last executing test programs: 5.225825334s ago: executing program 0 (id=1): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='scalable', 0x8) shutdown(r4, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x33}, @in6=@mcast1, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000}, {0x1, 0x2}, {0x8}, 0x0, 0x0, 0xa, 0x3, 0x2}, 0x4}}, 0xf8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x1, 0x4054) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c010) 5.094229244s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000800fc00000000000000000000000000000100040000000010000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e00000010000000000000000000000000000000033000000ff010000000000000000000000000001ffffffffffffffff010000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000080000010000000000000002000000000000000000000000eb0000000000000000000008000000000000000000000000000000000000000a000302000000000000000004000000000000000000326960e48adfb1a6851f187d0d51493c32e32155a9fc33799d1f111909e18448476266529b793415c23b7481be7e2f6c7f217da0498ebb43c3af5213ef1a5e4806dffdc41919e4eba0b209c20f840f8c0314fbb3a5cf078fb5d4642caf8d2c34837db17e3a4871ad3e979b4fec8ee8c9d3ae75eee22332e87f4d14e8a40e5564acb973eefd744bbe046e9899c97c0e99cb63b3c60a9a9055920ebe508bffb87996ffe1970cd4dedd2d841e4bc91b282cb0cae0eb1fadaf2d45bd6c0233cc4348f074e39f3fe12a05815b61213ebf6cf351f777fe2c5b4a4b394498c3abb4862024ff706c6ccc4f86a1546dd8660f337ad044"], 0xf8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) accept$alg(r0, 0x0, 0x0) 4.080066676s ago: executing program 1 (id=6): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r3], 0x80}}], 0x1, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000000000"], 0x14}}, 0x0) read(r4, &(0x7f0000000640)=""/187, 0xbb) r5 = socket(0x10, 0x80003, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r5, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) 3.919590968s ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x0, 0x2a, 0x0, 0x8}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0x0, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x10000001, 0x0, 0x1000000000000}) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 3.607438097s ago: executing program 3 (id=7): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x7, 0x26, {0x26, 0x0, "9b7db30b8c020d1fd4daa4b868138486b45909e28ca1aec112cc02e823c8010148c6dcf5"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x20, 0x15, 0xd0, "89f63c36caa45d100d54c53b622eb4597e6bf9bd21e218e9b4516d5c927ab78767bea02a4bd78b09a4c8d2a4949d269010dc49181588fa4f64c1e39dc6edfd0902683ff7bc456d39528ce63fddc2d3ecec5e7fc08170cb4395d030fe1874d30289df449635d200e939df64bb18c53ae093ac82ffa766d54d31b6ab0b9d16cd36ebb157f2dfccf548152c12eaf22ec960310c1b7c22866b1f3754df52cf09d8e115fccb2eb315bfbf4dadd387095ae763416a3d05a45a6ce81b4d27bb2bd0289a014813cce1a8e50e4828ad8935d50c0f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000005c0)=ANY=[@ANYBLOB="fe0de44a0000b16bb6b8b07cf3c7a9a0b5"], &(0x7f0000000380)={0x40, 0x5, 0x6, "5d4f1d09588e"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000080000ffff25bd701723c06f2500040000491c4ddd959452d0d379c40085dbd894a74e1c98f1baa6c75a235626692e7e42d6c693d9df5a0266c50cb8162a348ce23c4b6e92705040e9489be09f060d241af02019f27103406c40d1d25f789b12252920a8254332a63601dcec9e223f93b4f9c496bf0a3c5a1e4bb0ee484754dc3d813133a27fa9af8cb8b5d06410675e12292b179684df3e620339da70beb4df45dfb83b514a0c0eb651460559436f40ff8bbc28c7643cf890d549619314de96b3", @ANYRES32=0x0, @ANYBLOB="320a050023080000240012800b000100627269646765000014000280060009000600000006000600ea370000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)=0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x3e9, 0x8, 0x70bd2c, 0x25dfdbfe, {0x1fe53de47d706474, 0x2000, 0x2, r3, 0x80000000, 0x3, 0x6, 0x4, 0x0, 0x4, 0x6673}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000010) 3.530074542s ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0xf5, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) 2.895183048s ago: executing program 0 (id=8): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2000}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x44800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x120008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x8000, 0x9de) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2, 0xfffffffe}) 2.649655305s ago: executing program 2 (id=3): socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x40000}}], 0x18}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000500)="2e9b5b006741ee189fdb0000005ec8fee5c42f46efcf4b973ffd89cca65b8d14a705ab7f36f081dba6a50bb2da8210ed0bc77e29f254e8b73fb69ac513dfc3dd7e2ddffe9842e77e8725d666f41fd8d09041ee06c72d8b89c82bf171f160003c61bbabed1726883f77e0981142896428", 0x70}, {&(0x7f0000000600)="b7000000018012213aac24cf6d10fe4e0eeb19ea6ad18b749d66ee050000003cfe965e61d190b84180043319676a16a7f9473af725a915415c9cba71e039ef949e9c8ee29904c17ffc24f025", 0x4c}, {&(0x7f0000000680)="06000000710d08c4daf10a7742e39e31ceefb1fc08000000c84150da0d1787eb10d211447da94c20138130e2e7240613742d1077d0297dbae2cbfddc8a7cdb0642846469", 0x44}], 0x3) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01082bbd7000fedbdf250c0000002800058008000100756470"], 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x3a54, &(0x7f0000000040)={0x0, 0xc8a3, 0x2, 0x0, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000340)="bd119b09f7dde38c8ee9bd2efd9d7c0ad44b51ba0157408196e3b7a6689386595008ff2cda484e26104bb518695c40667001a66fecb9f3ece6778f3a6b1f2beb7de15c6951771f63583331f97eefda0c6a2a2978325906fa5a366020082ba653adab3b18372d9d7f049735cc534326cb0e842b5c10f1f4e72ffd4ec1f327d34fbd053c242536913343", 0x0, 0x4fe, 0x60000000, 0x0, 0x2c, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 2.649354097s ago: executing program 4 (id=9): r0 = eventfd2(0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x12) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0xe2}, 0x3d, r4}) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000012}, 0x4000) 1.382889813s ago: executing program 2 (id=10): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x1a36c2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048890}, 0xc000) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048890}, 0xc000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'multiq3\x00', [0xe, 0x401, 0xe2, 0x5, 0x2, 0x7ffffffe, 0x1007, 0x800001, 0x6, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x5, 0x9, 0x8, 0x3, 0x1, 0x10, 0x10c, 0x40004001, 0x2, 0xa, 0x2, 0x1, 0xb0c0, 0xf, 0x400000ff, 0x400004, 0x4000004]}) 1.187289048s ago: executing program 2 (id=11): r0 = syz_io_uring_setup(0xb14, 0x0, &(0x7f0000000000), &(0x7f0000000180)) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000400)={r0, &(0x7f0000000300)='\x00', 0x200800, &(0x7f0000000340)={@_ha_fsid={[0x4, 0x4]}, {0x363a, 0x8, 0x1}}, 0x1, &(0x7f0000000380), 0x0}) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000440)={0x0, {0x0, 0x0, @qam}}) io_uring_setup(0x68b1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e9"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001010000000000008000be7e8533", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r3, @ANYBLOB="080003001900000008000100", @ANYRES32=r4, @ANYBLOB="08001b"], 0x44}}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x40400) ioctl$BLKSECDISCARD(r5, 0x127d, 0x0) syz_open_dev$evdev(0x0, 0x5, 0x1ef082) socket$netlink(0x10, 0x3, 0x0) r6 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x800) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.186919357s ago: executing program 0 (id=12): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r1, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x38}, 0x1, 0xff0f}, 0x0) 932.923754ms ago: executing program 4 (id=13): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101000905410200027d8e23f20d4de863bf1d5996606e49db446ff5905c66fa54153aba5c38709cb2fcc28fc759e5e06e9fd728b3abebf67589b97a9320003f8a25f95a51de76f817f32db0772f1d557fed56974d"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x19, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r6, &(0x7f00000013c0)="bd31", 0x2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 733.079696ms ago: executing program 0 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x2, 0x5, 0x24, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x80, 0x9, 0x7}}) syz_emit_ethernet(0xfdef, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050027bd7000000000000600000008000300", @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$vga_arbiter(r2, &(0x7f0000000000)=@unlock_all, 0xb) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x0, 0x9, 0x6b, 0x0, 0xd}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) io_uring_setup(0x5d59, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) writev(0xffffffffffffffff, &(0x7f0000000c40), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0xffffffff) write$ppp(r4, &(0x7f0000000000)="80fd", 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000025b84a7119c271cfbec9233517380a01010000000000000000050000000900010073797a300000000048000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000014000480080002400000001208000140000000000800054000000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 148.299763ms ago: executing program 1 (id=15): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r0, &(0x7f00000003c0)={0x8, {"ac4b292b84bd72a8d758c2b2ff1c72004134668d5e310b7d0088b3d7afc4ce236d4ac7c0365d389808a78b05023561f45af31a93113ba5f725e7e28370eee47ad75feff31d8835c190aa0f8e1a70095d64a50cc8cda17f827ba53540a6bb426526e912ab7f941dd459ab9bfcd6432eaf3598e278858b1e87554a958e31c2625045b8843a2853ea7f22be915fb9fb47c83624b3fa2be5c12acbe5eb4b2a67ecd5af46c393e88329deb4af45ebbe41f0e197245ca0b4b69c0168803c9fd27ac61b79bacb0da740f3aade73ecf04f363c4dfc691d939c573bb1222b0eb8e165d6d6edfbc770ce067bbef32856c6f514b0a38ce4cf86b89b5a4dca3dd0f48a4253cd3547f9a898f29836a51c60949ee877b24ecdb330ad61b5833a24e4e31d990dbf3a5195784d6dcd13cdad3869526b3531c5987dac7444d60e4b5334859825d5de308ade959d81e72f5593ce8adf26513d3a2c6037ac9c77c45ccae6d1de257b4dee8283fe2f47e8744ba7fd648697d55bd8582d9aba94a5caee75bad49b35f9465085d8f44b75a77515b6309bd284c305fd3a78c6526105c5d49e12d4d56938d259cebd663b6bf8e8b052be7e90c7c5a184c41068b14ec261b736e59b5a75a4f1db359971e653dc9ecdedb8ae9928fc6ca04d99995539be8ccc144dd3e0fdf46fa00638cff0e3f0ff92ae49cfe9a88c815971c52fff59935ed679fb7500b71bca52d5885c9d22fc5148b89c59bdc366786928c13430069666e03e42731c93c47508ff053d1193b15dfa6133dc3a3db587bc5ca05c697f498cb17496b5e8f6629164996f1b67f3aeb7aa282f5716d0d5bf8b9d0e674ebec3e6beccdd4e457254fd886457e4f51e454f1c1e7ce5ee5125bc825410e1303ac4e9fcff7eac2955bb43a6a01863f7f32cae717a7abc0afd2953396a19e930f06dcc5cf73aa089b6ff9b65ec2e954e87229670e42c2d44dfc79d7866968b08baee738ee6936539d22dec8a966f90fcce231c0c5232bbde8925da8abdae1efd04da31e9627bea70fb7941242588c2ed40b8e14a5d7406cf28c62b94530064b4b10dbce57ef97436d57e3cc81d05adb22838470e1c64bab7f198b3efaf753d12392465d285586fd484dfe0323536687523b175dacd2e91a959e1c0df2593a2954c44d489081915421114a38284cc6e62e43e3cb5073a8bc9989aef76332028b7c24178f47b1cba9a6a9e0a068445a75ae6f568031f617c37bc24a3ca3c950546aba27f7400029a7ffc11600e17cd5e4efd4e91963468d1185e8780db244c8da8ce027801a6ff13e2dfdb5add1800b66a1720c35f2a8219c7dbf439c7c524da32c64c7e6056b60b53c02cb620fb64c6d2f12f391a8b4a19fc0f2e0644b8302a24a2991291c726cef1d8cf765f63b1f994a479f0e81afd4e6e3300767c9debda23f2058d7f5d31497008fb1ff951ba3bcfac9abe0ea3fc8a3cfc770200d885b6fc758aef7df4b8bf305ce373e888205b90eed8f1528b33f198d0f0802eccce8ca133af7d8a27a00f8e9ec981c618f48486864cd782d3d803bdce926e1447b3ccc8f64314b6b07d3b42e563ecc4fe8fbe4ab414893191d5da7d00e30733c7b975aef14dd5a745927d10fb322ca2d079a698f8089ce1a7dd3cd83484cebdae7437dd988a00062ce950c77bf0eb1a4b40b4815685ada031fd16e4b89f66f7ec804e752efede8f3d79c78c1bd97d9e1eaa19f87715689ddc3ba55d787cae0b30dd950197da2b389838746fb853d5a65d1b281d51500b8c0c8430cc1b2b09e1794ce2ea0171d6e822ba87056dcf6663aa33396245897572ac8a762838a5738690dcc3f6bd2028a4a108355d69e801996f68828420919741b0af974856366d3196a71e606b20c153ce75a3ec121215a5b68ebccc5a15fadbfe2e703754c95dd5c77ca935944231557c480ed83b0b5a8b19f566f5003d51301a6b342cda98529b3a3ba2f76f19e70e8900a95e5de1153d6a302f985f6627a3d5d63cd7f1bc125236730ff3ddcc92a5fbbd1f4decd70752891dd71b1cd53f0841b8b3e9616b661f3b73f776c2ce7928bdeb978182c2a6eb3c94da356a9601fdf0b9b084b0bfa4b93323f0c49bf789699f77baa26ed98ac6d88e2c924f28715fa16a50d2f6382ef9f3eac4f71fc952b18c1f6710a8750921e130b7f90ac5d0006a3c8163f9a7962c87856600aec4e9cb28b7de3655eec56feb56afb525f63ab4efbb05458b702cb9c9998c241d33235e687fa16f17cc95d1e3903bc2da5b08dc511de3d7ed898eb29090b2afd2e894580c479e783374c2ae90034b55d05251d45106840b503e0b3211d0f2db7ff0bb45e9da9b900f4e80dabc95cc90d0606c72417a99794edd0fe10bf6d26248ddf04f43e565daa073832b47baf9953fb44e657dfe7beedf5bec4f0556e5cd5e308bf0857cfa984d4e2f65aff9beab8b4b000bfd9769986489f66ea5b242cb83403e47906ecaacb7dd627533d9bce8cd37d83147dc4fee263c96393a0f6cc41d502e9e49f232cbc3e2537a3aa76c1a7ccc6a83aea3041faf0f6df6a12fa6e6f7e9540e7a31c89d3c7645b5d6a17ede151761c607ce1456b303f9f64c80574690502ed3ec632bbd9860168ad5f2b7de7528c02fe2984bbc9b20ae0f1ec57a3d33b0432a96d92251a653ec39e6caf3f738485a41e38370d71da6fa538b54fa0976f9f7f3dd8763eef351d77b9b9354136d16326cf58022f1c67d801781daf637b092b43be7e467ab8b6382c570c8c32c7843b8ee7eb31db9a4fd484ba7f0f08dd87109caad8cd7b6f93ae606446b4be60baf61a65bbaa8d5309fea6aa151f12dc5725a890ba6f6c67a7ac6609ed44ba231aae3131ecc45bb69c92f98e843cc99b45fddd3ee672a3cc62d8e2056112b88995c586f56fcdb93362a018eee321e2ee9f6f5276f462486e255faaa8a7b65117cf9e744c82ab5795ce13078d8c76519d59f81013dc17083303dcad1847812a76f01b0d03d3c3621f6c75a0a749ae9d7a7c7da4d4f49a9f432a5418f40d5be850204b1ae66183c1bf83c7f74be4ccba2bc211383f9c1b9c6c5e216e5a93b091fffb0aee6aee2ccef5e200ba11428b8724690749aeb96ef39be5c4e63a7bd9dd093b96e0658cbbc54341a161356227795140d9bc5361c2c502e67acd84ef346c1e029465bd1329727f5056df7d63747cbd7c6f54a80f74bb824b07aa7006de2c18e31e49b04a52045a3895cd2567137937f22fa27f983a7e52eecf47652e2d80c4e03c55ad269550a97b37c94763cdf89b9244cddeb509429e2668fb088acdda97aea01f3bfd8df8910d8c39f5ccd46e851bb4077b392d66d56be56645295af3251aed0c8dd8cb097bfc77705e1f13c2ff79da0f9c26f08f903494295b1e1b566a4124b88f0536858039f9be3bfe7bcb66e57122bdf2fb679923ef156153d2ae1ba1de71a510d186dc9bed86265018299702e849a4ad99f655075aae194cc062d9b07c0573337538a5a6d6c6d2921fbd181d6e305df7a1d62a82154fcde4a1aafdd6f4e7e49a7f349f628ba372d49fcbcbbd71c23e234218b79cd80088b2b4ab4e20932eacaa2e91236a4c7fc82f6a49354436dcc806b50aca9264fcd9b199eafd6381178db163d4ce377389c67436fb07d58cd73e6a9204f447eb9c100c223ea391bcba8989426c5c8cdd0300279daa31bd5730d9ab69e5904d7386273a76f779335ce5e44f84d3f3686573ea71f2e64922e82bf2f08c877c54ee7cd160c79d68c500df6f69d033f2304d830c7cf109f5c993abacf15d94baefe49265e24f838af559cdb5695a8135ac2b6ca1d7b5600803b1f24dcc29148aa94905dda78a9f19b21fec2d780fb962dab7f1f7c7ea4aef475540fa0dc2b852f9cfdad43e8a6fed633854a1e1b96169f28961349a9ecd6d0f1f2473f036db92c0c0e64733668fc6d69becb06af2480ac856e9431439d914557a31e80badca76f85086fba1fc7374cc249c5983cc085c7bf3aa5ef12afb3bc72fe479507666bb38f50878fad0450dac4b39ea57ed01654b17590f9478dfab02e664ba0e34d4a764374d09de43b69d5007077b2bafb42e260aa8fd4aa3bef9a8d5dc8e2ecde7c2c2bfdaa21802b7d67588854288512602a41e25e09f59633fbd92df9478bc6e6a6b3b560dca5798a895e8dfa93ae9fea23729da6f3a40d4af3efcd4f6d2d02ffd2b0270960cdaea8af5004fdb18c5a510f2199724f17a8a18f3b1bc132df7affdf6f40310131e448c040fe446309352e24cb7fbc94ff9e1555e85f6479d4952854917eab50738aa6f4b70c445557703778056f7465f5d0d92bf10308