last executing test programs: 25.046763228s ago: executing program 1 (id=142): io_submit(0x0, 0x0, &(0x7f0000000800)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf254f00000008000300", @ANYRES32=r0, @ANYBLOB="1d007a80050004", @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRES64=r4, @ANYRES8=r5, @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x9, 0x1, 0xa, 0x10}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711013000000000084000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 22.95133767s ago: executing program 1 (id=146): syz_open_dev$sg(0x0, 0x4, 0x2000) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000003440)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff24) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x6, 0x5, 0xffffffff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000200)=0x13) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_pid(r4, &(0x7f0000003400), 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000b80)={{0x0, 0x13, 0x7, 0x10000, 0x774e0, 0x0, 0xd8d, 0x6, 0x400, 0x81, 0x1, 0x7434, 0x9, 0x0, 0x8}}) prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000140)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x3) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000001b80)=0x4, 0x4) bind$inet(r2, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCSETS(0xffffffffffffffff, 0x400455cb, &(0x7f0000001c00)={0x20001000, 0x1000cf3, 0x5, 0x6, 0x17, "10656c2fd9b21116c0d5b7ebc779515b09ae5c"}) pipe(&(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) 21.523018678s ago: executing program 3 (id=149): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7cca39bb1e32b3e5, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x8, 0xfffffffe, {0x1e}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26ff", 0x30) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)=""/103, 0x67}], 0x1}, 0x40010022) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000a, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) io_pgetevents(0x0, 0x3, 0x80000000000000b, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 20.221821929s ago: executing program 2 (id=154): r0 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00\x00\x00\x00\n', &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24044000}, 0x48015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000100)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) getitimer(0x1, &(0x7f0000000040)) 12.554989349s ago: executing program 4 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x38, 0x18, 0x1, 0x3, 0x25dedbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (rerun: 32) 12.193462465s ago: executing program 4 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r0, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0xfffffff8}, 0xc) keyctl$reject(0x13, 0x0, 0x9, 0x202, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'geneve0\x00'}}) r3 = syz_io_uring_setup(0x1b51, 0x0, &(0x7f0000000400), 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000002dc0)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000004c0)="2a07121dd9f2232b12224e3546afdae4324ad705cd4c17858d110895859c6394d55e5e2406ce6b102f9b983d570b1cee137069b206899c71bed4c9499f443619a3008b458b0610b10add22c2d5aa3c595c1dbfcf6dcb8cc5baba0578c6f9e544c5186c13084f0cefdce27115c315df6f18087c2ec46805c021be72584aa286cf3dcc49bdfc10811b84ce8abbcfa4158cd36153e5bb8bd4816731d5f2f19fb0ea35d60caeec8fc7981a0f0c331177e1e85974995092409d0507a62eb3af926f900c482a5640a1f7b927ced65e6e61c7fee6f7087f2bf601e95d118a8a9916ac70d7370befdfe8bb5e453c5c5d64ae87d2631d918849", 0xf5}, {&(0x7f00000006c0)="e5243ef16592f8f485a1de50ade233a0fdc774cb013f7f648a16f427b586411a3926c3158c16f754189c652001aa1970dc59019bbed190d117c288a815c824e8bf0ed00c4f252bf7d6657aa10ecac56ddc958ca4e1f11c6d1e396234ba269ccdd51bf32c84d9656204fc7aca4921d561d17472710f414c74585ca98c64ae2faaadf6fd4de8e8d1c47d9fc148e290ef2c67f4af2e47f46e3bb4fc65ac1a246314609d46049c013f82223147fd089587644ce5ad073ac7bd02b1cb611666cfb7975df481c0df5b42", 0xc7}, {&(0x7f0000000080)="53c9a48d63161a07c94d80a95fdca50833061baf3f8d01f83567fd", 0x1b}, {&(0x7f0000000340)="aa6314ae8e46ccd298fc7d6193704135bdf7ece601af459a7aafdeb3e0", 0x1d}], 0x4, 0x0, 0x0, 0x20000810}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f00000007c0)="68eb9d5b07d01aee42e314b3586c1c36552a98d4f510cc15da0549909c5205f19faddb8c0e1a86e314890c9f7847e59484cb0fe6477531573b27de51aef024513adc5ebe97acdc01481661a76372da0af80d72d521d3b780af5acfbf5f464533545905d6e434e751c7d17e02ae00313e4e737d0e113c3f42f0b22bd66ef1825f1baed95b9ca0e101b4c994", 0x8b}, {&(0x7f00000003c0)}, {&(0x7f0000000880)="011f0b821b1ddf696573be947ace0a44d5beca5b98ef491732a94d85d58c5f14ef06799da8eec530169ccbc45c8bb4040b138da37ffe49cf3a62c834046def6e00435b770bcaa5d975c94760aa87e2f02bc13642c1ab7dca544a2f26fdfb20bcb5bf5599129472c101a450db5f42ea97bdb02c8f", 0x74}, {&(0x7f0000000900)="c1a64e582c623ee4257e980e323fdb09cd2a9e73f994c87a9b04b26a3712a1555e47551075c191f75632a6d012b0f8d790f6bdac9d3fbcb196c34a73715e69590cc268f98ad4b33add50d4b3d73412fc03f230d183bc7475c8", 0x59}, {&(0x7f0000002ac0)="d66f16741f2f97df7fa90573e8b6c5b66f5eb8aa51a5e4e5feb6f366ef53e3208a4be4961043f0b90191e7f11ddaf1cda8d15107d7b08f11e0d1acc3460d8519a2369bfb751ec3fdfd6e5591e01f3806d60fe659b4b4fd23bb1f5304ab115f99f23253f7edc6a0f2b30d61b3c6d0386285f64b0dcb6ba4d2499c427632", 0x7d}], 0x5, &(0x7f0000000640), 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000980)="827984fcac4aaf88609296ebdf448cd520408feb2d4b9e73fc174ef8ab89e5afe4f5143b5f991bac4bd69ff62bb791c36db54d9363dec4aa4318951e6b8a781cf22da68348fa59382ba822d5b57985baa6085e422d9a0d9be05479b12b61a29051054b95afd5c6fc5164c2c6141ab2752935bd450d436de00ca82d61a4552b47c14b6d51a95d15752157b861492ec749a166159bfaa1469a8d71413251d494a9e8988dced7f23815e7077321f029df9f7796c0cdcc292bc10a7c7039eda8737c5be8edff7c644ab5028867addde3ceb4471abe703a2e31588527aa4e182969189ac36b76d24bf319a67b91b9ace4601b257babdc83f12354e017a5883da0f3c9a0609d9354b9f93564df081b0a845eb6ff5e059317332dc3116c310e33c4d811a12f26d7605ea2da9bdb68fde9d0da1f8c42b4ace83c9b63c3ac7d026905c189d0e08b6f671a5f730412d7f464b1bdcc76f7038ab72f4c2109aaaad0d6e6b8d42e2417707e6ddcfe4e0c2be7a3adc1be3f2a61e83691d67bc5e6bf05e665782676494040602a22d7457f67c1db735f701d8015c9e999a62ca8cba53d36d58ddb39a8dfb244e96776b02a3c058fdd8898b5fb25314dd53b075049cfa8255d194e9fbaf237d996cf0537d4c4d0e3758b63a71d1e2fc128e2140a4db78eaad9048b6a06705882cfa0f35a2a7885ae5a1401d64bf0fa9a39a5b4c0f5d3bd1bebc88699be89de1b5ffbf07f7e8b9f1c051a8ecd52cbd4a6f50f587dbaef7ddc9c7cb5e8a52f18430f0bbdbacf19ce4eef766fd4eba29835c9b7af9c03d4f3d29c0ab76f60f68be0fa389e56f37d01bedd7b89526f247853c27af5ec84ca57627a034046faf4b0d567b8adb3a096891563bcd814be0f44bb1de1d8159d04d770885da5b35366c181523e215264dceabc7728e5dcc4dda41f24d466f0da9dd24c5390529dc3035ec443d1d2d4caa15bb7bc9034e497ea0c4c518447cb2adb6766316dd99e0191d50614d18d6b1210e3c2d7d342835d00ff7b4777dbad643569260ebc4cae156ec88dd69e036bc2ae00bc7222a5f17fa26afac8692e649c5cc9594304fc996419c7edd24f8dbb3417c4e6fa8a3f1c5a8b56074721066defb878488f827676bb514839f0ab12e0e467cd61ab51c3d0a7156a46746890e5651d31f7b8081032406275e428e25e2a2ebc81d833b730321a3c7a7d034f18b6fc7bbaa1b1a71beaf00278324cf7dfd5f4a0d5dcc131039e4c8e0ce3022bca19e5afc94eed745d073b956fa25ef77cb37e9beea74ba7eae767ff4ffd1cb501cdd06645f07d01f9c5673344be7f98d978c7cf01840920064aa14ebb8d1064db7c7f9b78427090bf59fb07697a2850d353f6117f1527f0ac04ffe9c867dc9097732a18f6493bfe498cc49e60299e1ebc5b142611dc867fd9cdc4de5862340247cf1100e5d64a4e5c4ed031e653613e1a58a1a1eba6e2dcb9f8bf95679c29d99fd78bdc3c22ff492afa0e9264edd74c58da31c09bedd3f32a9395ea12711b04b65f977312a66536bbc940009839e667c3ba5deacc8c0cb9de5c233afcaf89dca253feebd86ca0b951eebcf958d979f4ce97419b98c0bc3f756db5c5a86e41a47499c4727c71587619a9ce64d11befbfe69933b3fdb9c45d4849aad3cb395a0d938088726d8ab202174bdef3e04a36ba0cf44ad125226b065468eadf86063875845e431f327c884a66003f51232245be187b1309b0dbfe48a47d683fc3865b01667058cd820873cca3ff6bc06a1aa5fde2fc4f15d46e7220da0e6a68bd85fe040e97f9e772646cd81c9dd022a39b3406d711706cb7a2677e32f339dd7d38d8a909443409081d14bc7aba89959c7c6eb645b2e76f9f14f542cc87fa0d0dab64b2fabd0f9ae7aaaa20a13f015e78e90f1f70790e982f84c90a283b6caafa60a214cc5f1727440f9009534376ea27cffe1798d66ac2d2d3f6dfd6ab7a12019ffb7f62be4fbae3284332b630bffefe981a5384590092d328c31b46c1bf38aa46847fa54bb664abb5c1d59088ab20b8f31bb937c13d094aa041e33532885871e4994e7108700573d7ca87f1446b6211d3fe184a79fe18fbf3ad8ce9b38f4b35264d0fd8fd2add589e505b50df13d8e2217dd7b5e40b4675ceaf5db40bffbbbe87d0a6cbb263950651706ce64141ae273d1dd87cd667fb6c7c857222bdec8bafb4000f8357ade9af273226d72dfba257a689acfdff56b31f300dc0c17aa351fc780d052970cadeb9da133fcf91265a37abca210d0fe420776d2a84ed651e59c0acec56ee8279f46e79d22559f96c53fe5c9fbc6d6e0003ce27eb490112d8de8751a99eee24b3a7e4d21c21dae43dde00d8ec545a937feba8b71b6dc54c1bd26f1a9dd0b31ccc1339385f7ee586c1577191ae473a023583f0b76fa031b3c3a8cf42d0be0c35ad1575ea5a93d2f12be032ebd868e6b2a309c630173ff4a70a14d1537772b10feb7b8a536ac735b717606724e533a80bb128961cfb98a4fbb3de113d2f11573d5779d127d0c7a893ffdf05f441dc9b168489b77158c4d5d021c8b560b2a136c0f59977f5c6ec73620f10aef572188a96605ec4ad70d7a3406dbe28b3a7ef1d56cdd8bc92fdb1c02c3b0e6ca176f00279869e4d2bfbed4d39fae4df36b0d9b806f75685e4454621bd88c1f5f4b2c4685fee3096d5f8051992d6ea8bd705a901a1770920e2e366048ba7745af607ef50d59352bcd915e9a8d4f24b8a648be611692e669652d7bdacc7ab93bb7f390d49c2b4fc98034387b95131bbb814a57aa7512a7a9281c0c2e4a89eeb78cd59699577f880e86cca303e4c042c802d6a3a26366d87320a63ce6fb4a508adeba6fcccb2a1bfa34d6eb188f4efc2a7eba38a7e5f705cde58f28b21501b6cd12df666d39546a11a130b06f930eb71c49f43b3e40c1cf76082f849094033339bb478fc1b34d8f18d2581af9f03ad4436fb044a16b574b8fc1409c1b7b61950e0a68a5cd3289d42a76cf0b1bdbfe7f9953c4841a3650e8cf0bd98e12f8fe82121fd0f2daf1f0163d30b5668040d493875f504361b16489d57c9fbd03314342e90148303a9575596392ea3a5e0a8dda4ed68fc30601bb44d2dd018e57acf2e2af7558598f6f58aa6d3c0d6c423cb216c3fa7d5288fc2b622766a299c8026a4301758d113e9a754f8a27dcbc1d5bd86263c216c478d491fdc53058da4147c2b04046c81c4cea521153e4e77291b8a8614224abb5a1898c5daf802cb54384a4b60535533de8db4e261134df9243fe5f8ebaea2ec039c81aabc8c74a6ddf724111d5c9d0729658816e22878c1edf01355048613262a0b07af6244f8edb667b76414681b2fad55c7de0ad5f8adaebc6a942b8e0fb8e29a2aa26e6a77339844bd9fededd718e45727eec6fe49826db251579e82d39f45eda5b979599af7caca131df72de70e8fcd7b740d4bc8a09f10a0d35de13703a05a7630112936e063d11cb649456358fea9e7ba017828bd661e74b30e61a72e3d9fed4c108a1907f882ab8c1660f26b3e877ef34df86e70422e571030071d01d2b460b175db85e3cf4d7d32e01c4411bc1d219bdcb568ee367907c7b6688f53932efd0bb867160b24f0c61e42935c58051ccc955dde3b8a85a669060474f9d0da30b72f74e2d410ddccddd171b9070b827b9401932957a4e529fc51914ac7d72d5fd31048ec8b4730a1961c02ef2d0ff3dcadc653b0b3a976aa56790bff0ca6ad0cc523bc63c884cffed8d6665985768b78e1ccbc81757e2cc9302e648c308afdf0731f4f48f7928caee584f352fbd0ba7ac596469fda4a97cd775753f33231244441347122548957552af1b4036c94d7c9f7b9d77d19e89d23b9154c858ea5fb63b873aabf1109edf50796d40c70d4de5da151201be1810b06cce3020c64298754d01c4b16f43ea3576385a1458b21aa290af7eaa47e2ac4772a211f49187571d8d26ec8acce4d6805a732be0bed284988b9a3df783eda2eef12325eea6984e8c7d3ef0bc807d80aab4b991e5c450cb98285b0d1f2ad96e59a52030d92254f99cb9b715498b6fcb961540056fecc8ca6d381e84e9664b462bb28aa3f4dab88278ba187be567c08e1c0f6b6cd6032ea3462ef26370a5decc3b5f7c485084588130c229d583028527551da4d8b01935af085065647c709e5839f03e90b067925dcc12a28db3e8c91b14e318cbf6f22df87ec224c0969d00346c2ea5580c4bb4f2e026c66234fb0b12d5bc3a703239e72fd22517e72f3417ebb3e4ca619a8abb6c184171baaba13ac4c1e24c410e91bf3f602c8de6813b6934f442bc067d8492c7b215a1b202085e2fce02e736783a1171f5892d3e7f06a346cddb8b693653a2bc836d5c92ef880375dda7c28935156a70c67ba20e87938490762bc7ba13b5d18c11a33fb8b57d67ce362cc332052a3e16dbb677727bd86ed75c1290a68e6515fbaa4de3a5065a288a529da6a3e9ba6b0a4f421ff66fae001ae4ac6fa2bc7310d1aec9264080b1a3bb9a186687d8d14c804a80eb5c7b0d50d7c71a26c9852d8c1bac3954f43d20e3a8719bc06d939156c0189877dd88fe8023c07c83d8bcb16d0ec4c10dfafd1eea0021f9951ae053b47c70fce28e898cddd7b5d89273334ae9b627141a0c66a86cd2da0c33ff914786530871a5dbb8505aa79c47578b7431b403837363901bd9c0ee97935dfc4d46d20f573da319939082206b6f67af9f5289c7ad7cc3d93f8fa572a74748dc2043a18896a88f5e50f798b3d2abd7e35f87addfcdd830536dcb8dba16ae85dc12c5d0841cb111d9f09829af40e83ec7c38c715ba3f2a3023f50beff31df3e716560f9ae87348bdb38e3fd078b75c3854a8208e7877e42cc76dd2ebadf9e4e45771d3eb8f9f9c6356b6a2ffd50ca594fba2dcae939f19634e7eac8e6fd072f96a65de7f943cace4e5a78771f6afc4fb5385c13df8a31146d45497c9c332be959ebeb64b33db7347e90dbeb255fae31e5af48d4e54eaad275910eb432f56ab1428c68e9e2169c78968d0500a6d308acf46723954275ab0f69c4716b6f8ab5035e7da22a22c5b8340a3d1c0e3d0d3ceb5a47f239c2261d9fe8049eb367dc95df99e976725bfcc553f31d577b696761a8d356ebafb9ca08632b0f8bbc6aa61eece6750ec70e0c5bbec19ed6f071fcc2b4f360a58d82a9ce6313e24eb7e7b2282ea6f1e50e66d4c1312218e2a77cdacd4874d5082d8d1bd3d76b633c69daaf4e0ef89ab4f2cf53398cca600b6d94d69758520b5899405c29a27ba2c328562a240c5e69f84496afa164020d46b224f98dbdbdfbbc499247376fc4987302c9ad01a0397fa3565321aa37740b4564514892dea5ccfcbd137c53f7c5303487753dc6260ab6ebc91f762a075d72e1e67b5d1c2446701884962b6b80b5b770ad7242a3763085cdf3bdeafd88886854a52bec0e9dc01feab0eef3c3a33129171c20269247dbbdfc7ebacf08ac2974e27669307f1912e4c33ca96016d1caab8a3a4565ab613a1aed3ea83b7fe41b8b6a2358a1fd9a611839024a716febca9b6fb588055acef24a42a4e4c05cd7f6a4747f235719d7be098bbcabd3a8aa60a1be554ec4139968b88680c425ab323852fbe03c7687215e804884c097939cea85edb584435c736b17ebdcb6016e03a303cc72793e58fbdfeaeb43e89942b3a362bc45f3f4380f131ee56ac0d6c31298b8958a8e3f7096fabb788aedd16466be413a0033ef86e845b30ba5b70d3289632f6031e84f9705e02881d503010c5eef383bc8d3827", 