last executing test programs: 7.408142521s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffffed, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix_mp={0x401, 0x5, 0x32314d59, 0x9, 0x6, [{0x6, 0x1b2}, {0x8, 0x9}, {0xa, 0x10001}, {0xffff8dbd, 0x100}, {0x8, 0x10000003}, {0x8001, 0x8}, {0x8, 0xffff}, {0x7, 0x4}], 0x94, 0x9, 0x2, 0x1, 0x5}}) socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, &(0x7f0000001a00)=[{&(0x7f0000001800)="4d2e256951a74ed2446dd5da", 0xc}], 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) 7.244417508s ago: executing program 2 (id=3): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void, {0x8160}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 7.002522974s ago: executing program 2 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020100000000040000009500000000000004b0ffffffff9cf553f54b3d54a6bba03ef5ffcb6989b652fefbc2ace599f55477"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000480), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x80000001]}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioperm(0x0, 0x2, 0x80000001) syslog(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffff7fffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES16=r2, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/225], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x24008844) syz_clone3(&(0x7f0000000380)={0x10000000, &(0x7f0000000080), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x2d}, &(0x7f0000000240)=""/6, 0x6, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) sched_setscheduler(r5, 0x6, &(0x7f0000000400)=0x8) socket$netlink(0x10, 0x3, 0x0) 6.186415141s ago: executing program 1 (id=8): socket$kcm(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x6443, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x9c}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x40000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x80001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6.172642996s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b9ff03681290a1c89e14f02ce9dce4", 0x0, 0x40011, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003c85f620823040a000000e50103010902f60b1b000000000004ff010071c0d9082095500d06"], &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x4, 0x2, 0x3}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}, 0x10003}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040090}, 0x8840) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a80)={'ip6gretap0\x00', &(0x7f00000009c0)=@ethtool_flash={0x26, 0x8000000, './file0\x00'}}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6.086724586s ago: executing program 2 (id=9): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020100000000040000009500000000000004b0ffffffff9cf553f54b3d54a6bba03ef5ffcb6989b652fefbc2ace599f55477"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000480), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x0, 0x5}, 0x0, [0x8000000, 0x0, 0x2, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xa, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x100, 0x0, 0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x80000001]}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x286540, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3, 0xff, 0x7, 0x2008, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x5}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x55) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.060535188s ago: executing program 3 (id=4): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000a00)={r1}) (fail_nth: 6) 5.118318979s ago: executing program 3 (id=10): r0 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x1) write(r0, &(0x7f00000003c0)="69672505bde5d1853a", 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2a2365783e940c3f, 0x50, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) 5.11357664s ago: executing program 4 (id=11): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c0070000", @ANYRES16=0x0, @ANYBLOB="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"], 0x7c0}, 0x1, 0x0, 0x0, 0x4085}, 0x41050) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 5.061704116s ago: executing program 3 (id=12): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400000000000075", 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x30044090) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() sched_setparam(r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000"], 0x44}}, 0x20000040) close(0xffffffffffffffff) r3 = socket$inet(0x2, 0x80001, 0x84) listen(r3, 0x3) socket$netlink(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) 4.573723579s ago: executing program 2 (id=13): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r5, 0xdffaa000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x14}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f00000001c0)='./file0/../file0/file0\x00', r7, r8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee01}}, './file1\x00'}) syz_clone3(&(0x7f0000003200)={0x10200000, &(0x7f0000002f00), &(0x7f0000002f40)=0x0, &(0x7f0000002f80), {0x8}, &(0x7f0000002fc0)=""/246, 0xf6, &(0x7f00000030c0)=""/232, &(0x7f00000031c0)=[r1, r1, r1, r1, r1, r1, r1, r1], 0x8}, 0x58) fstat(r6, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003300)=0x0, &(0x7f0000003340), &(0x7f0000003380)) sendmmsg$unix(r0, &(0x7f00000034c0)=[{{&(0x7f00000003c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000440)="b638554065cace31451d7f069fef27b718c2a605fbe02055ba1bf59d0bf6e64ae13c8d7a5700e8c58c7e60de4aaf46879ef893f3635dd82531d63c4b75b0f8aa56b654ddb2001e64c1d9d0d43af68c96c5b2229b3a6810a82adb34dfbf162563b5d340ebb9ed675d6b938ca8c6847c29ddb7b6f213f6262dd2d2f11130914ec60f71f1fe87de679faaa8dc0571ac25a36cd8574e1389e3db520127c4b44443f58ba67d5bfc8219db08c5012b5a", 