last executing test programs: 22.747285244s ago: executing program 0 (id=47): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100"], 0x58}}, 0x0) epoll_create1(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYBLOB="60164897ece0517900a5a6f61eac5d38a3662c1906660be69b73aef5e92f6a91b17dadb31b5c61604cbfdfc6efcdd66923caef463856f547e95acee924ab89617c7270961436888399954783b9a3660a0e0c5e2fffc8c7ddbf706f31717db15e3f9fa58dd7214e62fedf34f704f8435aa0c4a5d5023f141c10d87627764a4a278d049696ab270d6f1652002dab1d942a6faf09649e2289ab513ed453524251ab6e18caedfbcb0a9d1055ab83c78d17947f5a0dcc992ab55811c27d712368b4"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 21.605995774s ago: executing program 0 (id=48): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10254ab, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r7, @ANYBLOB="0a00060008021100000100001e001f"], 0x58}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 18.242713768s ago: executing program 1 (id=60): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) 17.636850939s ago: executing program 4 (id=61): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000200)={'veth0_to_bond\x00'}) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) syz_usb_ep_write(r1, 0x5, 0x0, &(0x7f0000000140)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x100, 0x0, 0x6}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0xc, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0xb5, &(0x7f0000000000)="c3e243051cb387ef2e5783f770e8c0fefef0709c71df20b89f3f4e327bfa79d15af23a97a32846a43b8230853bf3cd6fcffea92ad700fe59ab36ffb6cf5752da9ca7a16b8baf9a36b321294a46cc567e27a421b98d62578a670a99aa66624b351ad9479cb60420c5d926c27226726d38aa14641eff04213c786660bb917dfb8d80c3c936081012da31108e1a1fd603de57f4956c0ec449f7c53cd6dd17639d2ec11181765a4fdc21a0113242473e28ec9e826af015", 0x81, 0x0, &(0x7f00000000c0)="394135613821852edcc28c8478f1172d11e79e33d9887222345fa52fd939056ce7c090ef4e53d4ee31adcc1adc92ac8c38ab80452460544045d519d1c2f61e4b30e106adcbb1e9f40958519f7495f6716175d151d1d3aec78ffcaade5a80375b3721e0f9be1c92a02ade6860f321795352b7aa330d2cefab3ee9e99915e0281535"}) 17.576297598s ago: executing program 1 (id=62): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x2, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="a5c394", 0x3}], 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x541b, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x0, 0x37) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) 16.496303538s ago: executing program 0 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c000000100003050300", @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800c0001006d6163766c616e004c00028006000200000000000800010008000000080007002d85000008000700ff0f00000a0004000180c200000200000a000400ffffffffffff0000080300030000000000000000000000003e36ba51bb612c4dc3e7954dd7565dba2424bb79f2466e82953db0055c029c34271684316358973fb1b4923f225fd957936e8efee41912f1b880c898894d7c992bcb56150ebf54a049b2668678e3de2d01e07f5de3c233"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c045}, 0x400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2d, 'rlimit'}, {0x2b, 'cpuacct'}, {0x2b, 'net_cls'}, {0x2b, 'blkio'}, {0x2d, 'cpuacct'}, {0x2d, 'blkio'}, {0x2b, 'freezer'}, {0x2b, 'blkio'}, {0x2b, 'rlimit'}]}, 0x49) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb933"], 0xfdef) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r6, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x8044000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) 14.33036209s ago: executing program 2 (id=66): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) 12.920163194s ago: executing program 4 (id=68): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {r6}}, './file0\x00'}) close_range(r6, 0xffffffffffffffff, 0x0) 12.60974075s ago: executing program 2 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(0x0, 0x9, 0x4002) set_mempolicy(0x8006, 0x0, 0x5) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='numa_maps\x00') write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f0000003240)="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", 0x6e0}, {&(0x7f0000002380)='L', 0x1}], 0x4}}], 0x4, 0xf000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) pread64(r3, &(0x7f0000002180)=""/4105, 0x1009, 0x0) 11.657927571s ago: executing program 1 (id=71): socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10254ab, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, r5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r7, @ANYBLOB="0a00060008021100000100001e001f"], 0x58}}, 0x0) 11.304443162s ago: executing program 3 (id=72): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000480)={0x0, 0x6, 0x9, '\x00', &(0x7f0000000340)=0x37}) 10.367178671s ago: executing program 1 (id=73): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10254ab, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) io_uring_setup(0xb16, &(0x7f0000000540)={0x0, 0x596c, 0xa00, 0x2, 0x3ac, 0x0, r7}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100001e001f"], 0x58}}, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) 9.775565314s ago: executing program 3 (id=74): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10254ab, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r7, @ANYBLOB="0a00060008021100000100001e001f"], 0x58}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 9.722226196s ago: executing program 2 (id=75): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) mknod$loop(0x0, 0x2000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x3000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x360, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ipv6={@local, @empty, [0xffffff00, 0xff, 0xff000080], [], 'sit0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0xa186f4cee0e73992, 0xf, 0x1}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0x2, 0x9, 0xff, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0xff000000, 0xff], [0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xff, 0xff000000], 0x1383, 0x2b}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9a, 0x9, "72b80df39f2bac7a27e0b5a9f57f58b46c748930d7ba05b72ebef2a88d24"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffffc8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x80}}, 0x0) 9.471968192s ago: executing program 4 (id=76): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10254ab, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) io_uring_setup(0xb16, &(0x7f0000000540)={0x0, 0x596c, 0xa00, 0x2, 0x3ac, 0x0, r8}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000100001e001f"], 0x58}}, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) 7.423617721s ago: executing program 2 (id=77): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000200)={'veth0_to_bond\x00'}) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) syz_usb_ep_write(r1, 0x5, 0x0, &(0x7f0000000140)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x100, 0x0, 0x6}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0xc, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0xb5, &(0x7f0000000000)="c3e243051cb387ef2e5783f770e8c0fefef0709c71df20b89f3f4e327bfa79d15af23a97a32846a43b8230853bf3cd6fcffea92ad700fe59ab36ffb6cf5752da9ca7a16b8baf9a36b321294a46cc567e27a421b98d62578a670a99aa66624b351ad9479cb60420c5d926c27226726d38aa14641eff04213c786660bb917dfb8d80c3c936081012da31108e1a1fd603de57f4956c0ec449f7c53cd6dd17639d2ec11181765a4fdc21a0113242473e28ec9e826af015", 0x81, 0x0, &(0x7f00000000c0)="394135613821852edcc28c8478f1172d11e79e33d9887222345fa52fd939056ce7c090ef4e53d4ee31adcc1adc92ac8c38ab80452460544045d519d1c2f61e4b30e106adcbb1e9f40958519f7495f6716175d151d1d3aec78ffcaade5a80375b3721e0f9be1c92a02ade6860f321795352b7aa330d2cefab3ee9e99915e0281535"}) 5.634787674s ago: executing program 1 (id=78): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="184b0000fcffffff000000ecffffff00184800000200000000000000000000008510000007000000180100002020732500000300000000000000f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008520000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0xc0481273, &(0x7f0000000000)=0x2085) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.584114384s ago: executing program 0 (id=79): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10254ab, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) io_uring_setup(0xb16, &(0x7f0000000540)={0x0, 0x596c, 0xa00, 0x2, 0x3ac, 0x0, r7}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100001e001f"], 0x58}}, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) 4.42968705s ago: executing program 0 (id=80): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/wakeup_count', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x88282) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a320000000005000100070000000006400000007f7a7e04971e0fe4f892e1e03ff08330ece63aa6ba1f128f5b8bac13abfeaebe7348c83c38d2c429a322841c770826d8c53a7c07d6b7a297a7bccb259f1d27373436"], 0x5c}}, 0x0) semget$private(0x0, 0x4, 