to 1000 [ 112.293067][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 112.309395][ T30] audit: type=1400 audit(1751791696.787:302): avc: denied { write } for pid=6415 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 112.329767][ T30] audit: type=1400 audit(1751791696.837:303): avc: denied { connect } for pid=6415 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.374454][ T6428] vlan2: entered allmulticast mode [ 112.379996][ T30] audit: type=1400 audit(1751791696.887:304): avc: denied { connect } for pid=6415 comm="syz.0.131" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.405220][ T6428] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 112.445171][ T977] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.866312][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 113.935985][ T977] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 114.009754][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.017914][ T977] usb 4-1: Product: syz [ 114.023226][ T977] usb 4-1: Manufacturer: syz [ 114.028474][ T977] usb 4-1: SerialNumber: syz [ 114.036209][ T6423] lo speed is unknown, defaulting to 1000 [ 114.047269][ T6423] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.057813][ T24] usb 3-1: USB disconnect, device number 3 [ 114.060939][ T6423] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.095965][ T6423] lo speed is unknown, defaulting to 1000 [ 114.103160][ T6423] lo speed is unknown, defaulting to 1000 [ 114.109792][ T6423] lo speed is unknown, defaulting to 1000 [ 114.116266][ T6423] lo speed is unknown, defaulting to 1000 [ 114.122656][ T6423] lo speed is unknown, defaulting to 1000 [ 114.804029][ T30] audit: type=1400 audit(1751791699.327:305): avc: denied { create } for pid=6451 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.043932][ T30] audit: type=1400 audit(1751791699.357:306): avc: denied { bind } for pid=6451 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.063150][ T30] audit: type=1400 audit(1751791699.367:307): avc: denied { write } for pid=6451 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.816599][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.625277][ T977] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 116.918758][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.134889][ T24] usb 4-1: USB disconnect, device number 6 [ 117.501642][ T6478] x_tables: ip_tables: osf match: only valid for protocol 6 [ 117.895215][ T30] audit: type=1400 audit(1751791702.347:308): avc: denied { bind } for pid=6481 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.914438][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.107602][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.123976][ T30] audit: type=1400 audit(1751791702.347:309): avc: denied { setopt } for pid=6481 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.281928][ T6487] FAULT_INJECTION: forcing a failure. [ 118.281928][ T6487] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.295167][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.1.149 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 118.295183][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.295189][ T6487] Call Trace: [ 118.295193][ T6487] [ 118.295197][ T6487] dump_stack_lvl+0x16c/0x1f0 [ 118.295218][ T6487] should_fail_ex+0x512/0x640 [ 118.295235][ T6487] _copy_to_user+0x32/0xd0 [ 118.295253][ T6487] simple_read_from_buffer+0xcb/0x170 [ 118.295270][ T6487] proc_fail_nth_read+0x197/0x270 [ 118.295285][ T6487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.295299][ T6487] ? rw_verify_area+0xcf/0x680 [ 118.295312][ T6487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.295326][ T6487] vfs_read+0x1e1/0xc60 [ 118.295342][ T6487] ? __pfx___mutex_lock+0x10/0x10 [ 118.295358][ T6487] ? __pfx_vfs_read+0x10/0x10 [ 118.295376][ T6487] ? __fget_files+0x20e/0x3c0 [ 118.295396][ T6487] ksys_read+0x12a/0x250 [ 118.295410][ T6487] ? __pfx_ksys_read+0x10/0x10 [ 118.295428][ T6487] do_syscall_64+0xcd/0x4c0 [ 118.295445][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.295457][ T6487] RIP: 0033:0x7f1502b8d33c [ 118.295466][ T6487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.295476][ T6487] RSP: 002b:00007f1503abb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.295486][ T6487] RAX: ffffffffffffffda