0xad}, {&(0x7f0000000000)="b45819ae592bc0a11752d39f63bcf16874244deaff62858090252574633b00f5b1de0339cb1041e40667c3059b6a1b8c01", 0x31}, {&(0x7f0000000500)="94cb2522d0d26d41fff9c34833a89690e6dfdd232f180bc64990d7278f309b379c7b3a2bea2f9706fba2d58e0b77b163695f639bafb40b8f3423b030195fe04294fe2e2dedc45e5ab3ae9c51bd7aead44996acef66c33e157a37883fe34b1c937db0db3645972f38688b8e1332a67a26f2f7a309053cce1d6caa67d9812ca61dc001860693ebc6933098b0e1a95ef632d7aee4e68376273374879eaa26524a27110d48241688ac0c49cba6dbe1ee136f4e813023655f9c12bc74447187128e604e7e239821ba2ab194b1e8fc19574ff77dffb6b3a2754a414a2a177a9901738eedc4c9717e66f754b34d", 0xea}, {&(0x7f00000006c0)="41154663a7c405860383cb120f7a04b90eb95176642919e655f7557f2daef4a55d31869f9946ceb08320ce62c0a3f90616de592a21fa6eb57f9f07719a834e844680bf6dd82948ec9ada30abef4d7565696a06a070dde976225435b4c0c7220ee63049831c114ec8965e", 0x6a}], 0x4, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000880)="c66f6ce6f1fc3634d708480b0923a9adc8c95e274d74559ae9c7b9159dcf5a4208e4e45c22472f1e11c6c754f43250f3868514f19b446f7728e60214b6045c409d24ca476fae6308f47737b2e7dd115dcddb593f7c1a0e1aab9ac323399a23b82e09b8744f94b2ae7a75a7f2585120c53885eac312c0881e03c36302f772d2308022f359ba6e120e3e6cace5ff5368a23616e155e3503a27f09fd04dc97d94d1c414a93fe22135d75e0e3680d9492e0a6eb9654c604fdb72947cf395ef6a31d6f7a5d39f673aa7945b537f", 0xcb}, {&(0x7f0000001480)="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", 0xfff}, {&(0x7f0000000980)="ea666198e6b9c93d0828a6ab57740c3f90043e4289742fc9b4d8fa7a16e642aec3cc6ef8e3", 0x25}, {&(0x7f00000009c0)="493977f6d0aa6eda110d7505affe4eb3df9d5aa5e09fa9070f78fd96143877900227cd371a10b401f23e9efca26587f9164701afd18fdc3e471dbc12e1da07e3d61c521d38170ce413cfc6d090fcfbcb4466d7f1d02587b4ae0f5705dd5e904c41a19531e44a0135cedda174daca751106d6e4672a6a8416fcc4bfaeec30ee1909f305e1ca3ae21e09cefddb834484c7ba415866f2d579f576abb8084db66c1fb9979f0b19f320e43644e8fd655795e80b8defd8", 0xb4}, {&(0x7f0000000a80)="53f156ed6dea1b72b082981ec48afc59e036c37b5ea413addba65c1e97a08e56da06dcaf1445f67255d048c49e8b9b7d61b754369c6c44b9ee7ceb80a5450fb83f465952ceee56c3f9b0fbafa6bb825507594c8903a26ed74af108af997cc1b101c423fc5339dcc4", 0x68}, {&(0x7f0000000b00)="8893b3805b481ee81b847611cb0210b8bc32544bf011504500b5b7e7fa619e2580f722e5d95a91ad1dc64367e3430ac43bed1222e87b8812443b2ad86d1de3ed0bd1bc6dc36006d58440599bc25c72b470c14a4a7d225f1ac97746bd0b45e30960e5a14519902cf7a15cdfa18195d0047e6b83a0e6a825d1fa6a7fd947b8002ea9c035ed8fb0", 0x86}, {&(0x7f0000000bc0)="67968715d3b7016e088338d82a1893a53f35afa67f340d264917fe301a9a7c748290e9f72ed070f751e39ca78633fc204d985f09e1ac56addb656e01834d7895b2074978774b9f55fced4349a9d53e4197b5d6ee2e561aa6bb507b4eadd31700f451e21c4945233bd6f013f8c73ff04388f5f894a248041ebd884f0852034d8d67bb8556c339fc8e193db2a646ae7f81023d404fd42b", 0x96}], 0x7, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r4, r5, r2, r5, r5, r3, r5, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x34, 0x1, 0x1, [r3, r0, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, r2, r0]}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff}}}], 0x150, 0x40}}, {{&(0x7f0000002600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000033c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r6, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, r7, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0xe8, 0x40}}], 0x3, 0x10) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r13, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) 3.630491525s ago: executing program 1 (id=14): r0 = socket(0x2b, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x3}}, 0x10) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xb) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) fstatfs(r6, &(0x7f0000000140)=""/166) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4048821}, 0x44c5) 3.617875023s ago: executing program 2 (id=15): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) socket$xdp(0x2c, 0x3, 0x0) poll(0x0, 0x0, 0x3ff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x500) 2.954232702s ago: executing program 0 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050005000a0000c4050001000700000005000400000000000900020073797a3100000000"], 0x44}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, r2) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff7000/0x3000)=nil, 0x400c) read$midi(0xffffffffffffffff, &(0x7f0000000300)=""/210, 0xd2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4404c880) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3811000043000701feffff"], 0x1138}}, 0xc000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r6, 0x0, 0x0, 0x0}, 0x30) prlimit64(r7, 0xe, &(0x7f0000000000)={0xfff, 0x10001}, &(0x7f0000000100)) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000440)) getsockopt$WPAN_SECURITY(r8, 0x0, 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) socket$xdp(0x2c, 0x3, 0x0) poll(0x0, 0x0, 0x3ff) 2.950212682s ago: executing program 1 (id=17): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000068000100000000000000000002000000000000000c000880050005000000000008000500", @ANYRES32, @ANYBLOB="060007"], 0x34}}, 0x0) r2 = socket(0x2b, 0x2, 0x0) sendmsg$nl_route(r2, 0x0, 0x5) socket$packet(0x11, 0x3, 0x300) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f0000002d80)=[{&(0x7f0000000900)=""/237, 0xed}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x9, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x8, 