0x0) 4.238173997s ago: executing program 2 (id=81): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10254ab, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) io_uring_setup(0xb16, &(0x7f0000000540)={0x0, 0x596c, 0xa00, 0x2, 0x3ac, 0x0, r8}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000100001e001f"], 0x58}}, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) 4.234318162s ago: executing program 3 (id=82): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x4040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x88282) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) semget$private(0x0, 0x4, 0x0) 3.990213185s ago: executing program 4 (id=83): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = dup2(r6, r6) fcntl$setstatus(r7, 0x4, 0x2400) write$UHID_INPUT(r5, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) close(0xffffffffffffffff) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="03", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r8, 0x100000000) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) 1.943814759s ago: executing program 4 (id=84): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x11) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0xe0b, 0xf1ffffff, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x8}}}}]}, 0x4c}}, 0x0) 1.847091883s ago: executing program 2 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000012003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9001cffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x3, 0xe, 0x0, &(0x7f0000000500)="0000001afa3cb651ce2f18709ec3", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r3, 0x1, &(0x7f0000000140)=0x80000001) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() modify_ldt$write(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x96}) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 1.750156364s ago: executing program 3 (id=86): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) getpid() (async) capget(0x0, 0x0) (async) r0 = getpid() capget(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0xa, 0xfffffffb, 0x5, 0x3, 0x2, 0x1}) (async) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x93, 0x28000) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x7fff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003600)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000003f40)={'veth1_to_team\x00', @ifru_hwaddr=@remote}) 1.694289431s ago: executing program 0 (id=87): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) mknod$loop(0x0, 0x2000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x3000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x360, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ipv6={@local, @empty, [0xffffff00, 0xff, 0xff000080], [], 'sit0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0xa186f4cee0e73992, 0xf, 0x1}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0x2, 0x9, 0xff, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0xff000000, 0xff], [0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xff, 0xff000000], 0x1383, 0x2b}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9a, 0x9, "72b80df39f2bac7a27e0b5a9f57f58b46c748930d7ba05b72ebef2a88d24"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffffc8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x80}}, 0x0) 1.097496007s ago: executing program 3 (id=88): syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8}, "d55f31c9db8f065485835b80ed815ccb2287c0ee195bbc314d8a4195109882632652206dc7251093a2b4cb3bdadae893d85955"}, 0x57) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) write$6lowpan_control(r5, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x1}}]}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.096929305s ago: executing program 4 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c000000100003050300", @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800c0001006d6163766c616e004c00028006000200000000000800010008000000080007002d85000008000700ff0f00000a0004000180c200000200000a000400ffffffffffff0000080300030000000000000000000000003e36ba51bb612c4dc3e7954dd7565dba2424bb79f2466e82953db0055c029c34271684316358973fb1b4923f225fd957936e8efee41912f1b880c898894d7c992bcb56150ebf54a049b2668678e3de2d01e07f5de3c233"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c045}, 0x400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2d, 'rlimit'}, {0x2b, 'cpuacct'}, {0x2b, 'net_cls'}, {0x2b, 'blkio'}, {0x2d, 'cpuacct'}, {0x2d, 'blkio'}, {0x2b, 'freezer'}, {0x2b, 'blkio'}, {0x2b, 'rlimit'}]}, 0x49) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb933"], 0xfdef) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r6, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x8044000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) 235.100054ms ago: executing program 1 (id=90): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) mknod$loop(0x0, 0x2000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x3000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000380)={0x4000, 0x0, 0x80}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x360, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ipv6={@local, @empty, [0xffffff00, 0xff, 0xff000080], [], 'sit0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0xa186f4cee0e73992, 0xf, 0x1}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0x2, 0x9, 0xff, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0xff000000, 0xff], [0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xff, 0xff000000], 0x1383, 0x2b}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9a, 0x9, "72b80df39f2bac7a27e0b5a9f57f58b46c748930d7ba05b72ebef2a88d24"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffffc8) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00"/20], 0x26}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000140)=0x5) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x80}}, 0x0) 0s ago: executing program 3 (id=91): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) dup3(r4, r3, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) rt_sigaction(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, {[0x400]}}, 0x0, 0x8, &(0x7f0000000040)) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 66.542126][ T29] audit: type=1400 audit(1733598047.309:88): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.547205][ T5800] cgroup: Unknown subsys name 'net' [ 66.570190][ T29] audit: type=1400 audit(1733598047.319:89): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.592986][ T29] audit: type=1400 audit(1733598047.349:90): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.715787][ T5800] cgroup: Unknown subsys name 'cpuset' [ 66.723591][ T5800] cgroup: Unknown subsys name 'rlimit' [ 66.850539][ T29] audit: type=1400 audit(1733598047.619:91): avc: denied { setattr } for pid=5800 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.889170][ T29] audit: type=1400 audit(1733598047.619:92): avc: denied { create } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.911239][ T29] audit: type=1400 audit(1733598047.619:93): avc: denied { write } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.932162][ T29] audit: type=1400 audit(1733598047.619:94): avc: denied { read } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.953490][ T29] audit: type=1400 audit(1733598047.619:95): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.973480][ T5802] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.979390][ T29] audit: type=1400 audit(1733598047.619:96): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.010275][ T29] audit: type=1400 audit(1733598047.659:97): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.907485][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.370341][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.380474][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.388112][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.396115][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.404943][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.413696][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.421682][ T5814] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.429551][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.437414][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.440197][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.445397][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.452459][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.467388][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.475675][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.483948][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.492674][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.500279][ T5126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.503257][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.508046][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.522417][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.523624][ T5126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.530358][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.538600][ T5126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.544313][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.550698][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.557700][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.570796][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 71.570810][ T29] audit: type=1400 audit(1733598052.339:109): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.577934][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.602107][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.606973][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.624364][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.949060][ T29] audit: type=1400 audit(1733598052.719:110): avc: denied { module_request } for pid=5822 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.046602][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 72.056530][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 72.073915][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 72.087566][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 72.132200][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 72.250883][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.259218][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.266790][ T5819] bridge_slave_0: entered allmulticast mode [ 72.274257][ T5819] bridge_slave_0: entered promiscuous mode [ 72.310307][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.317622][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.325445][ T5819] bridge_slave_1: entered allmulticast mode [ 72.331874][ T5819] bridge_slave_1: entered promiscuous mode [ 72.341784][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.348913][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.356112][ T5812] bridge_slave_0: entered allmulticast mode [ 72.362636][ T5812] bridge_slave_0: entered promiscuous mode [ 72.371109][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.378360][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.385612][ T5812] bridge_slave_1: entered allmulticast mode [ 72.392074][ T5812] bridge_slave_1: entered promiscuous mode [ 72.398732][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.405865][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.413358][ T5810] bridge_slave_0: entered allmulticast mode [ 72.419868][ T5810] bridge_slave_0: entered promiscuous mode [ 72.456137][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.464344][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.471477][ T5810] bridge_slave_1: entered allmulticast mode [ 72.478474][ T5810] bridge_slave_1: entered promiscuous mode [ 72.485417][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.494922][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.502482][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.509999][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.517979][ T5822] bridge_slave_0: entered allmulticast mode [ 72.527209][ T5822] bridge_slave_0: entered promiscuous mode [ 72.563441][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.570571][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.577897][ T5822] bridge_slave_1: entered allmulticast mode [ 72.585143][ T5822] bridge_slave_1: entered promiscuous mode [ 72.593746][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.603011][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.610036][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.617961][ T5815] bridge_slave_0: entered allmulticast mode [ 72.624743][ T5815] bridge_slave_0: entered promiscuous mode [ 72.633852][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.645112][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.666949][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.683929][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.691022][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.698799][ T5815] bridge_slave_1: entered allmulticast mode [ 72.705475][ T5815] bridge_slave_1: entered promiscuous mode [ 72.720207][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.750134][ T5819] team0: Port device team_slave_0 added [ 72.765018][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.777628][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.794233][ T5819] team0: Port device team_slave_1 added [ 72.802445][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.816322][ T5812] team0: Port device team_slave_0 added [ 72.828964][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.847003][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.859905][ T5812] team0: Port device team_slave_1 added [ 72.905934][ T5810] team0: Port device team_slave_0 added [ 72.921188][ T5822] team0: Port device team_slave_0 added [ 72.927776][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.937053][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.963224][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.981610][ T5810] team0: Port device team_slave_1 added [ 72.988434][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.995530][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.021686][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.034130][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.041090][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.067085][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.080105][ T5822] team0: Port device team_slave_1 added [ 73.107067][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.114086][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.142089][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.156145][ T5815] team0: Port device team_slave_0 added [ 73.195065][ T5815] team0: Port device team_slave_1 added [ 73.209200][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.217412][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.246339][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.258177][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.265533][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.291530][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.320003][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.327392][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.353568][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.380854][ T5819] hsr_slave_0: entered promiscuous mode [ 73.389510][ T5819] hsr_slave_1: entered promiscuous mode [ 73.409293][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.416489][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.442565][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.469026][ T5822] hsr_slave_0: entered promiscuous mode [ 73.475715][ T5822] hsr_slave_1: entered promiscuous mode [ 73.481699][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.490089][ T5822] Cannot create hsr debugfs directory [ 73.496263][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.503489][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.529595][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.540860][ T5824] Bluetooth: hci0: command tx timeout [ 73.550312][ T5812] hsr_slave_0: entered promiscuous mode [ 73.556686][ T5812] hsr_slave_1: entered promiscuous mode [ 73.563236][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.570823][ T5812] Cannot create hsr debugfs directory [ 73.595594][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.602808][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.628886][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.679188][ T5810] hsr_slave_0: entered promiscuous mode [ 73.687346][ T5810] hsr_slave_1: entered promiscuous mode [ 73.693864][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.701695][ T5810] Cannot create hsr debugfs directory [ 73.707238][ T5826] Bluetooth: hci2: command tx timeout [ 73.712920][ T5126] Bluetooth: hci3: command tx timeout [ 73.713098][ T5818] Bluetooth: hci1: command tx timeout [ 73.722560][ T5824] Bluetooth: hci4: command tx timeout [ 73.788452][ T5815] hsr_slave_0: entered promiscuous mode [ 73.795066][ T5815] hsr_slave_1: entered promiscuous mode [ 73.801328][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.809288][ T5815] Cannot create hsr debugfs directory [ 