RBX: 00007f1502db5fa0 RCX: 00007f1502b8d33c [ 118.295493][ T6487] RDX: 000000000000000f RSI: 00007f1503abb0a0 RDI: 0000000000000007 [ 118.295499][ T6487] RBP: 00007f1503abb090 R08: 0000000000000000 R09: 0000000000000000 [ 118.295505][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.295511][ T6487] R13: 0000000000000000 R14: 00007f1502db5fa0 R15: 00007ffec39953b8 [ 118.295524][ T6487] [ 118.379941][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.520180][ T30] audit: type=1400 audit(1751791703.037:310): avc: denied { read append } for pid=6488 comm="syz.2.151" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 118.557068][ T24] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 118.570476][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.579364][ T24] usb 4-1: Product: syz [ 118.583601][ T24] usb 4-1: Manufacturer: syz [ 118.589794][ T24] usb 4-1: SerialNumber: syz [ 118.635505][ T24] usb 4-1: config 0 descriptor?? [ 118.762125][ T30] audit: type=1400 audit(1751791703.037:311): avc: denied { open } for pid=6488 comm="syz.2.151" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 118.788881][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'. [ 118.790926][ T30] audit: type=1400 audit(1751791703.077:312): avc: denied { map } for pid=6488 comm="syz.2.151" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.329038][ T30] audit: type=1400 audit(1751791703.077:313): avc: denied { write execute } for pid=6488 comm="syz.2.151" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.370779][ T30] audit: type=1400 audit(1751791703.447:314): avc: denied { write } for pid=6495 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 119.402296][ T6499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.150'. [ 119.913872][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 120.026201][ T30] audit: type=1400 audit(1751791704.557:315): avc: denied { ioctl } for pid=6516 comm="syz.0.158" path="socket:[10388]" dev="sockfs" ino=10388 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.071219][ T30] audit: type=1400 audit(1751791704.587:316): avc: denied { bind } for pid=6516 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 120.195802][ T6523] bond_slave_0: entered promiscuous mode [ 120.201728][ T6523] bond_slave_1: entered promiscuous mode [ 120.233604][ T6523] vlan2: entered promiscuous mode [ 120.344522][ T6523] bond0: entered promiscuous mode [ 120.427525][ T6530] netlink: 72 bytes leftover after parsing attributes in process `syz.3.148'. [ 120.665470][ T30] audit: type=1400 audit(1751791704.587:317): avc: denied { read } for pid=6516 comm="syz.0.158" path="socket:[10388]" dev="sockfs" ino=10388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.337806][ T6546] netlink: 'syz.1.164': attribute type 10 has an invalid length. [ 121.346195][ T6546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.164'. [ 121.356670][ T6546] bridge0: port 3(dummy0) entered blocking state [ 121.363931][ T6546] bridge0: port 3(dummy0) entered disabled state [ 121.371549][ T6546] dummy0: entered allmulticast mode [ 121.388461][ T6546] dummy0: entered promiscuous mode [ 121.402601][ T30] audit: type=1400 audit(1751791705.847:318): avc: denied { create } for pid=6544 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 121.449403][ T6546] bridge0: port 3(dummy0) entered blocking state [ 121.457350][ T6546] bridge0: port 3(dummy0) entered forwarding state [ 121.736170][ T24] usb 4-1: USB disconnect, device number 7 [ 122.130799][ T6553] x_tables: ip_tables: osf match: only valid for protocol 6 [ 122.144942][ T6553] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 122.619975][ T30] audit: type=1400 audit(1751791707.137:319): avc: denied { read } for pid=6547 comm="syz.0.165" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.638578][ T6552] input: syz1 as /devices/virtual/input/input6 [ 122.711753][ T30] audit: type=1400 audit(1751791707.147:320): avc: denied { open } for pid=6547 comm="syz.0.165" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.887038][ T30] audit: type=1400 audit(1751791707.157:321): avc: denied { read } for pid=6547 comm="syz.0.165" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.939224][ T30] audit: type=1400 audit(1751791707.467:322): avc: denied { create } for pid=6557 