0x7fffffffffffffff, 0x3, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xff7ffffc, 0x80000000000000, 0xb64, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000480)=ANY=[@ANYBLOB="ddf963", @ANYBLOB="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"]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xbe, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 1.816286721s ago: executing program 4 (id=18): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (fail_nth: 3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 1.811923222s ago: executing program 0 (id=19): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x11, 0x8, 0x80, 0x1, 0x4003, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x180, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x6, 0xe, 0x0, 0x80008071, 0x3d, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x80000004, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0xfffff9bc, 0x5, 0xfffffff3, 0x6, 0x40c8, 0xf9, 0xe, 0x282c0, 0x8, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000004, 0x5f31, 0x2d, 0x4e2, 0x5, 0x5, 0xb, 0x344317e0, 0x9, 0x80000001, 0x9, 0x6, 0x8, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x80, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x803, 0x401, 0x4, 0x6d01, 0x2, 0x35, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0x1, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x8, 0x5, 0x3, 0x6, 0xb9, 0xce7, 0x1ff, 0x2, 0x7, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x69cd, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x5, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x205, 0x8, 0x30b1d693, 0x6, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$ax25(r2, &(0x7f0000000240)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) accept4(r2, &(0x7f0000000380), &(0x7f0000000180)=0x80, 0x80800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000880)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fda={0x66646185, 0x1, 0x8000000000000000, 0x24}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) socket$tipc(0x1e, 0x2, 0x0) 1.798479477s ago: executing program 3 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) r3 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) syz_pidfd_open(r3, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x6, 0x10, 0x3, 0xfffffffb, 0x7f80000000000000, 0x2, 0x64857719, 0x5, 0x7}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) userfaultfd(0x801) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x86) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0xa4, 0x0, 0x1, 0x301, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x2}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x1}}]}}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x3]}]}, 0xa4}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) 1.334357003s ago: executing program 0 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 650.600369ms ago: executing program 0 (id=22): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (fail_nth: 5) 232.646738ms ago: executing program 0 (id=23): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r3}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) close_range(r1, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000007c0)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r6, &(0x7f0000001140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x3, 0x1, 0x2, 0x2}}, 0x80) 190.106671ms ago: executing program 4 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8], 0x2d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 38.417907ms ago: executing program 2 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000034700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix_mp={0x401, 0x5, 0x32314d59, 0x9, 0x6, [{0x6, 0x1b2}, {0x8, 0x9}, {0xa, 0x10001}, {0xffff8dbd, 0x100}, {0x8, 0x10000003}, {0x8001, 0x8}, {0x8, 0xffff}, {0x7, 0x4}], 0x94, 0x9, 0x2, 0x1, 0x5}}) socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, &(0x7f0000001a00)=[{&(0x7f0000001800)="4d2e256951a74ed2446dd5da", 0xc}], 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) 0s ago: executing program 0 (id=26): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000003fffffff}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0xb, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1}) r2 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000000080)=[{r2, 0x80}], 0x1, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0xffffffffffff7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @void}, 0x10) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sync() syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 66.307398][ T30] audit: type=1400 audit(1768356414.014:62): avc: denied { mounton } for pid=5801 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.331316][ T30] audit: type=1400 audit(1768356414.044:63): avc: denied { mount } for pid=5801 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.334439][ T5801] cgroup: Unknown subsys name 'net' [ 66.360262][ T30] audit: type=1400 audit(1768356414.064:64): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.503499][ T5801] cgroup: Unknown subsys name 'cpuset' [ 66.511753][ T5801] cgroup: Unknown subsys name 'rlimit' [ 66.633387][ T30] audit: type=1400 audit(1768356414.344:65): avc: denied { setattr } for pid=5801 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.667656][ T30] audit: type=1400 audit(1768356414.344:66): avc: denied { create } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.700431][ T30] audit: type=1400 audit(1768356414.344:67): avc: denied { write } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.721105][ T30] audit: type=1400 audit(1768356414.344:68): avc: denied { read } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.741455][ T30] audit: type=1400 audit(1768356414.354:69): avc: denied { mounton } for pid=5801 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 66.766298][ T30] audit: type=1400 audit(1768356414.354:70): avc: denied { mount } for pid=5801 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.769794][ T5803] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.798995][ T30] audit: type=1400 audit(1768356414.514:71): avc: denied { relabelto } for pid=5803 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.768373][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.898435][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.907801][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.916104][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.916382][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.923779][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.932239][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.938318][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.945357][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.953141][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.959325][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.965849][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.973402][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.979586][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.988186][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.994327][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.001694][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.007999][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.015241][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.028835][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.042750][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.053535][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.053620][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.071873][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.079410][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.086843][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.538070][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 70.626866][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 70.666122][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 70.786177][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 70.806001][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 70.860335][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.867644][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.875959][ T5815] bridge_slave_0: entered allmulticast mode [ 70.883058][ T5815] bridge_slave_0: entered promiscuous mode [ 70.930448][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.937629][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.944917][ T5815] bridge_slave_1: entered allmulticast mode [ 70.951925][ T5815] bridge_slave_1: entered promiscuous mode [ 70.999372][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.006772][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.014069][ T5813] bridge_slave_0: entered allmulticast mode [ 71.020969][ T5813] bridge_slave_0: entered promiscuous mode [ 71.027843][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.035141][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.042323][ T5811] bridge_slave_0: entered allmulticast mode [ 71.049045][ T5811] bridge_slave_0: entered promiscuous mode [ 71.071785][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.078863][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.086359][ T5813] bridge_slave_1: entered allmulticast mode [ 71.093360][ T5813] bridge_slave_1: entered promiscuous mode [ 71.100005][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.107350][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.114855][ T5811] bridge_slave_1: entered allmulticast mode [ 71.124651][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.125426][ T5811] bridge_slave_1: entered promiscuous mode [ 71.131114][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.151119][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.189987][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.233648][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.240942][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.248116][ T5822] bridge_slave_0: entered allmulticast mode [ 71.255106][ T5822] bridge_slave_0: entered promiscuous mode [ 71.281202][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.292693][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.301892][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.309454][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.317191][ T5822] bridge_slave_1: entered allmulticast mode [ 71.324003][ T5822] bridge_slave_1: entered promiscuous mode [ 71.332032][ T5815] team0: Port device team_slave_0 added [ 71.337704][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.345123][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.352381][ T5812] bridge_slave_0: entered allmulticast mode [ 71.359090][ T5812] bridge_slave_0: entered promiscuous mode [ 71.367512][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.378100][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.396970][ T5815] team0: Port device team_slave_1 added [ 71.402740][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.409843][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.417459][ T5812] bridge_slave_1: entered allmulticast mode [ 71.424251][ T5812] bridge_slave_1: entered promiscuous mode [ 71.502728][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.523082][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.533546][ T5813] team0: Port device team_slave_0 added [ 71.540475][ T5811] team0: Port device team_slave_0 added [ 71.548305][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.558879][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.565970][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.592031][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.605604][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.616185][ T5813] team0: Port device team_slave_1 added [ 71.623012][ T5811] team0: Port device team_slave_1 added [ 71.636935][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.644000][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.669937][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.745715][ T5822] team0: Port device team_slave_0 added [ 71.754562][ T5812] team0: Port device team_slave_0 added [ 71.762184][ T5822] team0: Port device team_slave_1 added [ 71.768208][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.776941][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.803101][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.814492][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.821878][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.848398][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.871516][ T5812] team0: Port device team_slave_1 added [ 71.877608][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.884799][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.910798][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.930253][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.937258][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.963434][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.013254][ T5815] hsr_slave_0: entered promiscuous mode [ 72.019655][ T5815] hsr_slave_1: entered promiscuous mode [ 72.026971][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.034299][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.060233][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.081430][ T52] Bluetooth: hci2: command tx timeout [ 72.090806][ T52] Bluetooth: hci3: command tx timeout [ 72.100387][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.107449][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.134034][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.145368][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.152578][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.160756][ T52] Bluetooth: hci0: command tx timeout [ 72.178690][ T5817] Bluetooth: hci1: command tx timeout [ 72.189704][ T5826] Bluetooth: hci4: command tx timeout [ 72.195902][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.222343][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.229314][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.255379][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.286736][ T5811] hsr_slave_0: entered promiscuous mode [ 72.292881][ T5811] hsr_slave_1: entered promiscuous mode [ 72.298773][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 72.304612][ T5811] Cannot create hsr debugfs directory [ 72.336123][ T5813] hsr_slave_0: entered promiscuous mode [ 72.342241][ T5813] hsr_slave_1: entered promiscuous mode [ 72.348366][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 72.354312][ T5813] Cannot create hsr debugfs directory [ 72.437122][ T5822] hsr_slave_0: entered promiscuous mode [ 72.443260][ T5822] hsr_slave_1: entered promiscuous mode [ 72.449156][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 72.455122][ T5822] Cannot create hsr debugfs directory [ 72.483077][ T5812] hsr_slave_0: entered promiscuous mode [ 72.489889][ T5812] hsr_slave_1: entered promiscuous mode [ 72.496013][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 72.501749][ T5812] Cannot create hsr debugfs directory [ 72.871913][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.885483][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.902912][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.913459][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.955819][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.970194][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.986225][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.996860][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.072475][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.088327][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.112752][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.123570][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.222373][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.235727][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.249033][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.273236][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.279992][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.317180][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.358169][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.368709][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.391800][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.406683][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.416580][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.436225][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.453550][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