74.029411][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.041608][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.051414][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.061326][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.114941][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.140363][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.150193][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.172687][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.224259][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.239918][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.248016][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.267985][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.278751][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.309892][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.343105][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.350413][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.365082][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.388683][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.395862][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.411314][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.425652][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.450371][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.506980][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.530237][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.543480][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.559539][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.593371][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.597970][ T29] audit: type=1400 audit(1733598055.369:111): avc: denied { sys_module } for pid=5812 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.632052][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.676110][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.723682][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.736220][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.743343][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.785550][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.793306][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.802155][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.809266][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.818823][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.825903][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.858479][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.916520][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.979054][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.991854][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.008471][ T5812] veth0_vlan: entered promiscuous mode [ 75.024737][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.031820][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.058156][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.065453][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.126103][ T5812] veth1_vlan: entered promiscuous mode [ 75.166487][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.213417][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.220507][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.247480][ T5812] veth0_macvtap: entered promiscuous mode [ 75.266248][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.273411][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.288884][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.307831][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.338148][ T5812] veth1_macvtap: entered promiscuous mode [ 75.382369][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.413553][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.435025][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.460513][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.469991][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.479166][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.488126][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.571859][ T5810] veth0_vlan: entered promiscuous mode [ 75.587799][ T5822] veth0_vlan: entered promiscuous mode [ 75.612075][ T5822] veth1_vlan: entered promiscuous mode [ 75.620008][ T5824] Bluetooth: hci0: command tx timeout [ 75.678924][ T5810] veth1_vlan: entered promiscuous mode [ 75.703784][ T5819] veth0_vlan: entered promiscuous mode [ 75.739944][ T5822] veth0_macvtap: entered promiscuous mode [ 75.749842][ T5822] veth1_macvtap: entered promiscuous mode [ 75.759460][ T5819] veth1_vlan: entered promiscuous mode [ 75.772837][ T5824] Bluetooth: hci1: command tx timeout [ 75.784194][ T5824] Bluetooth: hci4: command tx timeout [ 75.784276][ T5818] Bluetooth: hci2: command tx timeout [ 75.789588][ T5824] Bluetooth: hci3: command tx timeout [ 75.809700][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.825600][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.847277][ T5810] veth0_macvtap: entered promiscuous mode [ 75.867651][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.880375][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.891565][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.901110][ T5810] veth1_macvtap: entered promiscuous mode [ 75.924112][ T5819] veth0_macvtap: entered promiscuous mode [ 75.930907][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.947438][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.958333][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.970344][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.988820][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.997910][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.006872][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.008952][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.024049][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.032866][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.051957][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.062951][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.073362][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.088908][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.100699][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.114226][ T5815] veth0_vlan: entered promiscuous mode [ 76.124535][ T5815] veth1_vlan: entered promiscuous mode [ 76.134818][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.146126][ T29] audit: type=1400 audit(1733598056.899:112): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.1BXVpw/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.151515][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.181028][ T29] audit: type=1400 audit(1733598056.899:113): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.186106][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.204816][ T29] audit: type=1400 audit(1733598056.899:114): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.1BXVpw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.241301][ T29] audit: type=1400 audit(1733598056.899:115): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.265277][ T29] audit: type=1400 audit(1733598056.899:116): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.1BXVpw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.269034][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.292951][ T29] audit: type=1400 audit(1733598056.899:117): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.1BXVpw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.313823][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.337074][ T29] audit: type=1400 audit(1733598056.919:118): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.353375][ T5819] veth1_macvtap: entered promiscuous mode [ 76.380899][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.408895][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.419142][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427960][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.437831][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.496284][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.504597][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.527076][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.542303][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.553551][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.564409][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.574911][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.585668][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.596936][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.679077][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.696379][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.709289][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.728425][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.738774][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.749541][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.762037][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.772473][ T5815] veth0_macvtap: entered promiscuous mode [ 76.791654][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.803988][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.960742][ T5899] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.077814][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.118310][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.176155][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.345344][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.363085][ T5815] veth1_macvtap: entered