a5a61574f5576702613770399805aed655d3443715dbf23190b6f0480e30c82840b59f69a71bbc19f00ac18d220af047ef89515d946dc77dd08c6abf28f6e796d3c70a4ae3d4ba01bb44fc6f03e31831ee89f583ef3d40f6c742778fac42ccf1e30367a469322d45a9725a1228ab0639de1f38c1f365c765ed9131a9d535cb6ffe49d556dee403e2202de0d04ec682c58e6d508fb377e3b7d9b748955ffc6b27b03207a3c15cd5114e631ca080c24e1147bb6d398629efcf288e3240d6311034057a031f9ff7efb07fc8ee34f19c32115f361f9e03b89f080111d141e2fbfbcd5a3d54e32c6ef1dde18c384d6bf2c4b5fa21e7efeb0b5c9c27a7740be213dce807e6a01acb09634aec0fe66bfb2ab4da89a13c42207577e38105e665afed154fb3805974d31289351937b4c67b937ae644d6cb3f913d2e05c3dce1917e1551304a5c437d69a2d13ab33989d729e6c2ed45f847b6cf5169ec4459d541c7a70199ebca316408f7adfb168e7ac452f507652ea3892e64a4d81d575825168426f39c41448beb5044ec5712f2e10b6d88d471eecf5f29085474fd2aae2791ffb41222a9dbb8c6d32847819c15201e95d0741ee1ab75ea046beca9bc8952b62ddd8a30fe2637996483d3104f540c9a985f8638ba17da2e618255f9a615fce90e1f96799d261cc551b9187cad7a9c5a9f6ff58e7cf9277856ca14e582efd62c3d384131e2fc21b9a01314bc69d54f235ce6118d756137b03c657bb26194b175a716ebe6ba03a01cb161a77815654da6a5ad327859e8af7d3f53cf1d34b84c0aafdbf8f3badaff20d010e97f794d83d5498b59a787ba94bb82d91637308313b4c92def68945b6d3d0e3654cb24b4926e46757e576d30024640fa293db106d789f41a1e481ace0c314920bdc82819e64720746ee22592a11f5917c1bde47db20902551fa838f81942fec3552f41261e2b7418e500ab9e5ea704141f0fc414a5cc6062c257214950de1c32b1951b169c7a613417695036e72bff2ce9c1a180fde1cf64cf85828f6eb9126465762686e64ab090e524e7edb6d03c3571f233f60ffc570b96a5c0839ce8d42bdc62499f8f56ee8c4a89ec4f35a7e38fe23c4b9b1625546c1a16087980d7a72c15fb7b50c9a212d9284a1cdaa1a4d45169a98ae6a730a2a07b8cb5adccdceb3131b1aa6c06b8fc7390f215a2c9ea2b2cac1026ed5965e92673608d28d55fc4e623034716ef0edf7d077809d09d8db38519d5d00a1a415b5bc431d8c6a4d558c930437565cd531c6e01631ee60d9e6e782580a409ab645c72a4b93f68100bc22a5275f66d54dbefc44365a07fafe99368b09a891767e5d376b1d0cbdc02679fb10f359d3ed8f7c268c7f0fbab77b483f44f08ee412c20a155d058addb21376fec84fbb3838c6b6aa4d5bd54e1b9770d87628f244e17e5ffc2b28eff9fb489f984b7", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socket(0x23, 0x4, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba42e60b5047b92e6cb335d5bd9d041e000000001a0008001f7716082ee3589f659901e6f1a5a5f4b8160381ffffffffffffff00"}, 0xd8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x5000000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001400)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x3}}, 0x20) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x7e) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x10, 0x40) file_getattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x18, 0x800) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000840)=ANY=[], 0xf2, 0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 99.014281ms ago: executing program 2 (id=16): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0xffa4, 0x0, 0xff, 0x3, 0x600, 0x600}, 0x21) 79.004812ms ago: executing program 0 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x40000008}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket(0x22, 0x2, 0x1) recvfrom$rxrpc(r6, 0x0, 0x0, 0x2043, 0x0, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000, 0x3, &(0x7f00001c3000/0x2000)=nil) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000098a82020002000000"], 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000000080)={0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="00248600000086022c002f2ff5108b5e11ab8861fa86f7bd3fb6f6a673c31489035518889fbfc6f20da15190b829780efdd5cdac0e6bebf7528df881db9320f1287fd5839fa9518244b17f9632483ef5c991a946037d1576f695dfc03be52bba5eead8bc85cb1ee905213a86679903eb643651f88bd2e949073da6278a9cd4de15a364af55f8c2c5f7e866ae"], 0x0}, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="407c01"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macvlan1\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r10, r9, 0x25, 0x0, @void}, 0x10) 0s ago: executing program 2 (id=18): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000e8cf8f5600000000784f39172d25f16ef48a5200cd0a7e7bf6b4b9d1b4a5f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000200000715b8000000"], 0x0, 0x1a, 0x0, 0x0, 0xf4, 0x10000}, 0x28) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000480479fd03220000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 328.715026][ T30] audit: type=1400 audit(1771043937.436:62): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 328.740063][ T30] audit: type=1400 audit(1771043937.466:63): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 328.742499][ T5830] cgroup: Unknown subsys name 'net' [ 328.768954][ T30] audit: type=1400 audit(1771043937.486:64): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 328.874913][ T5830] cgroup: Unknown subsys name 'cpuset' [ 328.882629][ T5830] cgroup: Unknown subsys name 'rlimit' [ 328.980428][ T30] audit: type=1400 audit(1771043937.696:65): avc: denied { setattr } for pid=5830 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 329.008968][ T30] audit: type=1400 audit(1771043937.696:66): avc: denied { create } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.034530][ T30] audit: type=1400 audit(1771043937.706:67): avc: denied { write } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.059567][ T30] audit: type=1400 audit(1771043937.706:68): avc: denied { read } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 329.079925][ T30] audit: type=1400 audit(1771043937.726:69): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 329.104759][ T30] audit: type=1400 audit(1771043937.726:70): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 329.128517][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 329.138051][ T30] audit: type=1400 audit(1771043937.866:71): avc: denied { relabelto } for pid=5833 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 330.072291][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 331.986306][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.996234][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.003930][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.011738][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.017890][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.025851][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.033504][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.041037][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.048140][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.056878][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.057658][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.072196][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.079655][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.087215][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.095370][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.096083][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.105516][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.115949][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.118256][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.130407][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.130442][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.151012][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.154355][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.165471][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.172521][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.622520][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 332.645361][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 332.669027][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 332.678719][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 