.460799][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.470398][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.477548][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.502618][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.518373][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.525520][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.535078][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.542150][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.609951][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.637641][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.644753][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.679183][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.686286][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.714830][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.768010][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 73.768025][ T30] audit: type=1400 audit(1768356421.474:85): avc: denied { sys_module } for pid=5811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.824461][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.862750][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.904707][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.911870][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.946295][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.953453][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.044994][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.077336][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.084511][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.099951][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.120308][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.127414][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.161428][ T5817] Bluetooth: hci2: command tx timeout [ 74.161748][ T5826] Bluetooth: hci3: command tx timeout [ 74.204361][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.240771][ T5826] Bluetooth: hci0: command tx timeout [ 74.249786][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.251243][ T5826] Bluetooth: hci1: command tx timeout [ 74.262480][ T5826] Bluetooth: hci4: command tx timeout [ 74.336671][ T5811] veth0_vlan: entered promiscuous mode [ 74.366542][ T5811] veth1_vlan: entered promiscuous mode [ 74.418832][ T5815] veth0_vlan: entered promiscuous mode [ 74.439034][ T5813] veth0_vlan: entered promiscuous mode [ 74.466222][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.493091][ T5815] veth1_vlan: entered promiscuous mode [ 74.509133][ T5811] veth0_macvtap: entered promiscuous mode [ 74.523969][ T5813] veth1_vlan: entered promiscuous mode [ 74.546297][ T5811] veth1_macvtap: entered promiscuous mode [ 74.584581][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.616022][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.624883][ T5813] veth0_macvtap: entered promiscuous mode [ 74.635622][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.679003][ T5815] veth0_macvtap: entered promiscuous mode [ 74.689923][ T5822] veth0_vlan: entered promiscuous mode [ 74.696922][ T5813] veth1_macvtap: entered promiscuous mode [ 74.704772][ T3491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.715224][ T3491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.730018][ T3491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.739687][ T3491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.753225][ T5815] veth1_macvtap: entered promiscuous mode [ 74.787611][ T5822] veth1_vlan: entered promiscuous mode [ 74.809869][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.867391][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.898939][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.927987][ T5822] veth0_macvtap: entered promiscuous mode [ 74.946305][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.960504][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.975974][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.987781][ T1085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.997492][ T1085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.006526][ T1085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.021552][ T5822] veth1_macvtap: entered promiscuous mode [ 75.031940][ T1085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.042749][ T1085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.065012][ T1085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.073885][ T1085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.097083][ T1085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.108028][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.116223][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.123573][ T5812] veth0_vlan: entered promiscuous mode [ 75.128944][ T5812] veth1_vlan: entered promiscuous mode [ 75.162806][ T30] audit: type=1400 audit(1768356422.874:86): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.usmpvt/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.190618][ T30] audit: type=1400 audit(1768356422.874:87): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.217927][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.227325][ T30] audit: type=1400 audit(1768356422.874:88): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.usmpvt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.254237][ T30] audit: type=1400 audit(1768356422.874:89): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.277503][ T30] audit: type=1400 audit(1768356422.874:90): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.usmpvt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.311313][ T30] audit: type=1400 audit(1768356422.874:91): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.usmpvt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.340901][ T30] audit: type=1400 audit(1768356422.874:92): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.346019][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.362950][ T30] audit: type=1400 audit(1768356422.934:93): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.402522][ T30] audit: type=1400 audit(1768356422.934:94): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="gadgetfs" ino=7838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.456985][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.518894][ T5812] veth0_macvtap: entered promiscuous mode [ 75.536185][ T5812] veth1_macvtap: entered promiscuous mode [ 75.557595][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.571767][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.581865][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.589695][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.670602][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.697925][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.711639][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.806495][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.898018][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.106899][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.128776][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.153543][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.164899][ T4113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.179491][ T4113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.190468][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.203993][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.215237][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.220737][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.242330][ T5826] Bluetooth: hci2: command tx timeout [ 76.242461][ T5817] Bluetooth: hci3: command tx timeout [ 76.307277][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.322942][ T5817] Bluetooth: hci1: command tx timeout [ 76.323240][ T5826] Bluetooth: hci4: command tx timeout [ 76.328381][ T52] Bluetooth: hci0: command tx timeout [ 76.399421][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.498304][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.513640][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.599038][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.612880][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.637417][ T5942] fuse: Unknown parameter '00000000000000000000' [ 76.985771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.000907][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.008733][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.121081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.395466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.471184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.770016][ T5960] FAULT_INJECTION: forcing a failure. [ 77.770016][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.799047][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 77.799073][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.799086][ T5960] Call Trace: [ 77.799092][ T5960] [ 77.799101][ T5960] dump_stack_lvl+0x16c/0x1f0 [ 77.799130][ T5960] should_fail_ex+0x512/0x640 [ 77.799158][ T5960] _copy_to_user+0x32/0xd0 [ 77.799184][ T5960] simple_read_from_buffer+0xcb/0x170 [ 77.799210][ T5960] proc_fail_nth_read+0x197/0x240 [ 77.799229][ T5960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.799249][ T5960] ? vfs_read+0x16b/0xcf0 [ 77.799267][ T5960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.799282][ T5960] vfs_read+0x1e4/0xcf0 [ 77.799302][ T5960] ? __pfx___mutex_lock+0x10/0x10 [ 77.799327][ T5960] ? __pfx_vfs_read+0x10/0x10 [ 77.799352][ T5960] ? __fget_files+0x20e/0x3c0 [ 77.799383][ T5960] ksys_read+0x12a/0x250 [ 77.799404][ T5960] ? __pfx_ksys_read+0x10/0x10 [ 77.799434][ T5960] do_syscall_64+0xcd/0xf80 [ 77.799459][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.799478][ T5960] RIP: 0033:0x7efd0678e15c [ 77.799493][ T5960] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.799515][ T5960] RSP: 002b:00007efd07678030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.799533][ T5960] RAX: ffffffffffffffda RBX: 00007efd069e5fa0 RCX: 00007efd0678e15c [ 77.799545][ T5960] RDX: 000000000000000f RSI: 00007efd076780a0 RDI: 0000000000000006 [ 77.799556][ T5960] RBP: 00007efd07678090 R08: 0000000000000000 R09: 0000000000000000 [ 77.799567][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.799577][ T5960] R13: 00007efd069e6038 R14: 00007efd069e5fa0 R15: 00007ffd18a66b18 [ 77.799604][ T5960] [ 78.009945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.141258][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.317063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.317183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.334320][ T5817] Bluetooth: hci3: command tx timeout [ 78.474988][ T5817] Bluetooth: hci2: command tx timeout [ 78.480511][ T5817] Bluetooth: hci4: command tx timeout [ 78.487056][ T5817] Bluetooth: hci1: command tx timeout [ 78.492709][ T5817] Bluetooth: hci0: command tx timeout [ 78.581973][ T5971] –: renamed from vxcan1 (while UP) [ 78.690895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.770731][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 78.770756][ T30] audit: type=1400 