promiscuous mode [ 77.370624][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.395649][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.399701][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.411159][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.422475][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.430143][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.431448][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.440061][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.458126][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.469352][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.479956][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.490667][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.501245][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.517864][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.531857][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.542795][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.552858][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.563656][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.573584][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.584051][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.594002][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.604466][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.615957][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.631390][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.640237][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.649138][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.657970][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.702965][ T5818] Bluetooth: hci0: command tx timeout [ 77.794220][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 77.794235][ T29] audit: type=1400 audit(1733598058.539:129): avc: denied { read write } for pid=5900 comm="syz.0.1" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.826257][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.846389][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.861402][ T5826] Bluetooth: hci4: command tx timeout [ 77.867301][ T5826] Bluetooth: hci3: command tx timeout [ 77.873622][ T5818] Bluetooth: hci2: command tx timeout [ 77.885424][ T5826] Bluetooth: hci1: command tx timeout [ 78.051502][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.148605][ T29] audit: type=1400 audit(1733598058.539:130): avc: denied { open } for pid=5900 comm="syz.0.1" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.194624][ T29] audit: type=1400 audit(1733598058.539:131): avc: denied { create } for pid=5900 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.354369][ T5907] Bluetooth: hci6: Frame reassembly failed (-84) [ 78.902808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.929607][ T29] audit: type=1400 audit(1733598058.619:132): avc: denied { read } for pid=5900 comm="syz.0.1" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 78.981088][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.000360][ T29] audit: type=1400 audit(1733598058.619:133): avc: denied { open } for pid=5900 comm="syz.0.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.023808][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.053047][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 79.069477][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 79.110590][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.118483][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.158305][ T29] audit: type=1400 audit(1733598058.809:134): avc: denied { create } for pid=5900 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.179888][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.214537][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.262276][ T29] audit: type=1400 audit(1733598058.819:135): avc: denied { write } for pid=5900 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.322998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 79.374358][ T29] audit: type=1400 audit(1733598059.839:136): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.2Lbc3F/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.419391][ T29] audit: type=1326 audit(1733598060.069:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33c97fed9 code=0x7ffc0000 [ 79.442826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 79.451094][ T29] audit: type=1326 audit(1733598060.069:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff33c97fed9 code=0x7ffc0000 [ 79.478275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 79.488097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.503113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.612993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.613457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.630242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 79.638855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 79.980287][ T5824] Bluetooth: hci0: command tx timeout [ 79.985767][ T5824] Bluetooth: hci1: command tx timeout [ 79.992603][ T5824] Bluetooth: hci2: command tx timeout [ 79.998050][ T5824] Bluetooth: hci3: command tx timeout [ 80.003486][ T5824] Bluetooth: hci4: command tx timeout [ 80.593217][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 81.123228][ T5826] Bluetooth: hci6: command 0x1003 tx timeout [ 81.129849][ T5126] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 81.715684][ T5935] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.111399][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 83.111417][ T29] audit: type=1326 audit(1733598063.519:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff33c976ea7 code=0x7ffc0000 [ 84.242696][ T29] audit: type=1326 audit(1733598063.879:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff33c91c0e9 code=0x7ffc0000 [ 84.305263][ T5126] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 84.354320][ T29] audit: type=1326 audit(1733598063.879:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff33c976ea7 code=0x7ffc0000 [ 84.533281][ T29] audit: type=1326 audit(1733598063.879:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff33c91c0e9 code=0x7ffc0000 [ 84.682203][ T29] audit: type=1326 audit(1733598063.879:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff33c97fed9 code=0x7ffc0000 [ 84.775494][ T5961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15'. [ 85.382682][ T29] audit: type=1326 audit(1733598063.929:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff33c976ea7 code=0x7ffc0000 [ 85.414323][ T29] audit: type=1326 audit(1733598063.929:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff33c91c0e9 code=0x7ffc0000 [ 85.642136][ T29] audit: type=1326 audit(1733598063.929:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff33c97fed9 code=0x7ffc0000 [ 85.665357][ T29] audit: type=1326 audit(1733598064.009:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff33c976ea7 code=0x7ffc0000 [ 85.680541][ T5968] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.988285][ T5970] process 'syz.4.17' launched './file0' with NULL argv: empty string added [ 86.277813][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 88.069778][ T47] cfg80211: failed to load regulatory.db [ 88.259758][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 88.578217][ T5983] netlink: 'syz.2.21': attribute type 33 has an invalid length. [ 88.585944][ T5983] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21'. [ 88.818623][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 88.818642][ T29] audit: type=1400 audit(1733598069.329:392): avc: denied { write } for pid=5980 comm="syz.2.21" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.754563][ T29] audit: type=1400 audit(1733598070.309:393): avc: denied { bind } for pid=5988 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.774766][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.886409][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25'. [ 89.995721][ T29] audit: type=1400 audit(1733598070.309:394): avc: denied { create } for pid=5988 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.769524][ T29] audit: type=1400 audit(1733598070.309:395): avc: denied { setopt } for pid=5988 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.788731][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.801816][ T29] audit: type=1400 audit(1733598070.309:396): avc: denied { bind } for pid=5988 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.821236][ T29] audit: type=1400 audit(1733598070.309:397): avc: denied { name_bind } for pid=5988 comm="syz.1.23" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 90.842696][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.849158][ T29] audit: type=1400 audit(1733598070.309:398): avc: denied { node_bind } for pid=5988 comm="syz.1.23" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 90.869914][ T29] audit: type=1400 audit(1733598070.309:399): avc: denied { getopt } for pid=5988 