0x1000}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="515dd7d71314cfce95af824a17179b748f31f81f47a269353ef9a4f13ddccf5b7347f504fd193edbaba416d0c7dc008ab9896bb5c0533157d00f0e5028cef46841640a4d94e05d29fc90c5ecc89af0e949b03ccafafbc966449cc9c657be5df1b0a88790ae4b53a03375d4f05cc556e177d9c638bda83fcb82cd069f66a400598a0775aeffdfa6f25a83a8b432abf4f869e25e08c23b242fc477a0d75fc370870860e3a0aea193b62c0504f28157308b28f876ab6ad7f7a2f87042ba60c7591f8e89c5611987732636efcb7ec6d3a4b8d152b457216b78543a4aff413843915c8de11930ac4d9b76b9151daf1c3a6f7b7eeba0b50c314788fd", 0xf9}], 0x3, &(0x7f0000002b40)=[@rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r8, r7, 0xffffffffffffffff, r7, r8, r7, r2, r8]}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, r8]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r5, r4, r3, r3, r0, r7]}}, @rights={{0x24, 0x1, 0x1, [r3, r0, r3, r7, 0xffffffffffffffff]}}], 0xd8, 0x20000001}}, {{&(0x7f0000002c40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002cc0)="f80acaa029954cbf1512109188cf58b5f92f6e962392f561583891be08f4b30925d81a4470b813129a05024e9d6e51fe0ce9ac343790c70f15f682688a8663944470fe68ab58f7d2159fdc91eadc12cf10f7b8dd6750a6a8dd565d348a7e8f3c0f3a1bc1144df9d553", 0x69}], 0x1, &(0x7f0000002d80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x20040000}}], 0x4, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0xfffd, @empty}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r9, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket(0x1d, 0x2, 0x6) 11.912035475s ago: executing program 4 (id=158): r0 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00\x00\x00\x00\n', &(0x7f0000000040), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24044000}, 0x48015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(r3, &(0x7f0000000100)='net/ipv6_route\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) getitimer(0x1, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r8, &(0x7f0000000100), &(0x7f0000000140)=@udp=r9, 0x1}, 0x20) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x100, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close_range(r7, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 11.499777295s ago: executing program 1 (id=159): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0xd, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write$P9_RRENAME(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xdb86}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, r11, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x1b}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x12}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) socket$kcm(0x10, 0x2, 0x4) 11.495792611s ago: executing program 3 (id=160): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0xd, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write$P9_RRENAME(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xdb86}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, r11, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x1b}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x12}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) socket$kcm(0x10, 0x2, 0x4) 11.342661373s ago: executing program 2 (id=161): socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000001200090002000000", 0x24) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {r3, r4+60000000}}, &(0x7f0000000400)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) close(r5) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0xfffffffffffffeab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.877894197s ago: executing program 4 (id=162): r0 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(r3, &(0x7f0000000100)='net/ipv6_route\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) getitimer(0x1, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=@udp=r8, 0x1}, 0x20) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x100, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close_range(r7, 0xffffffffffffffff, 0x0) 8.552097495s ago: executing program 0 (id=168): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1, 0x0, 0x41}}], 0x1, 0x0, 0x0) 7.784096954s ago: executing program 2 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, 0x0) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x10, 0x0, "a19cfea07047531f53ed06b6a743927d636df5b241188c1eda0600168f044771daf0ad175e67a7bd64ee98285fa167a1bf941c11c8c32e7c9942e0ad8e6b53b43599883e5d4af78429a887bba2d824b9"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) (async) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x208000, 0x0) (async) unshare(0x42000000) 7.78366305s ago: executing program 0 (id=170): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x4, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x641d55be9194a25c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}}, 0x24004000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.608516998s ago: executing program 4 (id=171): r0 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00\x00\x00\x00\n', &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24044000}, 0x48015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000100)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) getitimer(0x1, &(0x7f0000000040)) 7.059376474s ago: executing program 0 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @loopback}], 0x10) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x77, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x82000, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f0000000440)=""/16, 0x10}, {&(0x7f0000000740)=""/220, 0xdc}], 0x4, &(0x7f0000000d40)=""/168, 0xa8}, 0x40002000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) sendto$inet(r0, &(0x7f0000000000)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x57, 0xa, 0x1, "3205c5460400000000000000022c1e04f4bf40070700000200"}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x4c021, &(0x7f0000000000)='\x80c\xd9B\t\x92\xf5\x89iH(\x1d\x04\xf3\x05\x16&o,e\t\xad\x87v\x16\xd9\xa4c\x7f\x1a\x10E\x9a\xd7\xfdD\xbby\xc0\xb0\'}\xe15\xadw\xb9f\x1b*\xc9\xeb\x9a\x98m4\xab.D\xc8\xdb.\x04s\xa0\xf8Us\x13\x17\xdb\x02,\xb6\xbb\xa6j\x8a\x84R\xc8 \x92\x82\x90\x8f\x84\x8b\xfd\xc4\xbaYi\xbcY\xdaT\xb7\x8a\xfcWDW6\x02<\xfd\xc2\x05\x19\x16\xae5\x02\x04V\xb7\xc9\xfe\x17\x98\xcb\xab\xec\x05<\xc6%\x17A0\xe4;\\\x067nx\xfa\xff\xa0;7\x9f\x90\xdf\xc2\x13\xa5\x10 \xf7\x14\x06\f|\xcdo\xa2\xe8\x00'/170) 6.96662896s ago: executing program 1 (id=173): r0 = socket(0x22, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x4020940d, &(0x7f0000000000)={'wlan0\x00'}) listen(0xffffffffffffffff, 0x80080400) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) setsockopt$inet_opts(r0, 0x0, 0x14, &(0x7f0000000300), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) 6.89987392s ago: executing program 3 (id=174): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000000206010800000000000000000000000914000780080011400000000005001500227facd5050005000a000000050001000700000005000400000000000900020073797a320000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x4000008}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) socket$isdn(0x22, 0x2, 0x25) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='rcu_stall_warning\x00'}, 0x18) rt_sigpending(0x0, 0x1000000) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) accept$inet6(r1, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRES64=r4], 0x0, 0xfffffffffffffd9f, 0x0, 0x1, 0x2002, 0x0, @void, @value}, 0x28) 5.655784261s ago: executing program 3 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/sctp\x00') read$nci(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000000)=ANY=[@ANYRES64=r1]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r2, 0x400455cb, 0x6) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x5245, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x1, 0x2, 0x1, 0xf, 0x0, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x4}]}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = dup3(r8, r9, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005d80), r9) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000067000000080001"], 0x30}}, 0x40004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.601775341s ago: executing program 0 (id=176): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1e44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000108000905810320000000000904010000020d00000904010102020d0000090582020004fefc000905030200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x40, {0x26, 0x10, 0x10, 0x10, 0xe, 0x10, 0x8f, 0x1ff, 0x10, 0x0, 0xa, 0x2010}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x20, 0x31, 0x6c, {0x6c, 0x22, "5d2caf15ff54ebb3657b222b147541d05b6cb4a21e392167e556ec00d1fcf0a90cfd063a84eda3f456dc6c090fb0ccff4708b3ec64517a151eb741f6aa084a9ba3b1828c0dd7a53e3d8df202e3b356fd6e3eb871bb54e93291944d8fe34d951c4405c42a28ed155fc6c2"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x20, 0x30, 0x53, "1569fe45ac1e77a1f5fd092ba274978eb14dcc9127c912302c36361c57272657915745ef558644f06027691c5429f4a9ca040409bd475f8511ec59d1459961a6e6370cbedcce35955a47ec1cb55e35af915600"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x8001, 0xd4, 0x6, 0x7, 0x2, 0xfffa, 0x3, 0x7, 0x5, 0x7ff, 0xf7f, 0x6}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0xa9}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x2a0}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)) r5 = openat$kvm(0xffffff9c, &(0x7f0000002140), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pipe2$9p(0x0, 0x80) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x7}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8, &(0x7f0000000000)="d8"}, 0x20) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000300)) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r11 = dup(r10) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000000)={0x0, r11}) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5.389834681s ago: executing program 1 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x1, &(0x7f0000000080)={0x3, 0x80000001}) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000180)="a3", 0xfffff, 0xfffffffffffffffc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}}], 0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x40, 0x7, 0x81, 0x200, 0x8000000000000000, 0x7291, 0x9, 0xffffff00}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, 0x0) 3.080039393s ago: executing program 1 (id=178): socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000001200090002000000", 0x24) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {r3, r4+60000000}}, &(0x7f0000000400)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) close(r5) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0xfffffffffffffeab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.939156946s ago: executing program 3 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000001f000b00000000000000000008000000040003000c000180060000008848000008000200", @ANYRES32, @ANYBLOB="13927659e422f515b3cb3f49a154358e265f2c9c"], 0x2c}}, 0x1) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20048081}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x100) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x0, 0x0, 0x4001, 0x6, 0x0, 0x4, 0x0, 0x1}}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES8=r5, @ANYBLOB="499d12df929b61283d2dfe7eded859"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xbfff05d32eeb803a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.539449461s ago: executing program 0 (id=180): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) (fail_nth: 6) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) 291.963943ms ago: executing program 0 (id=181): r0 = creat(0x0, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000300)=0xd0) r4 = semget$private(0x0, 0x207, 0x53) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r1, 0x5}}, 0x10) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000040)=""/119) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x300}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r7, &(0x7f0000000300), 0x6) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa08, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 0s ago: executing program 3 (id=182): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x81) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000080)={0x18, 0x0, 0x0, 0xff1f000100000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000003c0)={0x48}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r4, &(0x7f0000001f40)=""/72, 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='efivarfs\x00', 0x12a89a, &(0x7f0000000300)='/dev/dri/card#\x00') r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r7) kernel console output (not intermixed with test programs): =process permissive=1 [ 50.023673][ T30] audit: type=1400 audit(1748087754.474:65): avc: denied { siginh } for pid=5660 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 57.398971][ T30] audit: type=1400 audit(1748087761.944:66): avc: denied { write } for pid=5800 comm="sh" path="pipe:[3656]" dev="pipefs" ino=3656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 