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 122.994385][ T6560] IPv6: addrconf: prefix option has invalid lifetime [ 123.208474][ T6560] devtmpfs: Too few inodes for current use [ 123.225166][ T30] audit: type=1400 audit(1751791707.497:323): avc: denied { setopt } for pid=6557 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.396561][ T30] audit: type=1400 audit(1751791707.517:324): avc: denied { mount } for pid=6559 comm="syz.3.168" name="/" dev="configfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.463629][ T6560] lo speed is unknown, defaulting to 1000 [ 124.427405][ T5834] Bluetooth: hci4: link tx timeout [ 124.433176][ T5834] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 124.442847][ T5834] Bluetooth: hci4: link tx timeout [ 124.449854][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.637357][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 125.215523][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.173'. [ 125.254298][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 125.254315][ T30] audit: type=1400 audit(1751791965.776:335): avc: denied { create } for pid=6586 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.033461][ T30] audit: type=1400 audit(1751791966.556:336): avc: denied { read write } for pid=6604 comm="syz.2.182" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.133484][ T30] audit: type=1400 audit(1751791966.556:337): avc: denied { open } for pid=6604 comm="syz.2.182" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.190128][ T6616] netlink: 'syz.4.183': attribute type 10 has an invalid length. [ 126.208379][ T6616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.183'. [ 126.244915][ T6616] bridge0: port 3(dummy0) entered blocking state [ 126.272547][ T6616] bridge0: port 3(dummy0) entered disabled state [ 126.299816][ T6616] dummy0: entered allmulticast mode [ 126.585952][ T6616] dummy0: entered promiscuous mode [ 126.608860][ T6616] bridge0: port 3(dummy0) entered blocking state [ 126.615377][ T6616] bridge0: port 3(dummy0) entered forwarding state [ 126.635218][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 126.975088][ T30] audit: type=1400 audit(1751791967.496:338): avc: denied { search } for pid=5498 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.044348][ T30] audit: type=1400 audit(1751791967.536:339): avc: denied { search } for pid=5498 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.103538][ T30] audit: type=1400 audit(1751791967.536:340): avc: denied { search } for pid=5498 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.245196][ T30] audit: type=1400 audit(1751791967.536:341): avc: denied { read } for pid=5498 comm="dhcpcd" name="n100" dev="tmpfs" ino=2691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.335175][ T1207] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.391718][ T30] audit: type=1400 audit(1751791967.536:342): avc: denied { open } for pid=5498 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.569280][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 127.782504][ T30] audit: type=1400 audit(1751791967.536:343): avc: denied { getattr } for pid=5498 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.794227][ T1207] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.825131][ T30] audit: type=1400 audit(1751791967.596:344): avc: denied { read write } for pid=6617 comm="syz.2.184" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.922711][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.949599][ T1207] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 127.986022][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.116662][ T1207] usb 3-1: config 0 descriptor?? [ 128.217433][ T6639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6639 comm=syz.4.188 [ 128.258840][ T6635] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 128.276518][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 128.306973][ T24] lo speed is unknown, defaulting to 1000 [ 128.390340][ T6639] vlan2: entered allmulticast mode [ 128.415274][ T6639] bond1: entered allmulticast mode [ 128.444187][ T6632] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 128.715135][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 128.960506][ T6652] netlink: 14 bytes leftover after parsing attributes in process `syz.3.189'. [ 