comm="syz.1.23" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.891979][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.898349][ T29] audit: type=1400 audit(1733598070.309:400): avc: denied { connect } for pid=5988 comm="syz.1.23" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.920867][ T29] audit: type=1400 audit(1733598070.309:401): avc: denied { name_connect } for pid=5988 comm="syz.1.23" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 90.942672][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.752577][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 93.304918][ T6036] Bluetooth: hci5: Frame reassembly failed (-84) [ 95.372813][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.403077][ T6048] 9pnet_virtio: no channels available for device 127.0.0.1 [ 96.092426][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 96.092461][ T29] audit: type=1400 audit(1733598076.859:514): avc: denied { setopt } for pid=6042 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.670454][ T29] audit: type=1400 audit(1733598077.439:515): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.364421][ T6065] netlink: 48 bytes leftover after parsing attributes in process `syz.4.40'. [ 98.972940][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'. [ 100.345453][ T29] audit: type=1400 audit(1733598081.119:516): avc: denied { read } for pid=6070 comm="syz.4.43" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.392720][ T29] audit: type=1400 audit(1733598081.119:517): avc: denied { open } for pid=6070 comm="syz.4.43" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.584285][ T29] audit: type=1400 audit(1733598081.149:518): avc: denied { ioctl } for pid=6070 comm="syz.4.43" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.784760][ T6083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.41'. [ 101.524400][ T29] audit: type=1400 audit(1733598081.149:519): avc: denied { set_context_mgr } for pid=6070 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 101.524436][ T29] audit: type=1400 audit(1733598081.199:520): avc: denied { create } for pid=6074 comm="syz.2.44" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.524480][ T29] audit: type=1400 audit(1733598081.199:521): avc: denied { map } for pid=6074 comm="syz.2.44" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.524513][ T29] audit: type=1400 audit(1733598081.199:522): avc: denied { read write } for pid=6074 comm="syz.2.44" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.528278][ T29] audit: type=1400 audit(1733598082.299:523): avc: denied { read } for pid=6082 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.811080][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.898915][ T29] audit: type=1400 audit(1733598082.669:524): avc: denied { open } for pid=6082 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.984772][ T29] audit: type=1400 audit(1733598082.669:525): avc: denied { getattr } for pid=6082 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.056926][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 102.229618][ T29] audit: type=1400 audit(1733598082.669:526): avc: denied { getattr } for pid=6082 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.533667][ T6103] netlink: 48 bytes leftover after parsing attributes in process `syz.0.47'. [ 102.782849][ T29] audit: type=1400 audit(1733598082.849:527): avc: denied { read } for pid=6089 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.122651][ T29] audit: type=1400 audit(1733598082.849:528): avc: denied { open } for pid=6089 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.507965][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 103.891530][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 104.016242][ T6119] fuse: Bad value for 'user_id' [ 104.032698][ T6119] fuse: Bad value for 'user_id' [ 105.297324][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.48'. [ 105.505910][ T6139] netlink: 'syz.3.54': attribute type 33 has an invalid length. [ 105.518985][ T6139] netlink: 152 bytes leftover after parsing attributes in process `syz.3.54'. [ 106.154465][ T6166] Zero length message leads to an empty skb [ 106.535251][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 106.535267][ T29] audit: type=1326 audit(1733598087.309:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8707b76ea7 code=0x7ffc0000 [ 106.605059][ T29] audit: type=1326 audit(1733598087.339:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8707b1c0e9 code=0x7ffc0000 [ 106.801837][ T29] audit: type=1326 audit(1733598087.339:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8707b76ea7 code=0x7ffc0000 [ 106.893571][ T29] audit: type=1326 audit(1733598087.339:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8707b1c0e9 code=0x7ffc0000 [ 107.047164][ T29] audit: type=1326 audit(1733598087.339:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8707b76ea7 code=0x7ffc0000 [ 107.283328][ T29] audit: type=1326 audit(1733598087.339:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8707b1c0e9 code=0x7ffc0000 [ 107.445951][ T29] audit: type=1326 audit(1733598087.339:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8707b7fed9 code=0x7ffc0000 [ 108.750809][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 110.602441][ T6202] netlink: 92 bytes leftover after parsing attributes in process `syz.0.64'. [ 110.751581][ T29] audit: type=1400 audit(1733598091.409:779): avc: denied { append } for pid=6198 comm="syz.0.64" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.779499][ T6202] loop6: detected capacity change from 0 to 7 [ 110.782197][ T6207] binder: 6204:6207 ioctl c018620c 0 returned -14 [ 110.787452][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.518183][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 112.254289][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.264243][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.327112][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.343509][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.351460][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.522417][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.531963][ T6202] ldm_validate_partition_table(): Disk read failed. [ 112.730420][ T6227] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.253146][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.261172][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.342696][ T6202] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.350835][ T6202] Dev loop6: unable to read RDB block 0 [ 113.528858][ T6202] loop6: unable to read partition table [ 113.628625][ T6202] loop6: partition table beyond EOD, truncated [ 113.635051][ T6202] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 113.635051][ T6202] ) failed (rc=-5) [ 115.212727][ T5126] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.520132][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'. [ 115.689519][ T29] audit: type=1326 audit(1733598096.459:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 116.044688][ T29] audit: type=1326 audit(1733598096.809:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 116.145575][ T29] audit: type=1326 audit(1733598096.909:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 116.212398][ T29] audit: type=1326 audit(1733598096.949:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 116.516856][ T29] audit: type=1326 audit(1733598096.949:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 116.598919][ T29] audit: type=1326 audit(1733598096.969:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 116.622159][ T29] audit: type=1326 audit(1733598096.969:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 116.645978][ T29] audit: type=1326 audit(1733598096.969:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 116.669891][ T29] audit: type=1326 audit(1733598096.969:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 116.693315][ T29] audit: type=1326 audit(1733598096.969:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce89b7fed9 code=0x7ffc0000 [ 117.430557][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.76'. [ 117.687606][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.74'. [ 119.848871][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.79'. [ 121.082873][ T6304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.81'. [ 123.051095][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 123.051114][ T29] audit: type=1400 audit(1733598103.699:803): avc: denied { create } for pid=6315 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.080893][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 123.205594][ T6324] capability: warning: `syz.3.86' uses deprecated v2 capabilities in a way that may be insecure [ 123.660360][ T29] audit: type=1326 audit(1733598104.429:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dc37fed9 code=0x7ffc0000 [ 123.683977][ T29] audit: type=1326 audit(1733598104.429:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dc37fed9 