59.267208][ T30] audit: type=1400 audit(1748087763.814:67): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.273989][ T5800] cgroup: Unknown subsys name 'net' [ 59.290004][ T30] audit: type=1400 audit(1748087763.814:68): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.317425][ T30] audit: type=1400 audit(1748087763.854:69): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.474616][ T5800] cgroup: Unknown subsys name 'cpuset' [ 59.482975][ T5800] cgroup: Unknown subsys name 'rlimit' [ 59.598057][ T30] audit: type=1400 audit(1748087764.144:70): avc: denied { setattr } for pid=5800 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.630232][ T30] audit: type=1400 audit(1748087764.144:71): avc: denied { create } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.651162][ T30] audit: type=1400 audit(1748087764.144:72): avc: denied { write } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.673601][ T30] audit: type=1400 audit(1748087764.144:73): avc: denied { read } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.695061][ T30] audit: type=1400 audit(1748087764.154:74): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.710639][ T5802] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.720810][ T30] audit: type=1400 audit(1748087764.154:75): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.639562][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.691534][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 62.691551][ T30] audit: type=1400 audit(1748087767.234:82): avc: denied { create } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.766998][ T30] audit: type=1400 audit(1748087767.234:83): avc: denied { read write } for pid=5810 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.791054][ T30] audit: type=1400 audit(1748087767.234:84): avc: denied { open } for pid=5810 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.832327][ T30] audit: type=1400 audit(1748087767.284:85): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="socket:[4593]" dev="sockfs" ino=4593 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.839494][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.875287][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.883043][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.890895][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.899292][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.907110][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.914878][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.919631][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.922398][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.937660][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.945603][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.950357][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.953119][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.968597][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.979872][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.987493][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.995446][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.997349][ T30] audit: type=1400 audit(1748087767.544:86): avc: denied { read } for pid=5821 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.012341][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.035136][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.037042][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.050535][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.058294][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.064413][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.071977][ T30] audit: type=1400 audit(1748087767.574:87): avc: denied { open } for pid=5814 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.092839][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.113086][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.134389][ T30] audit: type=1400 audit(1748087767.574:88): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.411568][ T30] audit: type=1400 audit(1748087767.954:89): avc: denied { module_request } for pid=5818 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.478046][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 63.594873][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 63.661035][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 63.684651][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 63.764905][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.772544][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.779780][ T5818] bridge_slave_0: entered allmulticast mode [ 63.787687][ T5818] bridge_slave_0: entered promiscuous mode [ 63.825737][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.832996][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.840109][ T5818] bridge_slave_1: entered allmulticast mode [ 63.847411][ T5818] bridge_slave_1: entered promiscuous mode [ 63.876379][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.884675][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.892193][ T5814] bridge_slave_0: entered allmulticast mode [ 63.898892][ T5814] bridge_slave_0: entered promiscuous mode [ 63.934720][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.944540][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.952235][ T5814] bridge_slave_1: entered allmulticast mode [ 63.959451][ T5814] bridge_slave_1: entered promiscuous mode [ 63.978347][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.016962][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.039603][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.047046][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.054533][ T5821] bridge_slave_0: entered allmulticast mode [ 64.061227][ T5821] bridge_slave_0: entered promiscuous mode [ 64.070326][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.082355][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.099182][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 64.117272][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.124531][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.132145][ T5821] bridge_slave_1: entered allmulticast mode [ 64.138820][ T5821] bridge_slave_1: entered promiscuous mode [ 64.168209][ T5818] team0: Port device team_slave_0 added [ 64.177229][ T5818] team0: Port device team_slave_1 added [ 64.206481][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.213916][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.221002][ T5810] bridge_slave_0: entered allmulticast mode [ 64.228271][ T5810] bridge_slave_0: entered promiscuous mode [ 64.241119][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.248605][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.255897][ T5810] bridge_slave_1: entered allmulticast mode [ 64.263206][ T5810] bridge_slave_1: entered promiscuous mode [ 64.279441][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.291160][ T5814] team0: Port device team_slave_0 added [ 64.320894][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.332691][ T5814] team0: Port device team_slave_1 added [ 64.349686][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.356987][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.383214][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.415472][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.425271][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.433769][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.460193][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.490811][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.516375][ T5821] team0: Port device team_slave_0 added [ 64.524596][ T5821] team0: Port device team_slave_1 added [ 64.537642][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.545514][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.571706][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.584063][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.591001][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.617384][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.681782][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.688742][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.715417][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.730542][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.737811][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.745087][ T5812] bridge_slave_0: entered allmulticast mode [ 64.752073][ T5812] bridge_slave_0: entered promiscuous mode [ 64.760795][ T5810] team0: Port device team_slave_0 added [ 64.770253][ T5810] team0: Port device team_slave_1 added [ 64.785619][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.792787][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.819054][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.837106][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.844489][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.851934][ T5812] bridge_slave_1: entered allmulticast mode [ 64.858628][ T5812] bridge_slave_1: entered promiscuous mode [ 64.885831][ T5818] hsr_slave_0: entered promiscuous mode [ 64.892091][ T5818] hsr_slave_1: entered promiscuous mode [ 64.923149][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.930104][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.956294][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.983890][ T5124] Bluetooth: hci4: command tx timeout [ 65.006074][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.013203][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.039722][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.057290][ T5814] hsr_slave_0: entered promiscuous mode [ 65.063574][ T5124] Bluetooth: hci2: command tx timeout [ 65.063784][ T5814] hsr_slave_1: entered promiscuous mode [ 65.074986][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.082717][ T5814] Cannot create hsr debugfs directory [ 65.092128][ T5821] hsr_slave_0: entered promiscuous mode [ 65.098164][ T5821] hsr_slave_1: entered promiscuous mode [ 65.105226][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.112859][ T5821] Cannot create hsr debugfs directory [ 65.120202][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.144269][ T5124] Bluetooth: hci1: command tx timeout [ 65.151645][ T5124] Bluetooth: hci3: command tx timeout [ 65.157324][ T5124] Bluetooth: hci0: command tx timeout [ 65.168724][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.248423][ T5812] team0: Port device team_slave_0 added [ 65.279185][ T5812] team0: Port device team_slave_1 added [ 65.305659][ T5810] hsr_slave_0: entered promiscuous mode [ 65.312271][ T5810] hsr_slave_1: entered promiscuous mode [ 65.318149][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.326225][ T5810] Cannot create hsr debugfs directory [ 65.372958][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.379927][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.405849][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.429363][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.436684][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.463044][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.580947][ T5812] hsr_slave_0: entered promiscuous mode [ 65.587165][ T5812] hsr_slave_1: entered promiscuous mode [ 65.594235][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.601899][ T5812] Cannot create hsr debugfs directory [ 65.707191][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.736459][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.746901][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.776745][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.856677][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.867873][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.884748][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.896209][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.961399][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.997515][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.008226][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.019545][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.035497][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.086180][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.105266][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.122204][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.138044][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.159381][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.169797][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.177100][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.204132][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.211236][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.284227][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.300137][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.313932][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.325500][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.336125][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.380061][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.408221][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.415364][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.449423][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.456577][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.480835][ T30] audit: type=1400 audit(1748087771.014:90): avc: denied { sys_module } for pid=5818 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.518441][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.567694][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.615496][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.622759][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.646828][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.653964][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.689298][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.705449][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.755711][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.797792][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.828986][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.836118][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.883537][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.890688][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.935083][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.995827][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.003423][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.031319][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.038509][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.062506][ T5124] Bluetooth: hci4: command tx timeout [ 67.117302][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.141787][ T5124] Bluetooth: hci2: command tx timeout [ 67.222405][ T5124] Bluetooth: hci0: command tx timeout [ 67.227866][ T5124] Bluetooth: hci3: command tx timeout [ 67.233836][ T55] Bluetooth: hci1: command tx timeout [ 67.257701][ T5818] veth0_vlan: entered promiscuous mode [ 67.296531][ T5818] veth1_vlan: entered promiscuous mode [ 67.356369][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.445764][ T5818] veth0_macvtap: entered promiscuous mode [ 67.459586][ T5814] veth0_vlan: entered promiscuous mode [ 67.492830][ T5818] veth1_macvtap: entered promiscuous mode [ 67.500441][ T5814] veth1_vlan: entered promiscuous mode [ 67.544641][ T5821] veth0_vlan: entered promiscuous mode [ 67.555186][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.567295][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.580321][ T5814] veth0_macvtap: entered promiscuous mode [ 67.596655][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.604777][ T5821] veth1_vlan: entered promiscuous mode [ 67.617682][ T5814] veth1_macvtap: entered promiscuous mode [ 67.632472][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.658438][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.667854][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.679080][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.687972][ T5818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.711173][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.728881][ T5821] veth0_macvtap: entered promiscuous mode [ 67.745695][ T5821] veth1_macvtap: entered promiscuous mode [ 67.757260][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.781310][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.791851][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.800596][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.809703][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.832527][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.841071][ T5812] veth0_vlan: entered promiscuous mode [ 67.870594][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.901926][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.910651][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.921134][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.930151][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.941216][ T5812] veth1_vlan: entered promiscuous mode [ 67.993456][ T5810] veth0_vlan: entered promiscuous mode [ 68.034892][ T5810] veth1_vlan: entered promiscuous mode [ 68.043932][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.062318][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.065498][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.070221][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.111391][ T5812] veth0_macvtap: entered promiscuous mode [ 68.157227][ T5812] veth1_macvtap: entered promiscuous mode [ 68.167936][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.184821][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.186555][ T5810] veth0_macvtap: entered promiscuous mode [ 68.218087][ T5810] veth1_macvtap: entered promiscuous mode [ 68.248591][ T30] audit: type=1400 audit(1748087772.784:91): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.bAhsHg/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.251433][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.280932][ T30] audit: type=1400 audit(1748087772.794:92): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.313429][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.332056][ T30] audit: type=1400 audit(1748087772.824:93): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.bAhsHg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.359062][ T30] audit: type=1400 audit(1748087772.824:94): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.382529][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.390405][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.403112][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.410596][ T30] audit: type=1400 audit(1748087772.824:95): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.bAhsHg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.414002][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.440369][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.453515][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.465484][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.495396][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.511048][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.521041][ T30] audit: type=1400 audit(1748087772.824:96): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.bAhsHg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.522871][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.555756][ T30] audit: type=1400 audit(1748087772.824:97): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.558216][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.589319][ T30] audit: type=1400 audit(1748087772.854:98): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.595635][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.621178][ T30] audit: type=1400 audit(1748087772.854:99): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=5849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.646376][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.646479][ T30] audit: type=1400 audit(1748087772.854:100): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.677518][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.677546][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.733464][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.741317][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.945666][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.966544][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.142427][ T5124] Bluetooth: hci4: command tx timeout [ 69.674945][ T5822] Bluetooth: hci3: command tx timeout [ 69.681736][ T55] Bluetooth: hci1: command tx timeout [ 69.683845][ T5827] Bluetooth: hci0: command tx timeout [ 69.693864][ T5124] Bluetooth: hci2: command tx timeout [ 69.951204][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.972998][ T5912] Zero length message leads to an empty skb [ 69.997420][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.049599][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.088839][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.138037][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.165848][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.325726][ T5922] xt_l2tp: wrong L2TP version: 0 [ 71.078827][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.089111][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.221831][ T5124] Bluetooth: hci4: command tx timeout [ 71.292403][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.593957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.603220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.681713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 71.701569][ T5124] Bluetooth: hci3: command tx timeout [ 71.702197][ T55] Bluetooth: hci0: command tx timeout [ 71.782450][ T55] Bluetooth: hci1: command tx timeout [ 71.782460][ T5124] Bluetooth: hci2: command tx timeout [ 71.798586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.817274][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.827767][ T24] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 71.850582][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.878627][ T24] usb 5-1: config 0 descriptor?? [ 71.998490][ T24] usb 5-1: bad CDC descriptors [ 72.046254][ T5941] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 72.099991][ T5941] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11'. [ 72.178945][ T5946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=5946 comm=syz.2.11 [ 72.210049][ T24] usb 5-1: USB disconnect, device number 2 [ 72.404457][ T5955] block device autoloading is deprecated and will be removed. [ 72.427737][ T5955] ======================================================= [ 72.427737][ T5955] WARNING: The mand mount option has been deprecated and [ 72.427737][ T5955] and is ignored by this kernel. Remove the mand [ 72.427737][ T5955] option from the mount to silence this warning. [ 72.427737][ T5955] ======================================================= [ 72.485349][ T5956] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14'. [ 72.823024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.931784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.042934][ T5966] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 0, id = 0 [ 73.208659][ T5972] Illegal XDP return value 4294967274 on prog (id 4) dev N/A, expect packet loss! [ 73.245022][ T5964] tipc: Started in network mode [ 73.250585][ T5964] tipc: Node identity 4, cluster identity 4711 [ 73.273972][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.283287][ T5964] tipc: Node number set to 4 [ 73.421763][ T5863] usb 3-1: device descriptor read/64, error -71 [ 73.762514][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.952235][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 73.967429][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 73.967775][ T5865] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.990265][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.012025][ T24] usb 2-1: config 0 descriptor?? [ 74.212048][ T5863] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.223078][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 74.239830][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 74.242676][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 74.242690][ T30] audit: type=1400 audit(1748087778.794:172): avc: denied { create } for pid=5981 comm="syz.0.21" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.289674][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.293899][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.310107][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 74.326138][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.340250][ T30] audit: type=1400 audit(1748087778.824:173): avc: denied { write } for pid=5981 comm="syz.0.21" name="file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.345069][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 74.364537][ T30] audit: type=1400 audit(1748087778.824:174): avc: denied { open } for pid=5981 comm="syz.0.21" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.393277][ T30] audit: type=1400 audit(1748087778.824:175): avc: denied { ioctl } for pid=5981 comm="syz.0.21" path="/3/file0" dev="tmpfs" ino=33 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.418310][ T5865] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 74.420044][ T24] usb 2-1: media controller created [ 74.428280][ T5863] usb 3-1: device descriptor read/64, error -71 [ 74.469160][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 74.494092][ T5865] usb 4-1: Product: syz [ 74.508482][ T5865] usb 4-1: Manufacturer: syz [ 74.521664][ T5865] usb 4-1: SerialNumber: syz [ 74.539552][ T5865] usb 4-1: config 0 descriptor?? [ 74.558865][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.560667][ T5865] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 74.582353][ T5863] usb usb3-port1: attempt power cycle [ 74.611440][ T5865] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 74.641144][ T5865] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 75.321554][ T5863] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.362148][ T5863] usb 3-1: device descriptor read/8, error -71 [ 75.418293][ T30] audit: type=1400 audit(1748087779.964:176): avc: denied { create } for pid=5978 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.596951][ T30] audit: type=1400 audit(1748087779.964:177): avc: denied { write } for pid=5978 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.661638][ T5863] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 75.678126][ T30] audit: type=1400 audit(1748087780.194:178): avc: denied { ioctl } for pid=5999 comm="syz.4.24" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.716085][ T30] audit: type=1400 audit(1748087780.264:179): avc: denied { write } for pid=5999 comm="syz.4.24" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.760944][ T5863] usb 3-1: device descriptor read/8, error -71 [ 75.787304][ T30] audit: type=1400 audit(1748087780.294:180): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.845276][ T30] audit: type=1400 audit(1748087780.324:181): avc: denied { map } for pid=5999 comm="syz.4.24" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.884933][ T5863] usb usb3-port1: unable to enumerate USB device [ 76.508970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.533043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.662264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.816163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.822754][ T24] az6027: usb out operation failed. (-110) [ 76.855455][ T24] az6027: usb out operation failed. (-32) [ 76.904144][ T24] stb0899_attach: Driver disabled by Kconfig [ 76.941024][ T24] az6027: no front-end attached [ 76.941024][ T24] [ 76.982775][ T24] az6027: usb out operation failed. (-71) [ 77.001543][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 77.041652][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 77.094281][ T5863] usb 4-1: USB disconnect, device number 2 [ 77.106238][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 77.140717][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 77.207177][ T24] usb 2-1: USB disconnect, device number 2 [ 77.392235][ T6024] Lens B: ================= START STATUS ================= [ 77.399719][ T6024] Lens B: Focus, Absolute: 0 [ 77.405207][ T6024] Lens B: ================== END STATUS ================== [ 77.473207][ T6024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.579737][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 78.945907][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.333243][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 79.340867][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.352984][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.368131][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 79.392315][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.421938][ T24] hub 2-1:4.0: USB hub found [ 79.702566][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 79.702598][ T30] audit: type=1400 audit(1748087784.244:199): avc: denied { name_bind 0x1000000 } for pid=6021 comm="syz.1.31" path="socket:[8590]" dev="sockfs" ino=8590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 80.126176][ T24] hub 2-1:4.0: 2 ports detected [ 80.142014][ T24] usb 2-1: selecting invalid altsetting 1 [ 80.147790][ T24] hub 2-1:4.0: Using single TT (err -22) [ 80.194147][ T24] hub 2-1:4.0: config failed, can't get hub status (err -5) [ 80.315260][ T30] audit: type=1400 audit(1748087784.854:200): avc: denied { connect } for pid=6048 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.659887][ T24] usb 2-1: USB disconnect, device number 3 [ 81.330914][ T9] cfg80211: failed to load regulatory.db [ 81.704673][ T5824] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.932690][ T30] audit: type=1400 audit(1748087786.374:201): avc: denied { create } for pid=6069 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.987673][ T30] audit: type=1400 audit(1748087786.374:202): avc: denied { write } for pid=6069 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.008154][ T30] audit: type=1400 audit(1748087786.424:203): avc: denied { setopt } for pid=6069 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.031954][ T5824] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.044300][ T5824] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.055369][ T5824] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.086457][ T30] audit: type=1400 audit(1748087786.624:204): avc: denied { create } for pid=6071 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.107000][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.367977][ T6067] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.982935][ T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 83.030555][ T55] Bluetooth: hci0: Injecting HCI hardware error event [ 83.073197][ T55] Bluetooth: hci0: hardware error 0x00 [ 83.458120][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.611341][ T5824] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.690063][ T30] audit: type=1400 audit(1748087788.234:205): avc: denied { kexec_image_load } for pid=6065 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 83.871606][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 83.883699][ T24] usb 2-1: config 7 has an invalid interface number: 247 but max is 0 [ 83.900672][ T24] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 84.709599][ T5824] usb 3-1: USB disconnect, device number 6 [ 84.718766][ T30] audit: type=1400 audit(1748087788.264:206): avc: denied { create } for pid=6065 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 84.870764][ T24] usb 2-1: config 7 has no interface number 0 [ 84.877041][ T24] usb 2-1: config 7 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.891113][ T24] usb 2-1: string descriptor 0 read error: -71 [ 84.971819][ T24] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 84.980905][ T24] usb 2-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 85.013794][ T24] usb 2-1: can't set config #7, error -71 [ 85.024311][ T24] usb 2-1: USB disconnect, device number 4 [ 85.033463][ T30] audit: type=1400 audit(1748087789.574:207): avc: denied { create } for pid=6096 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.109599][ T30] audit: type=1400 audit(1748087790.494:208): avc: denied { read } for pid=6098 comm="syz.4.47" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 86.140193][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 86.675760][ T30] audit: type=1400 audit(1748087790.494:209): avc: denied { open } for pid=6098 comm="syz.4.47" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 86.700608][ T30] audit: type=1400 audit(1748087790.594:210): avc: denied { ioctl } for pid=6098 comm="syz.4.47" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.301957][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 87.503507][ T30] audit: type=1400 audit(1748087791.994:211): avc: denied { ioctl } for pid=6114 comm="syz.4.52" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 87.566558][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.571236][ T6117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6117 comm=syz.0.51 [ 87.682231][ T30] audit: type=1400 audit(1748087792.234:212): avc: denied { create } for pid=6119 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 87.859775][ T30] audit: type=1400 audit(1748087792.254:213): avc: denied { connect } for pid=6119 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 87.961747][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 88.180484][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 88.219724][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 88.250712][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 88.292198][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 88.316121][ T24] usb 2-1: Manufacturer: syz [ 88.342829][ T24] usb 2-1: config 0 descriptor?? [ 88.575937][ T5863] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.708332][ T30] audit: type=1400 audit(1748087793.234:214): avc: denied { block_suspend } for pid=6127 comm="syz.0.56" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.791621][ T24] rc_core: IR keymap rc-hauppauge not found [ 88.798741][ T24] Registered IR keymap rc-empty [ 88.804044][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.821647][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.835480][ T30] audit: type=1400 audit(1748087793.384:215): avc: denied { getopt } for pid=6127 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.863490][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 88.881585][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 88.884824][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 90.008725][ T5863] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 90.093934][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.700969][ T5863] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.716691][ T5863] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.726600][ T5863] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.729847][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.736541][ T5863] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.736583][ T5863] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.781599][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.805545][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.824840][ T30] audit: type=1400 audit(1748087795.364:216): avc: denied { write } for pid=6136 comm="syz.2.57" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.851574][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.873378][ T30] audit: type=1400 audit(1748087795.424:217): avc: denied { ioctl } for pid=6136 comm="syz.2.57" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8756 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.899201][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.921557][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.961594][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.972968][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.242972][ T30] audit: type=1400 audit(1748087795.664:218): avc: denied { read write } for pid=6141 comm="syz.0.59" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.251676][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 91.291102][ T5863] usb 4-1: usb_control_msg returned -71 [ 91.771302][ T6143] xt_connbytes: Forcing CT accounting to be enabled [ 91.778096][ T6143] Cannot find set identified by id 0 to match [ 91.816221][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 91.824657][ T30] audit: type=1400 audit(1748087795.664:219): avc: denied { open } for pid=6141 comm="syz.0.59" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.848597][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 91.856275][ T30] audit: type=1400 audit(1748087795.894:220): avc: denied { create } for pid=6139 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.862677][ T5863] usbtmc 4-1:16.0: can't read capabilities [ 91.879438][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 91.894137][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 91.910796][ T30] audit: type=1400 audit(1748087796.044:221): avc: denied { mounton } for pid=6141 comm="syz.0.59" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.966182][ T24] usb 2-1: USB disconnect, device number 5 [ 92.044626][ T30] audit: type=1400 audit(1748087796.044:222): avc: denied { unmount } for pid=6141 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.064221][ T30] audit: type=1400 audit(1748087796.454:223): avc: denied { write } for pid=6149 comm="syz.3.60" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.166297][ T30] audit: type=1400 audit(1748087796.714:224): avc: denied { read write } for pid=6152 comm="syz.4.63" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 92.264982][ T6154] overlayfs: missing 'lowerdir' [ 93.029906][ T30] audit: type=1400 audit(1748087796.714:225): avc: denied { open } for pid=6152 comm="syz.4.63" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.105592][ T5863] usb 4-1: USB disconnect, device number 3 [ 93.923186][ T6166] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.633252][ T6168] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.538213][ T6175] fuse: Bad value for 'fd' [ 95.947109][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 95.947123][ T30] audit: type=1400 audit(1748087800.494:233): avc: denied { create } for pid=6174 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 96.041542][ T30] audit: type=1400 audit(1748087800.584:234): avc: denied { create } for pid=6178 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.055270][ T6183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.68'. [ 96.060683][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.124346][ T30] audit: type=1400 audit(1748087800.584:235): avc: denied { listen } for pid=6178 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.143561][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.882605][ T6178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.442484][ T30] audit: type=1400 audit(1748087800.774:236): avc: denied { create } for pid=6184 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 97.474467][ T30] audit: type=1400 audit(1748087800.784:237): avc: denied { write } for pid=6179 comm="syz.1.70" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.497720][ T30] audit: type=1400 audit(1748087800.784:238): avc: denied { open } for pid=6179 comm="syz.1.70" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.522407][ T6180] sctp: failed to load transform for md5: -2 [ 97.532288][ T30] audit: type=1400 audit(1748087800.904:239): avc: denied { connect } for pid=6174 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.555106][ T30] audit: type=1400 audit(1748087801.034:240): avc: denied { unlink } for pid=6178 comm="syz.4.71" name="#1" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.581105][ T30] audit: type=1400 audit(1748087801.074:241): avc: denied { mount } for pid=6178 comm="syz.4.71" name="/" dev="overlay" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.620704][ T30] audit: type=1400 audit(1748087802.103:242): avc: denied { write } for pid=6200 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.682486][ T6234] FAULT_INJECTION: forcing a failure. [ 99.682486][ T6234] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.710099][ T6234] CPU: 0 UID: 0 PID: 6234 Comm: syz.4.81 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 99.710119][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.710125][ T6234] Call Trace: [ 99.710129][ T6234] [ 99.710134][ T6234] dump_stack_lvl+0x16c/0x1f0 [ 99.710155][ T6234] should_fail_ex+0x512/0x640 [ 99.710173][ T6234] should_fail_alloc_page+0xe7/0x130 [ 99.710187][ T6234] prepare_alloc_pages+0x3c2/0x610 [ 99.710205][ T6234] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 99.710220][ T6234] ? __lock_acquire+0xaa4/0x1ba0 [ 99.710240][ T6234] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.710254][ T6234] ? __lock_acquire+0x5ca/0x1ba0 [ 99.710275][ T6234] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.710288][ T6234] ? policy_nodemask+0xea/0x4e0 [ 99.710302][ T6234] alloc_pages_mpol+0x1fb/0x550 [ 99.710314][ T6234] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 99.710324][ T6234] ? rcuwait_wake_up+0xe9/0x290 [ 99.710341][ T6234] ? kvm_mmu_notifier_invalidate_range_end+0x2b1/0x500 [ 99.710358][ T6234] alloc_pages_noprof+0x131/0x390 [ 99.710370][ T6234] pte_alloc_one+0x19/0x380 [ 99.710384][ T6234] __pte_alloc+0x6d/0x3c0 [ 99.710408][ T6234] ? __pfx___pte_alloc+0x10/0x10 [ 99.710421][ T6234] ? __pfx___might_resched+0x10/0x10 [ 99.710436][ T6234] ? __mmu_notifier_invalidate_range_end+0x35b/0x430 [ 99.710448][ T6234] ? mm_alloc_pmd+0x15c/0x240 [ 99.710460][ T6234] move_pages+0xe0d/0x5510 [ 99.710480][ T6234] ? __pfx_move_pages+0x10/0x10 [ 99.710496][ T6234] ? find_held_lock+0x2b/0x80 [ 99.710509][ T6234] ? __might_fault+0xe3/0x190 [ 99.710519][ T6234] ? __might_fault+0xe3/0x190 [ 99.710535][ T6234] userfaultfd_ioctl+0x607/0x38e0 [ 99.710559][ T6234] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 99.710572][ T6234] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 99.710591][ T6234] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 99.710615][ T6234] ? hook_file_ioctl_common+0x145/0x410 [ 99.710631][ T6234] ? selinux_file_ioctl+0x180/0x270 [ 99.710647][ T6234] ? selinux_file_ioctl+0xb4/0x270 [ 99.710664][ T6234] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 99.710680][ T6234] ? __x64_sys_ioctl+0x190/0x200 [ 99.710695][ T6234] __x64_sys_ioctl+0x190/0x200 [ 99.710710][ T6234] do_syscall_64+0xcd/0x260 [ 99.710727][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.710739][ T6234] RIP: 0033:0x7fd31d18e969 [ 99.710748][ T6234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.710758][ T6234] RSP: 002b:00007fd31e00c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.710770][ T6234] RAX: ffffffffffffffda RBX: 00007fd31d3b6080 RCX: 00007fd31d18e969 [ 99.710777][ T6234] RDX: 0000200000000180 RSI: 00000000c028aa05 RDI: 0000000000000008 [ 99.710783][ T6234] RBP: 00007fd31e00c090 R08: 0000000000000000 R09: 0000000000000000 [ 99.710789][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.710795][ T6234] R13: 0000000000000000 R14: 00007fd31d3b6080 R15: 00007ffe8223c1c8 [ 99.710810][ T6234] [ 100.019269][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.474520][ T6237] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 100.532485][ T6243] netlink: 830 bytes leftover after parsing attributes in process `syz.0.84'. [ 100.557258][ T6237] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 100.959881][ T5863] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.141492][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 101.167725][ T5863] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 101.180538][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.210135][ T5863] usb 4-1: config 0 descriptor?? [ 101.339587][ T6255] Bluetooth: MGMT ver 1.23 [ 101.351843][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 101.351875][ T30] audit: type=1400 audit(1748087805.536:253): avc: denied { create } for pid=6248 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.788931][ T30] audit: type=1400 audit(1748087805.545:254): avc: denied { connect } for pid=6248 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.808783][ T30] audit: type=1400 audit(1748087805.545:255): avc: denied { ioctl } for pid=6248 comm="syz.2.86" path="socket:[8166]" dev="sockfs" ino=8166 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.827774][ T6254] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 101.834658][ T30] audit: type=1400 audit(1748087806.032:256): avc: denied { mounton } for pid=6250 comm="syz.1.87" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 101.868970][ T6254] UDF-fs: Scanning with blocksize 512 failed [ 101.885167][ T6254] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 101.912863][ T6254] UDF-fs: Scanning with blocksize 1024 failed [ 101.919211][ T6254] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 102.034950][ T6254] UDF-fs: Scanning with blocksize 2048 failed [ 102.055901][ T30] audit: type=1400 audit(1748087806.256:257): avc: denied { read write } for pid=6257 comm="syz.0.88" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.078821][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.086768][ T6254] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 102.102281][ T6254] UDF-fs: Scanning with blocksize 4096 failed [ 102.104191][ T5863] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 103.006921][ T30] audit: type=1400 audit(1748087806.256:258): avc: denied { open } for pid=6257 comm="syz.0.88" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.031534][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.041758][ T30] audit: type=1400 audit(1748087806.294:259): avc: denied { ioctl } for pid=6257 comm="syz.0.88" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.067415][ T5863] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 103.074674][ T5863] usb 4-1: media controller created [ 103.080189][ T30] audit: type=1400 audit(1748087806.359:260): avc: denied { ioctl } for pid=6258 comm="syz.4.89" path="socket:[9007]" dev="sockfs" ino=9007 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.119454][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.130087][ T30] audit: type=1400 audit(1748087806.378:261): avc: denied { bind } for pid=6261 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.413355][ T30] audit: type=1400 audit(1748087806.387:262): avc: denied { name_bind } for pid=6261 comm="syz.2.90" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 104.446192][ T5863] az6027: usb out operation failed. (-71) [ 104.474320][ T5863] az6027: usb out operation failed. (-71) [ 104.490043][ T5863] stb0899_attach: Driver disabled by Kconfig [ 104.495138][ T6279] process 'syz.4.93' launched './file0' with NULL argv: empty string added [ 104.543801][ T5863] az6027: no front-end attached [ 104.543801][ T5863] [ 104.602322][ T5863] az6027: usb out operation failed. (-71) [ 104.624277][ T5863] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 104.668764][ T5863] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 104.712606][ T5863] dvb-usb: schedule remote query interval to 400 msecs. [ 104.719600][ T5863] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 104.889019][ T5863] usb 4-1: USB disconnect, device number 4 [ 105.055291][ T5863] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 106.454016][ T6310] Lens B: ================= START STATUS ================= [ 106.461470][ T6310] Lens B: Focus, Absolute: 0 [ 106.466143][ T6310] Lens B: ================== END STATUS ================== [ 106.476014][ T6310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.028674][ T6313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.99'. [ 107.274489][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.389405][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 107.389424][ T30] audit: type=1400 audit(1748087811.036:267): avc: denied { setopt } for pid=6316 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.433626][ T30] audit: type=1400 audit(1748087811.046:268): avc: denied { write } for pid=6316 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.639622][ T6326] Lens B: ================= START STATUS ================= [ 107.647127][ T6326] Lens B: Focus, Absolute: 0 [ 107.652011][ T6326] Lens B: ================== END STATUS ================== [ 107.711238][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.734789][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 108.617641][ T47] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 108.625892][ T47] usb 5-1: config 0 has no interface number 0 [ 108.634883][ T47] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 108.651953][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.664145][ T47] usb 5-1: Product: syz [ 108.668412][ T47] usb 5-1: Manufacturer: syz [ 108.673736][ T47] usb 5-1: SerialNumber: syz [ 109.101567][ T30] audit: type=1400 audit(1748087812.804:269): avc: denied { setopt } for pid=6327 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.702931][ T47] usb 5-1: config 0 descriptor?? [ 109.988280][ T47] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 110.252541][ T6348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.331677][ T30] audit: type=1400 audit(1748087813.992:270): avc: denied { create } for pid=6340 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.836425][ T30] audit: type=1400 audit(1748087813.992:271): avc: denied { getopt } for pid=6340 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.858873][ T30] audit: type=1400 audit(1748087814.460:272): avc: denied { create } for pid=6344 comm="syz.3.110" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.904065][ T6345] warning: `syz.3.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.964392][ T47] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 111.091639][ T47] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 111.212089][ T30] audit: type=1400 audit(1748087814.460:273): avc: denied { ioctl } for pid=6314 comm="syz.4.100" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.511745][ T5865] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.645399][ T6359] syz.1.111: attempt to access beyond end of device [ 111.645399][ T6359] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 111.747225][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 111.777120][ T5865] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 111.831843][ T5865] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 111.918089][ T5824] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.930434][ T5865] usb 4-1: config 166 has no interface number 0 [ 111.948074][ T5865] usb 4-1: config 166 has no interface number 1 [ 111.962266][ T5865] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 111.975751][ T5865] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 111.987064][ T5865] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 112.000986][ T6362] Lens B: ================= START STATUS ================= [ 112.008515][ T6362] Lens B: Focus, Absolute: 0 [ 112.013475][ T6362] Lens B: ================== END STATUS ================== [ 112.027227][ T6362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.062622][ T5865] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 112.113908][ T5865] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 112.145812][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 112.172604][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.194977][ T5865] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 112.214423][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.232472][ T5865] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 112.255043][ T5824] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 112.270971][ T5865] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 112.296164][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.312016][ T5865] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 112.337552][ T5865] usb 4-1: config 166 interface 177 has no altsetting 0 [ 112.346419][ T5824] usb 3-1: config 0 descriptor?? [ 112.405601][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 112.442448][ T5864] usb 5-1: USB disconnect, device number 3 [ 112.455174][ T5864] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 112.474998][ T5864] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 112.486964][ T5864] quatech2 5-1:0.51: device disconnected [ 112.526359][ T5865] usb 4-1: config 166 interface 34 has no altsetting 0 [ 112.569937][ T5865] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 112.589696][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.614427][ T5865] usb 4-1: Product: syz [ 112.618711][ T5865] usb 4-1: Manufacturer: syz [ 112.631616][ T5865] usb 4-1: SerialNumber: syz [ 112.781497][ T30] audit: type=1400 audit(1748087816.284:274): avc: denied { write } for pid=6353 comm="syz.2.112" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 112.816474][ T5824] aquacomputer_d5next 0003:0C70:F00A.