332.754766][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 332.849922][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.857541][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.864971][ T5849] bridge_slave_0: entered allmulticast mode [ 332.871898][ T5849] bridge_slave_0: entered promiscuous mode [ 332.899845][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.906998][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.914166][ T5849] bridge_slave_1: entered allmulticast mode [ 332.920789][ T5849] bridge_slave_1: entered promiscuous mode [ 332.934293][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.941444][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.948574][ T5842] bridge_slave_0: entered allmulticast mode [ 332.955412][ T5842] bridge_slave_0: entered promiscuous mode [ 332.985867][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.993064][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.000139][ T5846] bridge_slave_0: entered allmulticast mode [ 333.007019][ T5846] bridge_slave_0: entered promiscuous mode [ 333.013669][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.020739][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.027954][ T5842] bridge_slave_1: entered allmulticast mode [ 333.035010][ T5842] bridge_slave_1: entered promiscuous mode [ 333.045106][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.052323][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.059391][ T5843] bridge_slave_0: entered allmulticast mode [ 333.066286][ T5843] bridge_slave_0: entered promiscuous mode [ 333.079845][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.087045][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.094197][ T5846] bridge_slave_1: entered allmulticast mode [ 333.101182][ T5846] bridge_slave_1: entered promiscuous mode [ 333.120389][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.127496][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.134917][ T5843] bridge_slave_1: entered allmulticast mode [ 333.141668][ T5843] bridge_slave_1: entered promiscuous mode [ 333.150622][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.189015][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.206193][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.215965][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.223280][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.230361][ T5850] bridge_slave_0: entered allmulticast mode [ 333.237111][ T5850] bridge_slave_0: entered promiscuous mode [ 333.257919][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.268971][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.278375][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.285921][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.293282][ T5850] bridge_slave_1: entered allmulticast mode [ 333.300291][ T5850] bridge_slave_1: entered promiscuous mode [ 333.308405][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.326472][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.350234][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.373237][ T5849] team0: Port device team_slave_0 added [ 333.408127][ T5849] team0: Port device team_slave_1 added [ 333.415437][ T5846] team0: Port device team_slave_0 added [ 333.422435][ T5842] team0: Port device team_slave_0 added [ 333.429727][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.441165][ T5843] team0: Port device team_slave_0 added [ 333.454556][ T5846] team0: Port device team_slave_1 added [ 333.469060][ T5842] team0: Port device team_slave_1 added [ 333.476338][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.486779][ T5843] team0: Port device team_slave_1 added [ 333.493409][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.500331][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.526371][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.568425][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.575473][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.601407][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.643772][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.650709][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.676936][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.688862][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.696124][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.722369][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.734761][ T5850] team0: Port device team_slave_0 added [ 333.740674][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.747629][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.776473][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.787897][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.795037][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.821032][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.832888][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.839820][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.865738][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.876951][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.884152][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.910076][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.922140][ T5850] team0: Port device team_slave_1 added [ 333.983272][ T5849] hsr_slave_0: entered promiscuous mode [ 333.989320][ T5849] hsr_slave_1: entered promiscuous mode [ 334.013866][ T5842] hsr_slave_0: entered promiscuous mode [ 334.019954][ T5842] hsr_slave_1: entered promiscuous mode [ 334.026143][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 334.031933][ T5842] Cannot create hsr debugfs directory [ 334.052143][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.059094][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.085083][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.096861][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.103836][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.129734][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.156665][ T5843] hsr_slave_0: entered promiscuous mode [ 334.161765][ T5127] Bluetooth: hci0: command tx timeout [ 334.168444][ T5843] hsr_slave_1: entered promiscuous mode [ 334.174385][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 334.180091][ T5843] Cannot create hsr debugfs directory [ 334.206709][ T5846] hsr_slave_0: entered promiscuous mode [ 334.212781][ T5846] hsr_slave_1: entered promiscuous mode [ 334.218912][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 334.224976][ T5846] Cannot create hsr debugfs directory [ 334.231027][ T5854] Bluetooth: hci1: command tx timeout [ 334.231422][ T5859] Bluetooth: hci3: command tx timeout [ 334.236882][ T5854] Bluetooth: hci2: command tx timeout [ 334.248121][ T5127] Bluetooth: hci4: command tx timeout [ 334.355606][ T5850] hsr_slave_0: entered promiscuous mode [ 334.361812][ T5850] hsr_slave_1: entered promiscuous mode [ 334.367641][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 334.373768][ T5850] Cannot create hsr debugfs directory [ 334.615803][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.639364][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.649069][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.669006][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.733967][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.745163][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.754148][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.763550][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.812562][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.822474][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.831381][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.857706][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.920777][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.937811][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.953745][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.967714][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.976883][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.046411][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.065949][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.074267][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.081456][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.095863][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 