129.045189][ T1207] usbhid 3-1:0.0: can't add hid device: -71 [ 129.276306][ T1207] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 129.294226][ T1207] usb 3-1: USB disconnect, device number 4 [ 130.500400][ T6673] vcan0: tx address claim with dlc 0 [ 131.119145][ T6652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.157064][ T6652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.184111][ T6652] bond0 (unregistering): Released all slaves [ 131.367238][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 131.367250][ T30] audit: type=1326 audit(1751791971.896:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017d78e929 code=0x7ffc0000 [ 131.545893][ T6684] QAT: failed to copy from user cfg_data. [ 131.751330][ T30] audit: type=1326 audit(1751791971.896:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017d78e929 code=0x7ffc0000 [ 131.854492][ T30] audit: type=1326 audit(1751791971.926:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f017d78e929 code=0x7ffc0000 [ 131.889000][ T30] audit: type=1326 audit(1751791971.926:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017d78e929 code=0x7ffc0000 [ 131.914909][ T30] audit: type=1326 audit(1751791971.926:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017d78e929 code=0x7ffc0000 [ 131.940434][ T30] audit: type=1326 audit(1751791971.926:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f017d78e929 code=0x7ffc0000 [ 131.963830][ T30] audit: type=1326 audit(1751791971.926:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017d78e929 code=0x7ffc0000 [ 131.987211][ T30] audit: type=1326 audit(1751791971.926:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f017d78d290 code=0x7ffc0000 [ 132.131595][ T30] audit: type=1326 audit(1751791971.926:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017d78e929 code=0x7ffc0000 [ 132.458130][ T30] audit: type=1326 audit(1751791971.926:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f017d78d290 code=0x7ffc0000 [ 132.481344][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.488537][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.496891][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.509682][ T1299] ================================================================== [ 132.517782][ T1299] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 132.525261][ T1299] Read of size 8 at addr ffff88805a232020 by task aoe_tx0/1299 [ 132.532817][ T1299] [ 132.535158][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 132.535182][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.535193][ T1299] Call Trace: [ 132.535200][ T1299] [ 132.535207][ T1299] dump_stack_lvl+0x116/0x1f0 [ 132.535237][ T1299] print_report+0xcd/0x680 [ 132.535262][ T1299] ? __virt_addr_valid+0x81/0x610 [ 132.535281][ T1299] ? __phys_addr+0xe8/0x180 [ 132.535301][ T1299] ? tty_write_room+0x7d/0x90 [ 132.535320][ T1299] kasan_report+0xe0/0x110 [ 132.535345][ T1299] ? tty_write_room+0x7d/0x90 [ 132.535366][ T1299] tty_write_room+0x7d/0x90 [ 132.535384][ T1299] handle_tx+0x14f/0x630 [ 132.535412][ T1299] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 132.535437][ T1299] dev_hard_start_xmit+0x94/0x740 [ 132.535461][ T1299] __dev_queue_xmit+0x7eb/0x43e0 [ 132.535483][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.535506][ T1299] ? finish_task_switch.isra.0+0x221/0xc10 [ 132.535530][ T1299] ? rcu_is_watching+0x12/0xc0 [ 132.535553][ T1299] ? __pfx___dev_queue_xmit+0x10/0x10 [ 132.535576][ T1299] ? __lock_acquire+0xb8a/0x1c90 [ 132.535592][ T1299] ? __lock_acquire+0xb8a/0x1c90 [ 132.535610][ T1299] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.535628][ T1299] ? find_held_lock+0x2b/0x80 [ 132.535648][ T1299] ? skb_dequeue+0x126/0x180 [ 132.535665][ T1299] ? find_held_lock+0x2b/0x80 [ 132.535686][ T1299] ? rcu_is_watching+0x12/0xc0 [ 132.535708][ T1299] tx+0xcc/0x190 [ 132.535725][ T1299] ? __pfx_tx+0x10/0x10 [ 132.535740][ T1299] kthread+0x1e4/0x3e0 [ 132.535765][ T1299] ? find_held_lock+0x2b/0x80 [ 132.535787][ T1299] ? __pfx_kthread+0x10/0x10 [ 132.535811][ T1299] ? __pfx_default_wake_function+0x10/0x10 [ 132.535833][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.535856][ T1299] ? __kthread_parkme+0x19e/0x250 [ 132.535886][ T1299] ? __pfx_kthread+0x10/0x10 [ 132.535907][ T1299] kthread+0x3c2/0x780 [ 