code=0x7ffc0000 [ 123.707665][ T29] audit: type=1326 audit(1733598104.479:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd0dc37fed9 code=0x7ffc0000 [ 123.731475][ T29] audit: type=1326 audit(1733598104.479:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dc37fed9 code=0x7ffc0000 [ 123.754855][ T29] audit: type=1326 audit(1733598104.479:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dc37fed9 code=0x7ffc0000 [ 123.779313][ T29] audit: type=1326 audit(1733598104.479:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd0dc37fed9 code=0x7ffc0000 [ 123.803089][ T29] audit: type=1326 audit(1733598104.479:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dc37fed9 code=0x7ffc0000 [ 123.827196][ T29] audit: type=1326 audit(1733598104.479:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0dc37fed9 code=0x7ffc0000 [ 123.850817][ T29] audit: type=1326 audit(1733598104.479:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd0dc37fed9 code=0x7ffc0000 [ 124.032916][ T6344] netlink: 92 bytes leftover after parsing attributes in process `syz.4.89'. [ 124.058895][ T6344] loop6: detected capacity change from 0 to 7 [ 124.068543][ T6344] buffer_io_error: 4 callbacks suppressed [ 124.068583][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.083356][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.091755][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.100584][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.135996][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.140944][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.141888][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.142308][ T6344] ldm_validate_partition_table(): Disk read failed. [ 124.142867][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.143698][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.144398][ T6344] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.145479][ T6344] Dev loop6: unable to read RDB block 0 [ 124.147723][ T6344] loop6: unable to read partition table [ 124.149596][ T6344] loop6: partition table beyond EOD, truncated [ 124.149716][ T6344] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 124.149716][ T6344] ) failed (rc=-5) [ 125.204699][ T6366] FAULT_INJECTION: forcing a failure. [ 125.204699][ T6366] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.205647][ T6366] [ 125.205660][ T6366] ====================================================== [ 125.205669][ T6366] WARNING: possible circular locking dependency detected [ 125.205683][ T6366] 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 Not tainted [ 125.205693][ T6366] ------------------------------------------------------ [ 125.205699][ T6366] syz.3.91/6366 is trying to acquire lock: [ 125.205708][ T6366] ffffffff8e0c8800 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 125.205762][ T6366] [ 125.205762][ T6366] but task is already holding lock: [ 125.205767][ T6366] ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 125.205809][ T6366] [ 125.205809][ T6366] which lock already depends on the new lock. [ 125.205809][ T6366] [ 125.205814][ T6366] [ 125.205814][ T6366] the existing dependency chain (in reverse order) is: [ 125.205820][ T6366] [ 125.205820][ T6366] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 125.205844][ T6366] _raw_spin_lock_nested+0x31/0x40 [ 125.205865][ T6366] raw_spin_rq_lock_nested+0x29/0x130 [ 125.205884][ T6366] task_rq_lock+0xcf/0x3b0 [ 125.205903][ T6366] cgroup_move_task+0x82/0x250 [ 125.205919][ T6366] css_set_move_task+0x288/0x5f0 [ 125.205939][ T6366] cgroup_post_fork+0x1c6/0x910 [ 125.205962][ T6366] copy_process+0x50d9/0x8df0 [ 125.205985][ T6366] kernel_clone+0xfd/0x960 [ 125.206007][ T6366] user_mode_thread+0xb4/0xf0 [ 125.206029][ T6366] rest_init+0x23/0x2b0 [ 125.206048][ T6366] start_kernel+0x3e4/0x4d0 [ 125.206073][ T6366] x86_64_start_reservations+0x18/0x30 [ 125.206098][ T6366] x86_64_start_kernel+0xb2/0xc0 [ 125.206122][ T6366] common_startup_64+0x13e/0x148 [ 125.206144][ T6366] [ 125.206144][ T6366] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 125.206168][ T6366] _raw_spin_lock_irqsave+0x3a/0x60 [ 125.206188][ T6366] try_to_wake_up+0xb6/0x1490 [ 125.206206][ T6366] __wake_up_common+0x131/0x1e0 [ 125.206229][ T6366] __wake_up+0x31/0x60 [ 125.206246][ T6366] tty_port_default_wakeup+0x2a/0x40 [ 125.206267][ T6366] serial8250_tx_chars+0x68e/0x860 [ 125.206295][ T6366] serial8250_handle_irq+0x74d/0xc80 [ 125.206316][ T6366] serial8250_default_handle_irq+0x9a/0x210 [ 125.206341][ T6366] serial8250_interrupt+0x103/0x210 [ 125.206365][ T6366] __handle_irq_event_percpu+0x229/0x7d0 [ 125.206389][ T6366] handle_irq_event+0xab/0x1e0 [ 125.206411][ T6366] handle_edge_irq+0x263/0xd10 [ 125.206434][ T6366] __common_interrupt+0xdf/0x250 [ 125.206460][ T6366] common_interrupt+0xba/0xe0 [ 125.206476][ T6366] asm_common_interrupt+0x26/0x40 [ 125.206500][ T6366] acpi_safe_halt+0x1a/0x20 [ 125.206525][ T6366] acpi_idle_enter+0xc5/0x160 [ 125.206550][ T6366] cpuidle_enter_state+0xaa/0x4f0 [ 125.206578][ T6366] cpuidle_enter+0x4e/0xa0 [ 125.206603][ T6366] do_idle+0x310/0x3f0 [ 125.206620][ T6366] cpu_startup_entry+0x4f/0x60 [ 125.206638][ T6366] start_secondary+0x222/0x2b0 [ 125.206654][ T6366] common_startup_64+0x13e/0x148 [ 125.206675][ T6366] [ 125.206675][ T6366] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 125.206699][ T6366] _raw_spin_lock_irqsave+0x3a/0x60 [ 125.206719][ T6366] __wake_up+0x1c/0x60 [ 125.206734][ T6366] tty_port_default_wakeup+0x2a/0x40 [ 125.206754][ T6366] serial8250_tx_chars+0x68e/0x860 [ 125.206774][ T6366] serial8250_handle_irq+0x74d/0xc80 [ 125.206795][ T6366] serial8250_default_handle_irq+0x9a/0x210 [ 125.206818][ T6366] serial8250_interrupt+0x103/0x210 [ 125.206841][ T6366] __handle_irq_event_percpu+0x229/0x7d0 [ 125.206864][ T6366] handle_irq_event+0xab/0x1e0 [ 125.206887][ T6366] handle_edge_irq+0x263/0xd10 [ 125.206909][ T6366] __common_interrupt+0xdf/0x250 [ 125.206934][ T6366] common_interrupt+0xba/0xe0 [ 125.206950][ T6366] asm_common_interrupt+0x26/0x40 [ 125.206972][ T6366] acpi_safe_halt+0x1a/0x20 [ 125.206997][ T6366] acpi_idle_enter+0xc5/0x160 [ 125.207021][ T6366] cpuidle_enter_state+0xaa/0x4f0 [ 125.207044][ T6366] cpuidle_enter+0x4e/0xa0 [ 125.207068][ T6366] do_idle+0x310/0x3f0 [ 125.207084][ T6366] cpu_startup_entry+0x4f/0x60 [ 125.207102][ T6366] start_secondary+0x222/0x2b0 [ 125.207117][ T6366] common_startup_64+0x13e/0x148 [ 125.207138][ T6366] [ 125.207138][ T6366] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 125.207162][ T6366] _raw_spin_lock_irqsave+0x3a/0x60 [ 125.207182][ T6366] serial8250_console_write+0xb56/0x17c0 [ 125.207204][ T6366] console_flush_all+0x803/0xc60 [ 125.207227][ T6366] console_unlock+0xd9/0x210 [ 125.207249][ T6366] vprintk_emit+0x424/0x6f0 [ 125.207272][ T6366] vprintk+0x7f/0xa0 [ 125.207300][ T6366] _printk+0xc8/0x100 [ 125.207317][ T6366] register_console+0xbfd/0x1170 [ 125.207345][ T6366] univ8250_console_init+0x5f/0x90 [ 125.207366][ T6366] console_init+0x154/0x690 [ 125.207390][ T6366] start_kernel+0x29a/0x4d0 [ 125.207413][ T6366] x86_64_start_reservations+0x18/0x30 [ 125.207437][ T6366] x86_64_start_kernel+0xb2/0xc0 [ 125.207461][ T6366] common_startup_64+0x13e/0x148 [ 125.207482][ T6366] [ 125.207482][ T6366] -> #0 (console_owner){-...}-{0:0}: [ 125.207505][ T6366] __lock_acquire+0x249e/0x3c40 [ 125.207524][ T6366] lock_acquire.part.0+0x11b/0x380 [ 125.207543][ T6366] console_lock_spinning_enable+0xb0/0xd0 [ 125.207566][ T6366] console_flush_all+0x7ac/0xc60 [ 125.207589][ T6366] console_unlock+0xd9/0x210 [ 125.207611][ T6366] vprintk_emit+0x424/0x6f0 [ 125.207633][ T6366] vprintk+0x7f/0xa0 [ 125.207657][ T6366] _printk+0xc8/0x100 [ 125.207674][ T6366] should_fail_ex+0x46c/0x5b0 [ 125.207701][ T6366] strncpy_from_user+0x3b/0x2d0 [ 125.207724][ T6366] strncpy_from_user_nofault+0x7f/0x180 [ 125.207745][ T6366] bpf_probe_read_user_str+0x26/0x70 [ 125.207770][ T6366] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 125.207785][ T6366] bpf_trace_run4+0x245/0x5a0 [ 125.207802][ T6366] __bpf_trace_sched_switch+0x13e/0x190 [ 125.207823][ T6366] __schedule+0x1b71/0x5ad0 [ 125.207842][ T6366] preempt_schedule_irq+0x51/0x90 [ 125.207862][ T6366] irqentry_exit+0x36/0x90 [ 125.207883][ T6366] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 125.207907][ T6366] copy_clone_args_from_user+0x375/0x7c0 [ 125.207928][ T6366] __do_sys_clone3+0xac/0x270 [ 125.207950][ T6366] do_syscall_64+0xcd/0x250 [ 125.207972][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.207995][ T6366] [ 125.207995][ T6366] other info that might help us debug this: [ 125.207995][ T6366] [ 125.208000][ T6366] Chain exists of: [ 125.208000][ T6366] console_owner --> &p->pi_lock --> &rq->__lock [ 125.208000][ T6366] [ 125.208026][ T6366] Possible unsafe locking scenario: [ 125.208026][ T6366] [ 125.208031][ T6366] CPU0 CPU1 [ 125.208035][ T6366] ---- ---- [ 125.208039][ T6366] lock(&rq->__lock); [ 125.208050][ T6366] lock(&p->pi_lock); [ 125.208062][ T6366] lock(&rq->__lock); [ 125.208074][ T6366] lock(console_owner); [ 125.208084][ T6366] [ 125.208084][ T6366] *** DEADLOCK *** [ 125.208084][ T6366] [ 125.208089][ T6366] 4 locks held by syz.3.91/6366: [ 125.208100][ T6366] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 125.208144][ T6366] #1: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d6/0x5a0 [ 125.208187][ T6366] #2: ffffffff8e1a8c40 (console_lock){+.