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.2-1/input0 [ 112.940380][ T5865] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 113.017444][ T5824] usb 3-1: USB disconnect, device number 7 [ 113.135865][ T6371] fido_id[6371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 113.172189][ T5865] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 113.362335][ T6387] Lens B: ================= START STATUS ================= [ 113.369899][ T6387] Lens B: Focus, Absolute: 0 [ 113.374952][ T6387] Lens B: ================== END STATUS ================== [ 113.484697][ T6387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.515072][ T6386] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 113.543140][ T6386] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 113.794929][ T6392] syz.2.120: attempt to access beyond end of device [ 113.794929][ T6392] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 114.066199][ T30] audit: type=1400 audit(1748087817.191:275): avc: denied { write } for pid=6368 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.086404][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.120'. [ 114.088171][ T6390] mmap: syz.4.116 (6390) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.870640][ T5865] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 114.880840][ T30] audit: type=1400 audit(1748087817.200:276): avc: denied { nlmsg_write } for pid=6368 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.902801][ T5865] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 114.909175][ T5865] usb 4-1: No valid video chain found. [ 114.920186][ T5865] usb 4-1: USB disconnect, device number 5 [ 116.347121][ T6412] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.123'. [ 116.361855][ T6409] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.123'. [ 116.633888][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.125'. [ 117.081045][ T6424] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 117.088736][ T6424] netlink: 224 bytes leftover after parsing attributes in process `syz.2.126'. [ 117.145351][ T6424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6424 comm=syz.2.126 [ 118.083919][ T6438] FAULT_INJECTION: forcing a failure. [ 118.083919][ T6438] name failslab, interval 1, probability 0, space 0, times 0 [ 118.102922][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: syz.3.132 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 118.102947][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.102957][ T6438] Call Trace: [ 118.102963][ T6438] [ 118.102970][ T6438] dump_stack_lvl+0x16c/0x1f0 [ 118.102999][ T6438] should_fail_ex+0x512/0x640 [ 118.103023][ T6438] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 118.103052][ T6438] should_failslab+0xc2/0x120 [ 118.103072][ T6438] __kmalloc_cache_noprof+0x6a/0x3e0 [ 118.103095][ T6438] ? net_generic+0xf4/0x2a0 [ 118.103114][ T6438] ? nf_tables_newtable+0xd67/0x1b40 [ 118.103142][ T6438] nf_tables_newtable+0xd67/0x1b40 [ 118.103170][ T6438] ? __pfx___nla_validate_parse+0x10/0x10 [ 118.103190][ T6438] ? __pfx_nf_tables_newtable+0x10/0x10 [ 118.103219][ T6438] ? __nla_parse+0x40/0x60 [ 118.103238][ T6438] nfnetlink_rcv_batch+0x190b/0x2350 [ 118.103273][ T6438] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 118.103298][ T6438] ? find_held_lock+0x2b/0x80 [ 118.103335][ T6438] ? avc_has_perm_noaudit+0x149/0x3b0 [ 118.103375][ T6438] ? __nla_parse+0x40/0x60 [ 118.103393][ T6438] nfnetlink_rcv+0x3c1/0x430 [ 118.103415][ T6438] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 118.103443][ T6438] netlink_unicast+0x53a/0x7f0 [ 118.103467][ T6438] ? __pfx_netlink_unicast+0x10/0x10 [ 118.103495][ T6438] netlink_sendmsg+0x8d1/0xdd0 [ 118.103521][ T6438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.103551][ T6438] ____sys_sendmsg+0xa95/0xc70 [ 118.103584][ T6438] ? copy_msghdr_from_user+0x10a/0x160 [ 118.103601][ T6438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.103634][ T6438] ___sys_sendmsg+0x134/0x1d0 [ 118.103655][ T6438] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.103696][ T6438] __sys_sendmsg+0x16d/0x220 [ 118.103712][ T6438] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.103734][ T6438] ? rcu_is_watching+0x12/0xc0 [ 118.103756][ T6438] do_syscall_64+0xcd/0x260 [ 118.103779][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.103793][ T6438] RIP: 0033:0x7f547f18e969 [ 118.103805][ T6438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.103819][ T6438] RSP: 002b:00007f547cff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.103833][ T6438] RAX: ffffffffffffffda RBX: 00007f547f3b5fa0 RCX: 00007f547f18e969 [ 118.103842][ T6438] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 118.103851][ T6438] RBP: 00007f547cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.103859][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.103867][ T6438] R13: 0000000000000000 R14: 00007f547f3b5fa0 R15: 00007ffcf7c8deb8 [ 118.103886][ T6438] [ 119.532056][ T30] audit: type=1400 audit(1748087822.607:277): avc: denied { append } for pid=6451 comm="syz.2.136" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.693721][ T6458] netlink: 400 bytes leftover after parsing attributes in process `syz.0.138'. [ 119.826317][ T6459] loop6: detected capacity change from 0 to 524287999 [ 120.253333][ T6460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.135'. [ 121.131047][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.143'. [ 121.179873][ T30] audit: type=1800 audit(1748087824.113:278): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.139" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 122.244614][ T30] audit: type=1400 audit(1748087825.123:279): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 122.906721][ T30] audit: type=1400 audit(1748087825.750:280): avc: denied { create } for pid=6494 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.014729][ T6496] syz.1.146 (6496): /proc/6496/oom_adj is deprecated, please use /proc/6496/oom_score_adj instead. [ 123.061362][ T30] audit: type=1400 audit(1748087825.881:281): avc: denied { bind } for pid=6494 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.466078][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 124.475329][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 125.275830][ T30] audit: type=1400 audit(1748087827.976:282): avc: denied { set_context_mgr } for pid=6514 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 125.316398][ T30] audit: type=1400 audit(1748087827.995:283): avc: denied { write } for pid=6514 comm="syz.0.151" name="rt_cache" dev="proc" ino=4026533240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.196803][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.217264][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.237937][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.259718][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.290625][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.309914][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.345978][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.386762][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.405315][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.427358][ T6527] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 133.590772][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 133.616185][ T30] audit: type=1400 audit(1748087835.778:284): avc: denied { setopt } for pid=6532 comm="syz.4.157" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.535565][ T6548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.635211][ T5865] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.664712][ T5864] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.891621][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 134.903638][ T5864] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 134.984133][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.989863][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.120838][ T5864] usb 2-1: config 0 descriptor?? [ 135.433995][ T5864] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 135.725692][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.996574][ T5864] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 136.095865][ T5864] usb 2-1: media controller created [ 136.209301][ T6556] binder: 6555:6556 ioctl c0306201 200000000540 returned -22 [ 136.233092][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.249232][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 136.272180][ T5865] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 136.281627][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.319152][ T5865] usb 4-1: config 0 descriptor?? [ 136.415005][ T30] audit: type=1400 audit(1748087838.397:285): avc: denied { create } for pid=6560 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 136.458010][ T30] audit: type=1400 audit(1748087838.415:286): avc: denied { ioctl } for pid=6560 comm="syz.2.165" path="socket:[10569]" dev="sockfs" ino=10569 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 136.855173][ T5865] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 136.896036][ T5865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.998802][ T5865] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 137.168306][ T5865] usb 4-1: media controller created [ 137.189478][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.985909][ T5864] az6027: usb out operation failed. (-71) [ 138.011663][ T5864] az6027: usb out operation failed. (-71) [ 138.028347][ T5864] stb0899_attach: Driver disabled by Kconfig [ 138.034415][ T5864] az6027: no front-end attached [ 138.034415][ T5864] [ 138.132613][ T5864] az6027: usb out operation failed. (-71) [ 138.172364][ T5864] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 138.339540][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 138.676776][ T5864] dvb-usb: schedule remote query interval to 400 msecs. [ 138.678152][ T5865] az6027: usb out operation failed. (-71) [ 138.684115][ T5864] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 138.743573][ T5864] usb 2-1: USB disconnect, device number 6 [ 138.751442][ T5865] az6027: usb out operation failed. (-71) [ 138.757299][ T5865] stb0899_attach: Driver disabled by Kconfig [ 138.808751][ T5865] az6027: no front-end attached [ 138.808751][ T5865] [ 138.882741][ T5864] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 138.981505][ T5865] az6027: usb out operation failed. (-71) [ 139.015466][ T5865] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 139.025453][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 139.040394][ T5865] dvb-usb: schedule remote query interval to 400 msecs. [ 139.047374][ T5865] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 139.228819][ T30] audit: type=1400 audit(1748087840.875:287): avc: denied { read } for pid=6588 comm="syz.3.174" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 139.999675][ T6589] delete_channel: no stack [ 140.007750][ T30] audit: type=1400 audit(1748087840.875:288): avc: denied { open } for pid=6588 comm="syz.3.174" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 140.045525][ T30] audit: type=1400 audit(1748087841.016:289): avc: denied { mount } for pid=6588 comm="syz.3.174" name="/" dev="autofs" ino=10623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 140.067792][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.116798][ T5865] usb 4-1: USB disconnect, device number 6 [ 140.122766][ T30] audit: type=1400 audit(1748087841.755:290): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 140.215347][ T5865] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 140.394807][ T6604] No control pipe specified [ 140.502643][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.175'. [ 142.590426][ T5863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.599014][ T5124] Bluetooth: hci5: command 0x1003 tx timeout [ 142.604947][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.643732][ T30] audit: type=1400 audit(1748087843.925:291): avc: denied { write } for pid=6605 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 142.762590][ T5863] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.830577][ T6612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.761329][ T5863] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 144.517177][ T5863] usb 1-1: string descriptor 0 read error: -71 [ 144.721162][ T5863] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 144.730390][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.742862][ T5863] usb 1-1: can't set config #1, error -71 [ 144.750110][ T5863] usb 1-1: USB disconnect, device number 2 [ 144.994623][ T6617] FAULT_INJECTION: forcing a failure. [ 144.994623][ T6617] name failslab, interval 1, probability 0, space 0, times 0 [ 145.007416][ T6617] CPU: 0 UID: 0 PID: 6617 Comm: syz.0.180 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 145.007432][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.007438][ T6617] Call Trace: [ 145.007444][ T6617] [ 145.007448][ T6617] dump_stack_lvl+0x16c/0x1f0 [ 145.007470][ T6617] should_fail_ex+0x512/0x640 [ 145.007489][ T6617] should_failslab+0xc2/0x120 [ 145.007501][ T6617] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 145.007515][ T6617] ? sidtab_sid2str_get+0x17a/0x680 [ 145.007534][ T6617] kmemdup_noprof+0x29/0x60 [ 145.007547][ T6617] sidtab_sid2str_get+0x17a/0x680 [ 145.007566][ T6617] sidtab_entry_to_string+0x33/0x110 [ 145.007589][ T6617] security_sid_to_context_core+0x35c/0x640 [ 145.007607][ T6617] avc_audit_post_callback+0x1aa/0x8f0 [ 145.007619][ T6617] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 145.007635][ T6617] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 145.007652][ T6617] ? skb_put+0x138/0x1b0 [ 145.007669][ T6617] ? audit_log_n_string+0x253/0x540 [ 145.007690][ T6617] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 145.007707][ T6617] common_lsm_audit+0x24e/0x300 [ 145.007724][ T6617] ? __pfx_common_lsm_audit+0x10/0x10 [ 145.007740][ T6617] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 145.007755][ T6617] ? avc_update_node.isra.0+0x4c0/0xb60 [ 145.007768][ T6617] slow_avc_audit+0x186/0x210 [ 145.007780][ T6617] ? __pfx_slow_avc_audit+0x10/0x10 [ 145.007792][ T6617] ? avc_denied+0x14a/0x190 [ 145.007804][ T6617] ? avc_has_perm_noaudit+0x306/0x3b0 [ 145.007817][ T6617] avc_has_perm+0x18b/0x1c0 [ 145.007829][ T6617] ? __pfx_avc_has_perm+0x10/0x10 [ 145.007843][ T6617] ? find_held_lock+0x2b/0x80 [ 145.007858][ T6617] sock_has_perm+0x252/0x2f0 [ 145.007871][ T6617] ? __pfx_sock_has_perm+0x10/0x10 [ 145.007885][ T6617] ? proc_fail_nth_write+0x9f/0x250 [ 145.007905][ T6617] ? find_held_lock+0x2b/0x80 [ 145.007920][ T6617] security_socket_getsockopt+0x211/0x240 [ 145.007936][ T6617] do_sock_getsockopt+0xf4/0x800 [ 145.007951][ T6617] ? find_held_lock+0x20/0x80 [ 145.007964][ T6617] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 145.007978][ T6617] ? __fget_files+0x204/0x3c0 [ 145.007994][ T6617] __sys_getsockopt+0x12f/0x260 [ 145.008009][ T6617] __x64_sys_getsockopt+0xbd/0x160 [ 145.008023][ T6617] ? do_syscall_64+0x91/0x260 [ 145.008039][ T6617] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.008054][ T6617] do_syscall_64+0xcd/0x260 [ 145.008071][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.008082][ T6617] RIP: 0033:0x7fb28c78e969 [ 145.008092][ T6617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.008102][ T6617] RSP: 002b:00007fb28d639038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 145.008113][ T6617] RAX: ffffffffffffffda RBX: 00007fb28c9b5fa0 RCX: 00007fb28c78e969 [ 145.008120][ T6617] RDX: 0000000000000486 RSI: 0000000000000000 RDI: 0000000000000003 [ 145.008126][ T6617] RBP: 00007fb28d639090 R08: 0000200000000040 R09: 0000000000000000 [ 145.008132][ T6617] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.008138][ T6617] R13: 0000000000000000 R14: 00007fb28c9b5fa0 R15: 00007ffc9297e0c8 [ 145.008152][ T6617] [ 145.356512][ T30] audit: type=1400 audit(1748087846.422:292): avc: denied { getopt } for pid=6616 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tsid=148 tclass=smc_socket permissive=1 [ 145.401004][ T6615] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 145.869625][ T30] audit: type=1400 audit(1748087847.236:293): avc: denied { setopt } for pid=6619 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.780031][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 257.787029][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6584/1:b..l [ 257.795319][ C0] rcu: (detected by 0, t=10503 jiffies, g=11721, q=959 ncpus=2) [ 257.803029][ C0] task:syz.4.171 state:R running task stack:27608 pid:6584 tgid:6581 ppid:5818 task_flags:0x40044c flags:0x00004002 [ 257.816874][ C0] Call Trace: [ 257.820151][ C0] [ 257.823080][ C0] __schedule+0x116f/0x5de0 [ 257.827604][ C0] ? __pfx___schedule+0x10/0x10 [ 257.832473][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 257.837766][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 257.842787][ C0] ? find_held_lock+0x2b/0x80 [ 257.847465][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 257.852852][ C0] preempt_schedule_common+0x44/0xc0 [ 257.858138][ C0] preempt_schedule_thunk+0x16/0x30 [ 257.863337][ C0] _raw_spin_unlock+0x3e/0x50 [ 257.868013][ C0] unmap_page_range+0xf08/0x4390 [ 257.872977][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 257.878436][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 257.883383][ C0] ? uprobe_munmap+0x20/0x5c0 [ 257.888066][ C0] unmap_single_vma+0x194/0x2a0 [ 257.892920][ C0] unmap_vmas+0x22c/0x490 [ 257.897267][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 257.902149][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 257.907108][ C0] exit_mmap+0x1b9/0xb90 [ 257.911361][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 257.916134][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 257.921096][ C0] __mmput+0x12a/0x410 [ 257.925167][ C0] mmput+0x62/0x70 [ 257.928886][ C0] do_exit+0x9d1/0x2c30 [ 257.933043][ C0] ? __pfx___might_resched+0x10/0x10 [ 257.938334][ C0] ? __pfx_do_exit+0x10/0x10 [ 257.942923][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 257.947945][ C0] ? find_held_lock+0x2b/0x80 [ 257.952630][ C0] do_group_exit+0xd3/0x2a0 [ 257.957136][ C0] get_signal+0x2673/0x26d0 [ 257.961645][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 257.966598][ C0] ? __pfx_get_signal+0x10/0x10 [ 257.971455][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 257.977031][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 257.983213][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 257.988766][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 257.994413][ C0] do_syscall_64+0xda/0x260 [ 257.998927][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.004815][ C0] RIP: 0033:0x7fd31d18e969 [ 258.009239][ C0] RSP: 002b:00007fd31e00c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 258.017675][ C0] RAX: 0000000000010106 RBX: 00007fd31d3b6080 RCX: 00007fd31d18e969 [ 258.025668][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 258.033646][ C0] RBP: 00007fd31d210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 258.041614][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 258.049576][ C0] R13: 0000000000000001 R14: 00007fd31d3b6080 R15: 00007ffe8223c1c8 [ 258.057577][ C0] [ 258.060596][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10465 jiffies! g11721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 258.072938][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=9982 [ 258.080736][ C0] rcu: rcu_preempt kthread starved for 10466 jiffies! g11721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 258.092096][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 258.102055][ C0] rcu: RCU grace-period kthread stack dump: [ 258.107930][ C0] task:rcu_preempt state:I stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 258.119856][ C0] Call Trace: [ 258.123130][ C0] [ 258.126058][ C0] __schedule+0x116f/0x5de0 [ 258.130592][ C0] ? __pfx___schedule+0x10/0x10 [ 258.135448][ C0] ? find_held_lock+0x2b/0x80 [ 258.140125][ C0] ? schedule+0x2d7/0x3a0 [ 258.144459][ C0] schedule+0xe7/0x3a0 [ 258.148528][ C0] schedule_timeout+0x123/0x290 [ 258.153388][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 258.158755][ C0] ? __pfx_process_timeout+0x10/0x10 [ 258.164091][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 258.169922][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 258.175397][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 258.180167][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 258.185474][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 258.190358][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 258.196210][ C0] rcu_gp_kthread+0x270/0x380 [ 258.200910][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 258.206117][ C0] ? rcu_is_watching+0x12/0xc0 [ 258.210885][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 258.216089][ C0] ? __kthread_parkme+0x19e/0x250 [ 258.221155][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 258.226384][ C0] kthread+0x3c2/0x780 [ 258.230501][ C0] ? __pfx_kthread+0x10/0x10 [ 258.235115][ C0] ? __pfx_kthread+0x10/0x10 [ 258.239767][ C0] ? __pfx_kthread+0x10/0x10 [ 258.244378][ C0] ? __pfx_kthread+0x10/0x10 [ 258.248971][ C0] ? rcu_is_watching+0x12/0xc0 [ 258.253730][ C0] ? __pfx_kthread+0x10/0x10 [ 258.258314][ C0] ret_from_fork+0x45/0x80 [ 258.262729][ C0] ? __pfx_kthread+0x10/0x10 [ 258.267318][ C0] ret_from_fork_asm+0x1a/0x30 [ 258.272099][ C0] [ 258.275110][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 258.281426][ C0] Sending NMI from CPU 0 to CPUs 1: [ 258.286623][ C1] NMI backtrace for cpu 1 [ 258.286635][ C1] CPU: 1 UID: 0 PID: 6621 Comm: syz.0.181 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 258.286651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.286659][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70 [ 258.286676][ C1] Code: 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 18 1a e9 11 65 8b 05 29 1a e9 11 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 [ 258.286694][ C1] RSP: 0018:ffffc90000a08e38 EFLAGS: 00000097 [ 258.286706][ C1] RAX: 0000000080010001 RBX: ffff8880b8527940 RCX: ffffffff81a87235 [ 258.286715][ C1] RDX: ffff888027bc4880 RSI: ffffffff81a87244 RDI: 0000000000000005 [ 258.286723][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000007 [ 258.286731][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b8527840 [ 258.286739][ C1] R13: 0000000000000001 R14: ffff888029a8f340 R15: 0000000000000001 [ 258.286747][ C1] FS: 00007fb28d6396c0(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000 [ 258.286761][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.286769][ C1] CR2: 0000200000043000 CR3: 0000000012f8d000 CR4: 00000000003526f0 [ 258.286778][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.286785][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.286793][ C1] Call Trace: [ 258.286799][ C1] [ 258.286803][ C1] __hrtimer_run_queues+0x274/0xad0 [ 258.286822][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 258.286835][ C1] ? read_tsc+0x9/0x20 [ 258.286855][ C1] hrtimer_interrupt+0x397/0x8e0 [ 258.286875][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 258.286892][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 258.286911][ C1] [ 258.286915][ C1] [ 258.286920][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.286935][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 258.286953][ C1] Code: fb 09 00 00 44 8b 05 49 cd fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 ff 77 39 00 fb 65 48 8b 1d 8e cd 1a 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 258.286964][ C1] RSP: 0018:ffffc90003c076f8 EFLAGS: 00000206 [ 258.286974][ C1] RAX: 000000000000cebd RBX: ffff888027bc4880 RCX: ffffffff81c3097f [ 258.286982][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe4455 RDI: ffffffff8bf4a520 [ 258.286990][ C1] RBP: ffffc90003c07740 R08: 0000000000000001 R09: 0000000000000001 [ 258.286997][ C1] R10: ffffffff90853017 R11: 0000000000000000 R12: ffff8880b8539dc0 [ 258.287005][ C1] R13: ffff88801dada440 R14: 0000000000000001 R15: ffff8880b853abf0 [ 258.287016][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 258.287033][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 258.287048][ C1] ? __switch_to+0x749/0x1170 [ 258.287066][ C1] __schedule+0x1177/0x5de0 [ 258.287088][ C1] ? __pfx___schedule+0x10/0x10 [ 258.287106][ C1] ? find_held_lock+0x2b/0x80 [ 258.287121][ C1] ? schedule+0x2d7/0x3a0 [ 258.287137][ C1] schedule+0xe7/0x3a0 [ 258.287152][ C1] schedule_timeout+0x257/0x290 [ 258.287167][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 258.287185][ C1] ? rcu_is_watching+0x12/0xc0 [ 258.287199][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.287215][ C1] __wait_for_common+0x2ff/0x4e0 [ 258.287231][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 258.287247][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 258.287265][ C1] ? generic_exec_single+0xbb/0x390 [ 258.287281][ C1] rdmsr_safe_on_cpu+0x1dc/0x210 [ 258.287298][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 258.287312][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 258.287334][ C1] msr_read+0x19d/0x250 [ 258.287353][ C1] ? __pfx_msr_read+0x10/0x10 [ 258.287369][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 258.287388][ C1] ? security_file_permission+0x71/0x210 [ 258.287409][ C1] ? rw_verify_area+0xcf/0x680 [ 258.287426][ C1] ? __pfx_msr_read+0x10/0x10 [ 258.287443][ C1] vfs_read+0x1e1/0xc70 [ 258.287463][ C1] ? __pfx_vfs_read+0x10/0x10 [ 258.287480][ C1] ? find_held_lock+0x2b/0x80 [ 258.287494][ C1] ? __fget_files+0x204/0x3c0 [ 258.287507][ C1] ? __fget_files+0x20e/0x3c0 [ 258.287521][ C1] ksys_read+0x12a/0x240 [ 258.287539][ C1] ? __pfx_ksys_read+0x10/0x10 [ 258.287555][ C1] ? rcu_is_watching+0x12/0xc0 [ 258.287572][ C1] do_syscall_64+0xcd/0x260 [ 258.287591][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.287604][ C1] RIP: 0033:0x7fb28c78e969 [ 258.287615][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.287626][ C1] RSP: 002b:00007fb28d639038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.287638][ C1] RAX: ffffffffffffffda RBX: 00007fb28c9b5fa0 RCX: 00007fb28c78e969 [ 258.287646][ C1] RDX: 0000000000019000 RSI: 0000200000032680 RDI: 0000000000000003 [ 258.287654][ C1] RBP: 00007fb28c810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 258.287662][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.287669][ C1] R13: 0000000000000000 R14: 00007fb28c9b5fa0 R15: 00007ffc9297e0c8 [ 258.287682][ C1]