132.535921][ T1299] ? __pfx_kthread+0x10/0x10 [ 132.535934][ T1299] ? rcu_is_watching+0x12/0xc0 [ 132.535953][ T1299] ? __pfx_kthread+0x10/0x10 [ 132.535969][ T1299] ret_from_fork+0x5d4/0x6f0 [ 132.535992][ T1299] ? __pfx_kthread+0x10/0x10 [ 132.536007][ T1299] ret_from_fork_asm+0x1a/0x30 [ 132.536031][ T1299] [ 132.536036][ T1299] [ 132.753243][ T1299] Allocated by task 6618: [ 132.757553][ T1299] kasan_save_stack+0x33/0x60 [ 132.762227][ T1299] kasan_save_track+0x14/0x30 [ 132.766893][ T1299] __kasan_kmalloc+0xaa/0xb0 [ 132.771469][ T1299] alloc_tty_struct+0x96/0x8c0 [ 132.776227][ T1299] tty_init_dev.part.0+0x1e/0x500 [ 132.781238][ T1299] tty_open+0xa50/0xf90 [ 132.785373][ T1299] chrdev_open+0x234/0x6a0 [ 132.789779][ T1299] do_dentry_open+0x744/0x1c10 [ 132.794555][ T1299] vfs_open+0x82/0x3f0 [ 132.798617][ T1299] path_openat+0x1de4/0x2cb0 [ 132.803201][ T1299] do_filp_open+0x20b/0x470 [ 132.807692][ T1299] do_sys_openat2+0x11b/0x1d0 [ 132.812350][ T1299] __x64_sys_openat+0x174/0x210 [ 132.817184][ T1299] do_syscall_64+0xcd/0x4c0 [ 132.821676][ T1299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.827553][ T1299] [ 132.829858][ T1299] Freed by task 5954: [ 132.833815][ T1299] kasan_save_stack+0x33/0x60 [ 132.838479][ T1299] kasan_save_track+0x14/0x30 [ 132.843156][ T1299] kasan_save_free_info+0x3b/0x60 [ 132.848174][ T1299] __kasan_slab_free+0x51/0x70 [ 132.852929][ T1299] kfree+0x2b4/0x4d0 [ 132.856809][ T1299] process_one_work+0x9cf/0x1b70 [ 132.861732][ T1299] worker_thread+0x6c8/0xf10 [ 132.866309][ T1299] kthread+0x3c2/0x780 [ 132.870365][ T1299] ret_from_fork+0x5d4/0x6f0 [ 132.874957][ T1299] ret_from_fork_asm+0x1a/0x30 [ 132.879720][ T1299] [ 132.882033][ T1299] Last potentially related work creation: [ 132.887728][ T1299] kasan_save_stack+0x33/0x60 [ 132.892400][ T1299] kasan_record_aux_stack+0xa7/0xc0 [ 132.897587][ T1299] insert_work+0x36/0x230 [ 132.901900][ T1299] __queue_work+0x97e/0x10f0 [ 132.906471][ T1299] queue_work_on+0x1a4/0x1f0 [ 132.911044][ T1299] release_tty+0x4de/0x5d0 [ 132.915453][ T1299] tty_release_struct+0xb7/0xe0 [ 132.920306][ T1299] tty_release+0xe2d/0x1430 [ 132.924826][ T1299] __fput+0x3ff/0xb70 [ 132.928812][ T1299] task_work_run+0x150/0x240 [ 132.933386][ T1299] exit_to_user_mode_loop+0xeb/0x110 [ 132.938657][ T1299] do_syscall_64+0x3f6/0x4c0 [ 132.943239][ T1299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.949117][ T1299] [ 132.951421][ T1299] The buggy address belongs to the object at ffff88805a232000 [ 132.951421][ T1299] which belongs to the cache kmalloc-cg-2k of size 2048 [ 132.965726][ T1299] The buggy address is located 32 bytes inside of [ 132.965726][ T1299] freed 2048-byte region [ffff88805a232000, ffff88805a232800) [ 132.979520][ T1299] [ 132.981826][ T1299] The buggy address belongs to the physical page: [ 132.988222][ T1299] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a230 [ 132.996986][ T1299] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 133.005465][ T1299] memcg:ffff8880525acd01 [ 133.009685][ T1299] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 133.017213][ T1299] page_type: f5(slab) [ 133.021182][ T1299] raw: 00fff00000000040 ffff88801b84b3c0 dead000000000100 dead000000000122 [ 133.029761][ T1299] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff8880525acd01 [ 133.038326][ T1299] head: 00fff00000000040 ffff88801b84b3c0 dead000000000100 dead000000000122 [ 133.046985][ T1299] head: 0000000000000000 0000000000080008 00000000f5000000 ffff8880525acd01 [ 133.055646][ T1299] head: 00fff00000000003 ffffea0001688c01 00000000ffffffff 00000000ffffffff [ 133.064309][ T1299] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 133.072962][ T1299] page dumped because: kasan: bad access detected [ 133.079355][ T1299] page_owner tracks the page as allocated [ 133.085053][ T1299] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6337, tgid 6333 (syz.1.107), ts 107263171506, free_ts 107207581112 [ 133.106316][ T1299] post_alloc_hook+0x1c0/0x230 [ 133.111071][ T1299] get_page_from_freelist+0x1321/0x3890 [ 133.116614][ T1299] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 133.122495][ T1299] alloc_pages_mpol+0x1fb/0x550 [ 133.127341][ T1299] new_slab+0x23b/0x330 [ 133.131480][ T1299] ___slab_alloc+0xd9c/0x1940 [ 133.136152][ T1299] __slab_alloc.constprop.0+0x56/0xb0 [ 133.141509][ T1299] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 133.147914][ T1299] kmemdup_noprof+0x29/0x60 [ 133.152405][ T1299] neigh_sysctl_register+0xb2/0x670 [ 133.157596][ T1299] devinet_sysctl_register+0xb6/0x200 [ 133.162957][ T1299] inetdev_init+0x2b8/0x5a0 [ 133.167456][ T1299] inetdev_event+0xc5f/0x18a0 [ 133.172116][ T1299] notifier_call_chain+0xb9/0x410 [ 133.177134][ T1299] call_netdevice_notifiers_info+0xbe/0x140 [ 133.183012][ T1299] register_netdevice+0x182e/0x2270 [ 133.188202][ T1299] page last free pid 6296 tgid 6296 stack trace: [ 133.194506][ T1299] __free_pages_ok+0x765/0x10e0 [ 133.199341][ T1299] __folio_put+0x329/0x450 [ 133.203746][ T1299] vhost_vsock_dev_release+0x30c/0x400 [ 133.209194][ T1299] __fput+0x3ff/0xb70 [ 133.213158][ T1299] task_work_run+0x150/0x240 [ 133.217729][ T1299] exit_to_user_mode_loop+0xeb/0x110 [ 133.223002][ T1299] do_syscall_64+0x3f6/0x4c0 [ 133.227591][ T1299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.233495][ T1299] [ 133.235801][ T1299] Memory state around the buggy address: [ 133.241411][ T1299] ffff88805a231f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 133.249462][ T1299] ffff88805a231f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 133.257509][ T1299] >ffff88805a232000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.265553][ T1299] ^ [ 133.270645][ T1299] ffff88805a232080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.278688][ T1299] ffff88805a232100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.286730][ T1299] ================================================================== [ 133.294782][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.300860][ T1299] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 133.308075][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 133.319809][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.329885][ T1299] Call Trace: [ 133.333164][ T1299] [ 133.336093][ T1299] dump_stack_lvl+0x3d/0x1f0 [ 133.340671][ T1299] panic+0x71c/0x800 [ 133.344545][ T1299] ? __pfx_panic+0x10/0x10 [ 133.348942][ T1299] ? irqentry_exit+0x3b/0x90 [ 133.353524][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.358707][ T1299] ? tty_write_room+0x7d/0x90 [ 133.363383][ T1299] ? check_panic_on_warn+0x1f/0xb0 [ 133.368471][ T1299] ? tty_write_room+0x7d/0x90 [ 133.373123][ T1299] check_panic_on_warn+0xab/0xb0 [ 133.378034][ T1299] end_report+0x107/0x170 [ 133.382343][ T1299] kasan_report+0xee/0x110 [ 133.386756][ T1299] ? tty_write_room+0x7d/0x90 [ 133.391410][ T1299] tty_write_room+0x7d/0x90 [ 133.395893][ T1299] handle_tx+0x14f/0x630 [ 133.400115][ T1299] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.405903][ T1299] dev_hard_start_xmit+0x94/0x740 [ 133.410906][ T1299] __dev_queue_xmit+0x7eb/0x43e0 [ 133.415819][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.420995][ T1299] ? finish_task_switch.isra.0+0x221/0xc10 [ 133.426792][ T1299] ? rcu_is_watching+0x12/0xc0 [ 133.431534][ T1299] ? __pfx___dev_queue_xmit+0x10/0x10 [ 133.436886][ T1299] ? __lock_acquire+0xb8a/0x1c90 [ 133.441799][ T1299] ? __lock_acquire+0xb8a/0x1c90 [ 133.446722][ T1299] ? do_raw_spin_lock+0x12c/0x2b0 [ 133.451723][ T1299] ? find_held_lock+0x2b/0x80 [ 133.456380][ T1299] ? skb_dequeue+0x126/0x180 [ 133.460949][ T1299] ? find_held_lock+0x2b/0x80 [ 133.465615][ T1299] ? rcu_is_watching+0x12/0xc0 [ 133.470358][ T1299] tx+0xcc/0x190 [ 133.473881][ T1299] ? __pfx_tx+0x10/0x10 [ 133.478009][ T1299] kthread+0x1e4/0x3e0 [ 133.482059][ T1299] ? find_held_lock+0x2b/0x80 [ 133.486717][ T1299] ? __pfx_kthread+0x10/0x10 [ 133.491304][ T1299] ? __pfx_default_wake_function+0x10/0x10 [ 133.497101][ T1299] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.502276][ T1299] ? __kthread_parkme+0x19e/0x250 [ 133.507280][ T1299] ? __pfx_kthread+0x10/0x10 [ 133.511851][ T1299] kthread+0x3c2/0x780 [ 133.515896][ T1299] ? __pfx_kthread+0x10/0x10 [ 133.520460][ T1299] ? rcu_is_watching+0x12/0xc0 [ 133.525214][ T1299] ? __pfx_kthread+0x10/0x10 [ 133.529776][ T1299] ret_from_fork+0x5d4/0x6f0 [ 133.534349][ T1299] ? __pfx_kthread+0x10/0x10 [ 133.538912][ T1299] ret_from_fork_asm+0x1a/0x30 [ 133.543657][ T1299] [ 133.546864][ T1299] Kernel Offset: disabled [ 133.551167][ T1299] Rebooting in 86400 seconds..