335.110131][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 335.120627][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.127731][ T5892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.149731][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 335.166494][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.178540][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.203132][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.210189][ T5866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.218801][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.226008][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.258986][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.300164][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.314721][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.339291][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.357105][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.364256][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.380662][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 335.380677][ T30] audit: type=1400 audit(1771043944.096:84): avc: denied { sys_module } for pid=5846 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 335.430620][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.437751][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.530109][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.566573][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.573736][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.613738][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.620916][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.664075][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.676086][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.710461][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.735847][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.763291][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.814453][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.848926][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.888821][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.895996][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.905936][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.913092][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.963434][ T5842] veth0_vlan: entered promiscuous mode [ 336.005741][ T5846] veth0_vlan: entered promiscuous mode [ 336.023385][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.036470][ T5842] veth1_vlan: entered promiscuous mode [ 336.084453][ T5846] veth1_vlan: entered promiscuous mode [ 336.154918][ T5842] veth0_macvtap: entered promiscuous mode [ 336.196958][ T5846] veth0_macvtap: entered promiscuous mode [ 336.205036][ T5843] veth0_vlan: entered promiscuous mode [ 336.219175][ T5842] veth1_macvtap: entered promiscuous mode [ 336.229353][ T5846] veth1_macvtap: entered promiscuous mode [ 336.241069][ T5127] Bluetooth: hci0: command tx timeout [ 336.253645][ T5843] veth1_vlan: entered promiscuous mode [ 336.285153][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.300574][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.310600][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.311930][ T5127] Bluetooth: hci4: command tx timeout [ 336.318873][ T5854] Bluetooth: hci2: command tx timeout [ 336.323360][ T5127] Bluetooth: hci3: command tx timeout [ 336.328582][ T5854] Bluetooth: hci1: command tx timeout [ 336.337288][ T5849] veth0_vlan: entered promiscuous mode [ 336.352120][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.373385][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.382843][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.392576][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.422391][ T5843] veth0_macvtap: entered promiscuous mode [ 336.431654][ T5843] veth1_macvtap: entered promiscuous mode [ 336.442959][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.453578][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.464814][ T5849] veth1_vlan: entered promiscuous mode [ 336.478723][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.511643][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.518938][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.528487][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.557785][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.586968][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.600722][ T5866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.618656][ T5866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.630161][ T5850] veth0_vlan: entered promiscuous mode [ 336.640357][ T5873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.650508][ T5873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.670201][ T5849] veth0_macvtap: entered promiscuous mode [ 336.680412][ T5873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.689879][ T5873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.704330][ T5849] veth1_macvtap: entered promiscuous mode [ 336.725860][ T5931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.742508][ T5931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.749286][ T5850] veth1_vlan: entered promiscuous mode [ 336.764746][ T30] audit: type=1400 audit(1771043945.486:85): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.uIMfup/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 336.789136][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.795246][ T30] audit: type=1400 audit(1771043945.486:86): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 336.801773][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.824278][ T30] audit: type=1400 audit(1771043945.486:87): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.uIMfup/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 336.853995][ T30] audit: type=1400 audit(1771043945.486:88): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 336.895551][ T30] audit: type=1400 audit(1771043945.486:89): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.uIMfup/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 336.922683][ T30] audit: type=1400 audit(1771043945.516:90): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.uIMfup/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 336.947169][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.961618][ T30] audit: type=1400 audit(1771043945.556:91): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 336.981291][ T30] audit: type=1400 audit(1771043945.576:92): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 337.007907][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.022122][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 337.041987][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.052037][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.053387][ T30] audit: type=1400 audit(1771043945.576:93): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="gadgetfs" ino=7316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 337.098762][ T5931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.122847][ T5850] veth0_macvtap: entered promiscuous mode [ 337.133124][ T5931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.153128][ T5850] veth1_macvtap: entered promiscuous mode [ 337.159676][ T5931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.207387][ T5931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.227166][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.248682][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.311619][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.387383][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.402325][ T5866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.414371][ T5866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.176648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 338.303681][ T5892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.321924][ T5859] Bluetooth: hci0: command tx timeout [ 338.374248][ T5892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.391191][ T5859] Bluetooth: hci3: command tx timeout [ 338.396642][ T5854] Bluetooth: hci2: command tx timeout [ 338.396666][ T5853] Bluetooth: hci1: command tx timeout [ 338.407695][ T5127] Bluetooth: hci4: command tx timeout [ 338.413453][ T5892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.456430][ T5892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.500128][ T5892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.532741][ T5892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.592484][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.622740][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.689704][ T5892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.733590][ T5892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.200982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 339.231147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 339.305346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 339.429831][ T5892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.454197][ T5892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.700024][ T5857] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 339.799582][ T5981] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 339.809282][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 339.950059][ T5857] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 340.020074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 340.164184][ T5990] veth1_to_bond: entered allmulticast mode [ 340.170332][ T5857] usb 4-1: config 0 has no interface number 0 [ 340.172474][ T5990] netlink: 'syz.4.9': attribute type 1 has an invalid length. [ 340.193423][ T5857] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 340.212205][ T5857] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 340.234408][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 340.257856][ T5857] usb 4-1: Product: syz [ 340.266863][ T5857] usb 4-1: SerialNumber: syz [ 340.294282][ T5992] Zero length message leads to an empty skb [ 340.304692][ T5990] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9'. [ 340.318620][ T5857] usb 4-1: config 0 descriptor?? [ 340.389937][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 340.389952][ T30] audit: type=1400 audit(1771043949.106:131): avc: denied { connect } for pid=5983 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 340.396559][ T5127] Bluetooth: hci0: command tx timeout [ 340.517552][ T5127] Bluetooth: hci3: command tx timeout [ 340.517579][ T5853] Bluetooth: hci2: command tx timeout [ 340.525190][ T5127] Bluetooth: hci4: command tx timeout [ 340.528646][ T5859] Bluetooth: hci1: command tx timeout [ 340.661509][ T5857] cm109 4-1:0.8: invalid payload size 64, expected 4 [ 340.671569][ T5857] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 340.740930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 340.751100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 340.792022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 340.830998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 341.031779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 341.175823][ T30] audit: type=1400 audit(1771043949.886:132): avc: denied { read write } for pid=6002 comm="syz.2.11" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 341.234713][ T30] audit: type=1400 audit(1771043949.886:133): avc: denied { open } for pid=6002 comm="syz.2.11" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 341.326983][ T30] audit: type=1400 audit(1771043949.936:134): avc: denied { append } for pid=6002 comm="syz.2.11" name="nbd2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 341.363254][ T5984] syz.1.6 (5984): drop_caches: 2 [ 341.369072][ T5985] veth1_to_bond: left allmulticast mode [ 341.387912][ T6003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.563823][ T30] audit: type=1400 audit(1771043950.176:135): avc: denied { nlmsg_write } for pid=5972 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 341.840979][ T5857] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 341.858839][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 341.884238][ T30] audit: type=1400 audit(1771043950.606:136): avc: denied { read } for pid=6011 comm="syz.0.14" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 342.165042][ T30] audit: type=1400 audit(1771043950.606:137): avc: denied { open } for pid=6011 comm="syz.0.14" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 342.261132][ T5857] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x41, changing to 0x1 [ 342.293561][ T5857] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.320935][ T30] audit: type=1400 audit(1771043950.916:138): avc: denied { read write } for pid=6011 comm="syz.0.14" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.365674][ T5857] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 342.365709][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 342.365736][ T5857] usb 5-1: Product: syz [ 342.365749][ T5857] usb 5-1: Manufacturer: syz [ 342.365763][ T5857] usb 5-1: SerialNumber: syz [ 342.385812][ T30] audit: type=1400 audit(1771043950.916:139): avc: denied { open } for pid=6011 comm="syz.0.14" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.385870][ T30] audit: type=1400 audit(1771043950.916:140): avc: denied { ioctl } for pid=6011 comm="syz.0.14" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.575709][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 342.577472][ T978] usb 4-1: USB disconnect, device number 2 [ 342.582958][ C0] ------------[ cut here ]------------ [ 342.583031][ C0] URB ffff8880748ebb00 submitted while active [ 342.583044][ C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x15fa/0x1910, CPU#0: syz.0.17/6019 [ 342.583087][ C0] Modules linked in: [ 342.583115][ C0] CPU: 0 UID: 0 PID: 6019 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 342.583140][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 342.583153][ C0] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 342.583181][ C0] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 0d 8d c1 fa 48 8d 3d 56 f0 9f 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 342.583201][ C0] RSP: 0018:ffffc90000007ab8 EFLAGS: 00010087 [ 342.583219][ C0] RAX: 0000000000003b3f RBX: ffff8880748ebb00 RCX: ffffc90002161000 [ 342.583234][ C0] RDX: 0000000000040000 RSI: ffff8880748ebb00 RDI: ffffffff90e576d0 [ 342.583248][ C0] RBP: ffff88806aa77858 R08: 0000000000000001 R09: 0000000000000000 [ 342.583260][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 342.583273][ C0] R13: ffff88806aa77857 R14: ffff888021aa43e0 R15: 000000000000000f [ 342.583286][ C0] FS: 00007fc8f62006c0(0000) GS:ffff88812438b000(0000) knlGS:0000000000000000 [ 342.583307][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.583321][ C0] CR2: 000000110c2b3ec6 CR3: 0000000034230000 CR4: 00000000003526f0 [ 342.583335][ C0] Call Trace: [ 342.583341][ C0] [ 342.583358][ C0] cm109_urb_irq_callback+0x479/0xa90 [ 342.583394][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 342.583421][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 342.583446][ C0] dummy_timer+0xd85/0x3670 [ 342.583475][ C0] ? do_raw_spin_lock+0x128/0x260 [ 342.583498][ C0] ? find_held_lock+0x2b/0x80 [ 342.583520][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 342.583543][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 342.583570][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 342.583597][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 342.583626][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 342.583649][ C0] ? mark_held_locks+0x40/0x70 [ 342.796362][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.802157][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 342.807085][ C0] __hrtimer_run_queues+0x50e/0x990 [ 342.812276][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 342.817978][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 342.824036][ C0] hrtimer_run_softirq+0x17d/0x350 [ 342.829125][ C0] handle_softirqs+0x1ea/0x910 [ 342.833862][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 342.839117][ C0] __irq_exit_rcu+0xef/0x150 [ 342.843675][ C0] irq_exit_rcu+0x9/0x30 [ 342.847886][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 342.853492][ C0] [ 342.856394][ C0] [ 342.859294][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.865243][ C0] RIP: 0010:lock_release+0x19e/0x2e0 [ 342.870502][ C0] Code: ff 65 0f c1 05 5b 13 26 12 83 f8 01 0f 85 f7 00 00 00 9c 58 f6 c4 02 0f 85 0c 01 00 00 41 f7 c6 00 02 00 00 0f 85 99 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad cb 25 12 0f 85 0f 01 00 00 48 83 c4 [ 342.890086][ C0] RSP: 0018:ffffc90004e36c20 EFLAGS: 00000206 [ 342.896122][ C0] RAX: 0000000000000046 RBX: ffffffff8e7e7620 RCX: ffffc90004e36c2c [ 342.904060][ C0] RDX: 0000000000000001 RSI: ffffffff8de459ae RDI: ffffffff8c1adaa0 [ 342.911998][ C0] RBP: ffffffff81b6e3be R08: 0000000000000001 R09: 0000000000000007 [ 342.919935][ C0] R10: 0000000000000200 R11: 000000000000b701 R12: ffff88802dc5c900 [ 342.927873][ C0] R13: ffffc90004e36d28 R14: 0000000000000202 R15: 0000000000000002 [ 342.935823][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 342.941004][ C0] unwind_next_frame+0x3c3/0x1ea0 [ 342.945998][ C0] ? __unwind_start+0x2fb/0x7f0 [ 342.950831][ C0] __unwind_start+0x3d1/0x7f0 [ 342.955479][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 342.961603][ C0] arch_stack_walk+0x73/0xf0 [ 342.966165][ C0] ? arch_stack_walk+0x73/0xf0 [ 342.970899][ C0] stack_trace_save+0x8e/0xc0 [ 342.975546][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 342.980890][ C0] save_stack+0x162/0x1e0 [ 342.985191][ C0] ? __pfx_save_stack+0x10/0x10 [ 342.990015][ C0] ? __lock_acquire+0x4a5/0x2630 [ 342.994927][ C0] __set_page_owner+0x8c/0x540 [ 342.999662][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 343.005008][ C0] ? bad_range+0x261/0x400 [ 343.009395][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 343.014568][ C0] post_alloc_hook+0x153/0x170 [ 343.019317][ C0] get_page_from_freelist+0x111d/0x3140 [ 343.024845][ C0] ? __pfx___might_resched+0x10/0x10 [ 343.030106][ C0] ? prepare_alloc_pages+0x16d/0x5f0 [ 343.035367][ C0] __alloc_frozen_pages_noprof+0x27d/0x2ae0 [ 343.041233][ C0] ? __lock_acquire+0x4a5/0x2630 [ 343.046146][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 343.052443][ C0] ? do_raw_spin_lock+0x128/0x260 [ 343.057444][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 343.062783][ C0] ? find_held_lock+0x2b/0x80 [ 343.067437][ C0] ? __lock_acquire+0x4a5/0x2630 [ 343.072346][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 343.078210][ C0] ? policy_nodemask+0xed/0x4f0 [ 343.083033][ C0] alloc_pages_mpol+0x1fb/0x550 [ 343.087855][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 343.093199][ C0] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 343.099064][ C0] folio_alloc_mpol_noprof+0x36/0x340 [ 343.104411][ C0] shmem_alloc_folio+0x135/0x160 [ 343.109331][ C0] shmem_alloc_and_add_folio+0x371/0xd40 [ 343.114936][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 343.121059][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 343.127010][ C0] shmem_get_folio_gfp+0x6ab/0x1900 [ 343.132187][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 343.137789][ C0] ? filemap_map_pages+0x9e0/0x2110 [ 343.142960][ C0] shmem_fault+0x1f9/0xa20 [ 343.147345][ C0] ? __lock_acquire+0x4a5/0x2630 [ 343.152254][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 343.157164][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 343.162597][ C0] __do_fault+0x10d/0x550 [ 343.166899][ C0] do_fault+0xaf9/0x1a00 [ 343.171117][ C0] __handle_mm_fault+0x180f/0x2b60 [ 343.176206][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 343.181649][ C0] ? pte_offset_map_lock+0x174/0x320 [ 343.186906][ C0] ? find_held_lock+0x2b/0x80 [ 343.191556][ C0] ? follow_page_pte+0x5b3/0x1400 [ 343.196553][ C0] handle_mm_fault+0x36d/0xa20 [ 343.201294][ C0] __get_user_pages+0xf9c/0x34d0 [ 343.206217][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 343.211572][ C0] populate_vma_page_range+0x267/0x3f0 [ 343.217005][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 343.222964][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 343.228742][ C0] ? do_mmap+0x93f/0x12f0 [ 343.233044][ C0] __mm_populate+0x107/0x3a0 [ 343.237607][ C0] ? __pfx___mm_populate+0x10/0x10 [ 343.242700][ C0] ? up_write+0x290/0x4f0 [ 343.247004][ C0] vm_mmap_pgoff+0x37f/0x470 [ 343.251580][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 343.256667][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 343.261576][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 343.266487][ C0] ksys_mmap_pgoff+0x7d/0x5b0 [ 343.271141][ C0] ? __task_pid_nr_ns+0x1f5/0x500 [ 343.276141][ C0] __x64_sys_mmap+0x125/0x190 [ 343.280794][ C0] do_syscall_64+0x106/0xf80 [ 343.285362][ C0] ? clear_bhb_loop+0x40/0x90 [ 343.290010][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.295873][ C0] RIP: 0033:0x7fc8f539bf79 [ 343.300266][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.319841][ C0] RSP: 002b:00007fc8f6200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 343.328220][ C0] RAX: ffffffffffffffda RBX: 00007fc8f5615fa0 RCX: 00007fc8f539bf79 [ 343.336158][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 343.344098][ C0] RBP: 00007fc8f54327e0 R08: ffffffffffffffff R09: 0000000000000000 [ 343.352034][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 343.359971][ C0] R13: 00007fc8f5616038 R14: 00007fc8f5615fa0 R15: 00007fff46857fc8 [ 343.367916][ C0] [ 343.370907][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.378155][ C0] CPU: 0 UID: 0 PID: 6019 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 343.387237][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 343.397258][ C0] Call Trace: [ 343.400505][ C0] [ 343.403318][ C0] dump_stack_lvl+0x100/0x190 [ 343.407971][ C0] vpanic+0x552/0x970 [ 343.411921][ C0] ? __pfx_vpanic+0x10/0x10 [ 343.416403][ C0] panic+0xd1/0xe0 [ 343.420092][ C0] ? __pfx_panic+0x10/0x10 [ 343.424480][ C0] check_panic_on_warn.cold+0x19/0x34 [ 343.429824][ C0] ? usb_submit_urb+0x15fa/0x1910 [ 343.434827][ C0] __warn.cold+0x191/0x2f8 [ 343.439213][ C0] __report_bug+0x296/0x3d0 [ 343.443686][ C0] ? usb_submit_urb+0x15fa/0x1910 [ 343.448682][ C0] ? __pfx___report_bug+0x10/0x10 [ 343.453676][ C0] ? register_lock_class+0x187/0x560 [ 343.458943][ C0] ? dev_printk_emit+0xd2/0x10d [ 343.463766][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 343.469024][ C0] report_bug_entry+0xe1/0x290 [ 343.473758][ C0] ? usb_submit_urb+0x15fd/0x1910 [ 343.478753][ C0] handle_bug+0x1c9/0x2a0 [ 343.483056][ C0] exc_invalid_op+0x17/0x50 [ 343.487532][ C0] asm_exc_invalid_op+0x1a/0x20 [ 343.492349][ C0] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 343.497953][ C0] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 0d 8d c1 fa 48 8d 3d 56 f0 9f 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 343.517528][ C0] RSP: 0018:ffffc90000007ab8 EFLAGS: 00010087 [ 343.523562][ C0] RAX: 0000000000003b3f RBX: ffff8880748ebb00 RCX: ffffc90002161000 [ 343.531501][ C0] RDX: 0000000000040000 RSI: ffff8880748ebb00 RDI: ffffffff90e576d0 [ 343.539440][ C0] RBP: ffff88806aa77858 R08: 0000000000000001 R09: 0000000000000000 [ 343.547379][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 343.555317][ C0] R13: ffff88806aa77857 R14: ffff888021aa43e0 R15: 000000000000000f [ 343.563270][ C0] ? usb_submit_urb+0x15f3/0x1910 [ 343.568270][ C0] cm109_urb_irq_callback+0x479/0xa90 [ 343.573619][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 343.578960][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 343.584130][ C0] dummy_timer+0xd85/0x3670 [ 343.588606][ C0] ? do_raw_spin_lock+0x128/0x260 [ 343.593599][ C0] ? find_held_lock+0x2b/0x80 [ 343.598243][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 343.603853][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 343.609457][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 343.615242][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 343.620848][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 343.625757][ C0] ? mark_held_locks+0x40/0x70 [ 343.630491][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 343.636273][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 343.641182][ C0] __hrtimer_run_queues+0x50e/0x990 [ 343.646357][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 343.652052][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 343.658103][ C0] hrtimer_run_softirq+0x17d/0x350 [ 343.663190][ C0] handle_softirqs+0x1ea/0x910 [ 343.667926][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 343.673182][ C0] __irq_exit_rcu+0xef/0x150 [ 343.677743][ C0] irq_exit_rcu+0x9/0x30 [ 343.681957][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 343.687559][ C0] [ 343.690461][ C0] [ 343.693362][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.699311][ C0] RIP: 0010:lock_release+0x19e/0x2e0 [ 343.704569][ C0] Code: ff 65 0f c1 05 5b 13 26 12 83 f8 01 0f 85 f7 00 00 00 9c 58 f6 c4 02 0f 85 0c 01 00 00 41 f7 c6 00 02 00 00 0f 85 99 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad cb 25 12 0f 85 0f 01 00 00 48 83 c4 [ 343.724142][ C0] RSP: 0018:ffffc90004e36c20 EFLAGS: 00000206 [ 343.730184][ C0] RAX: 0000000000000046 RBX: ffffffff8e7e7620 RCX: ffffc90004e36c2c [ 343.738122][ C0] RDX: 0000000000000001 RSI: ffffffff8de459ae RDI: ffffffff8c1adaa0 [ 343.746060][ C0] RBP: ffffffff81b6e3be R08: 0000000000000001 R09: 0000000000000007 [ 343.754519][ C0] R10: 0000000000000200 R11: 000000000000b701 R12: ffff88802dc5c900 [ 343.762456][ C0] R13: ffffc90004e36d28 R14: 0000000000000202 R15: 0000000000000002 [ 343.770395][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 343.775568][ C0] unwind_next_frame+0x3c3/0x1ea0 [ 343.780560][ C0] ? __unwind_start+0x2fb/0x7f0 [ 343.785380][ C0] __unwind_start+0x3d1/0x7f0 [ 343.790027][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.796149][ C0] arch_stack_walk+0x73/0xf0 [ 343.800721][ C0] ? arch_stack_walk+0x73/0xf0 [ 343.805464][ C0] stack_trace_save+0x8e/0xc0 [ 343.810110][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 343.815456][ C0] save_stack+0x162/0x1e0 [ 343.819756][ C0] ? __pfx_save_stack+0x10/0x10 [ 343.824580][ C0] ? __lock_acquire+0x4a5/0x2630 [ 343.829491][ C0] __set_page_owner+0x8c/0x540 [ 343.834226][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 343.839569][ C0] ? bad_range+0x261/0x400 [ 343.843958][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 343.849140][ C0] post_alloc_hook+0x153/0x170 [ 343.853890][ C0] get_page_from_freelist+0x111d/0x3140 [ 343.859409][ C0] ? __pfx___might_resched+0x10/0x10 [ 343.864670][ C0] ? prepare_alloc_pages+0x16d/0x5f0 [ 343.869932][ C0] __alloc_frozen_pages_noprof+0x27d/0x2ae0 [ 343.875798][ C0] ? __lock_acquire+0x4a5/0x2630 [ 343.880714][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 343.887011][ C0] ? do_raw_spin_lock+0x128/0x260 [ 343.892004][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 343.897355][ C0] ? find_held_lock+0x2b/0x80 [ 343.902004][ C0] ? __lock_acquire+0x4a5/0x2630 [ 343.906916][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 343.912779][ C0] ? policy_nodemask+0xed/0x4f0 [ 343.917609][ C0] alloc_pages_mpol+0x1fb/0x550 [ 343.922432][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 343.927776][ C0] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 343.933643][ C0] folio_alloc_mpol_noprof+0x36/0x340 [ 343.938989][ C0] shmem_alloc_folio+0x135/0x160 [ 343.943904][ C0] shmem_alloc_and_add_folio+0x371/0xd40 [ 343.949509][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 343.955633][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 343.961585][ C0] shmem_get_folio_gfp+0x6ab/0x1900 [ 343.966755][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 343.972357][ C0] ? filemap_map_pages+0x9e0/0x2110 [ 343.977534][ C0] shmem_fault+0x1f9/0xa20 [ 343.981919][ C0] ? __lock_acquire+0x4a5/0x2630 [ 343.986828][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 343.991738][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 343.997180][ C0] __do_fault+0x10d/0x550 [ 344.001483][ C0] do_fault+0xaf9/0x1a00 [ 344.005699][ C0] __handle_mm_fault+0x180f/0x2b60 [ 344.010790][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 344.016229][ C0] ? pte_offset_map_lock+0x174/0x320 [ 344.021486][ C0] ? find_held_lock+0x2b/0x80 [ 344.026133][ C0] ? follow_page_pte+0x5b3/0x1400 [ 344.031130][ C0] handle_mm_fault+0x36d/0xa20 [ 344.035871][ C0] __get_user_pages+0xf9c/0x34d0 [ 344.040787][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 344.046138][ C0] populate_vma_page_range+0x267/0x3f0 [ 344.051571][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 344.057523][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 344.063301][ C0] ? do_mmap+0x93f/0x12f0 [ 344.067612][ C0] __mm_populate+0x107/0x3a0 [ 344.072175][ C0] ? __pfx___mm_populate+0x10/0x10 [ 344.077259][ C0] ? up_write+0x290/0x4f0 [ 344.081567][ C0] vm_mmap_pgoff+0x37f/0x470 [ 344.086138][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 344.091224][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 344.096139][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 344.101050][ C0] ksys_mmap_pgoff+0x7d/0x5b0 [ 344.105699][ C0] ? __task_pid_nr_ns+0x1f5/0x500 [ 344.110696][ C0] __x64_sys_mmap+0x125/0x190 [ 344.115348][ C0] do_syscall_64+0x106/0xf80 [ 344.119909][ C0] ? clear_bhb_loop+0x40/0x90 [ 344.124555][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.130417][ C0] RIP: 0033:0x7fc8f539bf79 [ 344.134803][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.154377][ C0] RSP: 002b:00007fc8f6200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 344.162755][ C0] RAX: ffffffffffffffda RBX: 00007fc8f5615fa0 RCX: 00007fc8f539bf79 [ 344.170694][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 344.178633][ C0] RBP: 00007fc8f54327e0 R08: ffffffffffffffff R09: 0000000000000000 [ 344.186570][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 344.194508][ C0] R13: 00007fc8f5616038 R14: 00007fc8f5615fa0 R15: 00007fff46857fc8 [ 344.202456][ C0] [ 345.271481][ C0] Shutting down cpus with NMI [ 345.276446][ C0] Kernel Offset: disabled [ 345.280761][ C0] Rebooting in 86400 seconds..