+.}-{0:0}, at: vprintk+0x7f/0xa0 [ 125.208239][ T6366] #3: ffffffff8e1a8cb0 (console_srcu){....}-{0:0}, at: console_flush_all+0x159/0xc60 [ 125.208291][ T6366] [ 125.208291][ T6366] stack backtrace: [ 125.208304][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.3.91 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 125.208329][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.208345][ T6366] Call Trace: [ 125.208359][ T6366] [ 125.208366][ T6366] dump_stack_lvl+0x116/0x1f0 [ 125.208395][ T6366] print_circular_bug+0x419/0x5d0 [ 125.208416][ T6366] check_noncircular+0x31a/0x400 [ 125.208436][ T6366] ? __pfx_check_noncircular+0x10/0x10 [ 125.208459][ T6366] ? lockdep_lock+0xc6/0x200 [ 125.208484][ T6366] ? __pfx_lockdep_lock+0x10/0x10 [ 125.208511][ T6366] __lock_acquire+0x249e/0x3c40 [ 125.208536][ T6366] ? __pfx___lock_acquire+0x10/0x10 [ 125.208559][ T6366] lock_acquire.part.0+0x11b/0x380 [ 125.208580][ T6366] ? console_lock_spinning_enable+0x9f/0xd0 [ 125.208606][ T6366] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 125.208627][ T6366] ? rcu_is_watching+0x12/0xc0 [ 125.208652][ T6366] ? trace_lock_acquire+0x14e/0x1f0 [ 125.208678][ T6366] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.208701][ T6366] ? console_lock_spinning_enable+0x9f/0xd0 [ 125.208726][ T6366] ? lock_acquire+0x2f/0xb0 [ 125.208745][ T6366] ? console_lock_spinning_enable+0x9f/0xd0 [ 125.208771][ T6366] console_lock_spinning_enable+0xb0/0xd0 [ 125.208795][ T6366] ? console_lock_spinning_enable+0x9f/0xd0 [ 125.208819][ T6366] console_flush_all+0x7ac/0xc60 [ 125.208846][ T6366] ? __pfx_console_flush_all+0x10/0x10 [ 125.208874][ T6366] ? printk_percpu_data_ready+0x9/0x20 [ 125.208897][ T6366] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 125.208916][ T6366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.208941][ T6366] console_unlock+0xd9/0x210 [ 125.208965][ T6366] ? __pfx_console_unlock+0x10/0x10 [ 125.208989][ T6366] ? lock_acquire+0x2f/0xb0 [ 125.209009][ T6366] ? vprintk+0x7f/0xa0 [ 125.209034][ T6366] ? __down_trylock_console_sem+0xb0/0x140 [ 125.209057][ T6366] vprintk_emit+0x424/0x6f0 [ 125.209082][ T6366] ? __pfx_vprintk_emit+0x10/0x10 [ 125.209106][ T6366] ? __lock_acquire+0xcc5/0x3c40 [ 125.209129][ T6366] vprintk+0x7f/0xa0 [ 125.209154][ T6366] _printk+0xc8/0x100 [ 125.209173][ T6366] ? __pfx__printk+0x10/0x10 [ 125.209193][ T6366] ? ___ratelimit+0x24c/0x570 [ 125.209216][ T6366] ? __pfx____ratelimit+0x10/0x10 [ 125.209240][ T6366] should_fail_ex+0x46c/0x5b0 [ 125.209268][ T6366] strncpy_from_user+0x3b/0x2d0 [ 125.209300][ T6366] strncpy_from_user_nofault+0x7f/0x180 [ 125.209322][ T6366] bpf_probe_read_user_str+0x26/0x70 [ 125.209349][ T6366] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 125.209365][ T6366] bpf_trace_run4+0x245/0x5a0 [ 125.209391][ T6366] ? __pfx_bpf_trace_run4+0x10/0x10 [ 125.209410][ T6366] ? __pfx_mark_lock+0x10/0x10 [ 125.209431][ T6366] ? lock_acquire.part.0+0x11b/0x380 [ 125.209454][ T6366] __bpf_trace_sched_switch+0x13e/0x190 [ 125.209476][ T6366] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 125.209498][ T6366] ? plist_check_prev_next+0x101/0x1a0 [ 125.209521][ T6366] ? psi_task_switch+0x6db/0x8e0 [ 125.209550][ T6366] __schedule+0x1b71/0x5ad0 [ 125.209576][ T6366] ? __pfx___schedule+0x10/0x10 [ 125.209604][ T6366] preempt_schedule_irq+0x51/0x90 [ 125.209626][ T6366] irqentry_exit+0x36/0x90 [ 125.209648][ T6366] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 125.209673][ T6366] RIP: 0010:copy_clone_args_from_user+0x375/0x7c0 [ 125.209697][ T6366] Code: 00 0f 85 47 03 00 00 49 8d 7e 18 4d 89 4e 10 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 56 03 00 00 <49> 8d 7e 28 4d 89 46 18 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 [ 125.209715][ T6366] RSP: 0018:ffffc90005c3fc30 EFLAGS: 00000246 [ 125.209737][ T6366] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff92000b87fb5 [ 125.209750][ T6366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90005c3fda8 [ 125.209762][ T6366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.209773][ T6366] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 125.209787][ T6366] R13: 0000000000000000 R14: ffffc90005c3fd90 R15: 0000000100000200 [ 125.209807][ T6366] ? finish_task_switch.isra.0+0x160/0xcc0 [ 125.209830][ T6366] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 125.209859][ T6366] __do_sys_clone3+0xac/0x270 [ 125.209883][ T6366] ? __pfx___do_sys_clone3+0x10/0x10 [ 125.209912][ T6366] ? irqentry_exit+0x3b/0x90 [ 125.209942][ T6366] do_syscall_64+0xcd/0x250 [ 125.209966][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.209990][ T6366] RIP: 0033:0x7ff33c97fed9 [ 125.210004][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.210025][ T6366] RSP: 002b:00007ff33d6d6f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 125.210042][ T6366] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff33c97fed9 [ 125.210055][ T6366] RDX: 00007ff33d6d6f40 RSI: 0000000000000058 RDI: 00007ff33d6d6f40 [ 125.210068][ T6366] RBP: 00007ff33d6d70a0 R08: 0000000000000000 R09: 0000000000000058 [ 125.210080][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.210091][ T6366] R13: 0000000000000000 R14: 00007ff33cb46160 R15: 00007ffe201881d8 [ 125.210110][ T6366] [ 126.457132][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.3.91 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 126.467602][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.477627][ T6366] Call Trace: [ 126.480879][ T6366] [ 126.483792][ T6366] dump_stack_lvl+0x116/0x1f0 [ 126.488450][ T6366] should_fail_ex+0x497/0x5b0 [ 126.493111][ T6366] strncpy_from_user+0x3b/0x2d0 [ 126.497939][ T6366] strncpy_from_user_nofault+0x7f/0x180 [ 126.503469][ T6366] bpf_probe_read_user_str+0x26/0x70 [ 126.508745][ T6366] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 126.514171][ T6366] bpf_trace_run4+0x245/0x5a0 [ 126.518845][ T6366] ? __pfx_bpf_trace_run4+0x10/0x10 [ 126.524046][ T6366] ? __pfx_mark_lock+0x10/0x10 [ 126.528799][ T6366] ? lock_acquire.part.0+0x11b/0x380 [ 126.534067][ T6366] __bpf_trace_sched_switch+0x13e/0x190 [ 126.539593][ T6366] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 126.545651][ T6366] ? plist_check_prev_next+0x101/0x1a0 [ 126.551088][ T6366] ? psi_task_switch+0x6db/0x8e0 [ 126.556007][ T6366] __schedule+0x1b71/0x5ad0 [ 126.560505][ T6366] ? __pfx___schedule+0x10/0x10 [ 126.565331][ T6366] preempt_schedule_irq+0x51/0x90 [ 126.570330][ T6366] irqentry_exit+0x36/0x90 [ 126.574723][ T6366] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 126.580160][ T6366] RIP: 0010:copy_clone_args_from_user+0x375/0x7c0 [ 126.586555][ T6366] Code: 00 0f 85 47 03 00 00 49 8d 7e 18 4d 89 4e 10 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 56 03 00 00 <49> 8d 7e 28 4d 89 46 18 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 [ 126.606136][ T6366] RSP: 0018:ffffc90005c3fc30 EFLAGS: 00000246 [ 126.612182][ T6366] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff92000b87fb5 [ 126.620126][ T6366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90005c3fda8 [ 126.628069][ T6366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.636013][ T6366] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 126.643958][ T6366] R13: 0000000000000000 R14: ffffc90005c3fd90 R15: 0000000100000200 [ 126.651908][ T6366] ? finish_task_switch.isra.0+0x160/0xcc0 [ 126.657703][ T6366] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 126.663836][ T6366] __do_sys_clone3+0xac/0x270 [ 126.668490][ T6366] ? __pfx___do_sys_clone3+0x10/0x10 [ 126.673752][ T6366] ? irqentry_exit+0x3b/0x90 [ 126.678323][ T6366] do_syscall_64+0xcd/0x250 [ 126.682822][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.688720][ T6366] RIP: 0033:0x7ff33c97fed9 [ 126.693121][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.712700][ T6366] RSP: 002b:00007ff33d6d6f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 126.721083][ T6366] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff33c97fed9 [ 126.729029][ T6366] RDX: 00007ff33d6d6f40 RSI: 0000000000000058 RDI: 00007ff33d6d6f40 [ 126.736972][ T6366] RBP: 00007ff33d6d70a0 R08: 0000000000000000 R09: 0000000000000058 [ 126.744928][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.752877][ T6366] R13: 0000000000000000 R14: 00007ff33cb46160 R15: 00007ffe201881d8 [ 126.760823][ T6366] [ 126.763902][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.933921][ T1293] ieee802154 phy0 wpan0: encryption failed: -22