audit(1768356426.464:142): avc: denied { create } for pid=5974 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.860956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.869409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.888683][ T30] audit: type=1400 audit(1768356426.464:143): avc: denied { prog_run } for pid=5944 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.898609][ T5976] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 78.914795][ T30] audit: type=1400 audit(1768356426.524:144): avc: denied { listen } for pid=5974 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.940870][ T24] usb 5-1: device descriptor read/64, error -71 [ 79.027223][ T37] Bluetooth: hci5: Frame reassembly failed (-84) [ 79.049325][ T37] Bluetooth: hci5: Frame reassembly failed (-84) [ 79.271189][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.450790][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 79.813024][ T5969] hugetlbfs: syz.0.6 (5969): Using mlock ulimits for SHM_HUGETLB is obsolete [ 79.831973][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 79.860848][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 79.882822][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 79.895411][ T24] usb 5-1: config 1 has no interface number 0 [ 79.932750][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.973002][ T24] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 80.083654][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 80.094077][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.151796][ T30] audit: type=1400 audit(1768356427.864:145): avc: denied { create } for pid=5983 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.293293][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 80.517290][ T30] audit: type=1400 audit(1768356427.894:146): avc: denied { create } for pid=5983 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.578831][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 80.622957][ T30] audit: type=1400 audit(1768356428.264:147): avc: denied { read append } for pid=5985 comm="syz.2.15" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.654932][ T30] audit: type=1400 audit(1768356428.264:148): avc: denied { open } for pid=5985 comm="syz.2.15" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.767405][ T30] audit: type=1400 audit(1768356428.284:149): avc: denied { create } for pid=5985 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.977630][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 81.031436][ T5874] usb 5-1: USB disconnect, device number 3 [ 81.052500][ T30] audit: type=1400 audit(1768356428.564:150): avc: denied { write } for pid=5985 comm="syz.2.15" path="socket:[9481]" dev="sockfs" ino=9481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.101104][ T30] audit: type=1400 audit(1768356428.774:151): avc: denied { create } for pid=5995 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.128840][ T5874] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 81.133631][ T5994] udevd[5994]: failed to send result of seq 11103 to main daemon: Connection refused [ 81.145514][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.155226][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 81.325606][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 81.587539][ T49] cfg80211: failed to load regulatory.db [ 81.599735][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.643234][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.682989][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.719230][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 81.748053][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.791976][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 81.826648][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.870737][ T24] usb 2-1: Manufacturer: syz [ 81.902877][ T24] usb 2-1: config 0 descriptor?? [ 82.439066][ T6011] exFAT-fs (loop4): unable to read boot sector [ 82.445495][ T6011] exFAT-fs (loop4): failed to read boot sector [ 82.451733][ T6011] exFAT-fs (loop4): failed to recognize exfat type [ 82.501506][ T6011] FAULT_INJECTION: forcing a failure. [ 82.501506][ T6011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.514655][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.4.18 Not tainted syzkaller #0 PREEMPT(full) [ 82.514680][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.514690][ T6011] Call Trace: [ 82.514697][ T6011] [ 82.514704][ T6011] dump_stack_lvl+0x16c/0x1f0 [ 82.514733][ T6011] should_fail_ex+0x512/0x640 [ 82.514763][ T6011] _copy_from_user+0x2e/0xd0 [ 82.514790][ T6011] kvm_vm_ioctl+0x14f2/0x4090 [ 82.514814][ T6011] ? finish_task_switch.isra.0+0x202/0xbd0 [ 82.514844][ T6011] ? rcu_is_watching+0x12/0xc0 [ 82.514861][ T6011] ? finish_task_switch.isra.0+0x207/0xbd0 [ 82.514887][ T6011] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.514912][ T6011] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 82.514934][ T6011] ? rcu_is_watching+0x12/0xc0 [ 82.514951][ T6011] ? trace_sched_exit_tp+0xd1/0x110 [ 82.514968][ T6011] ? __schedule+0x10b9/0x6150 [ 82.514988][ T6011] ? __schedule+0x114c/0x6150 [ 82.515026][ T6011] ? __pfx___schedule+0x10/0x10 [ 82.515044][ T6011] ? find_held_lock+0x2b/0x80 [ 82.515070][ T6011] ? rcu_is_watching+0x12/0xc0 [ 82.515085][ T6011] ? irqentry_exit+0x1dd/0x8c0 [ 82.515104][ T6011] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.515129][ T6011] ? irqentry_exit+0x1dd/0x8c0 [ 82.515146][ T6011] ? rcu_is_watching+0x12/0xc0 [ 82.515168][ T6011] ? do_vfs_ioctl+0xca/0x14f0 [ 82.515188][ T6011] ? do_vfs_ioctl+0xdb7/0x14f0 [ 82.515226][ T6011] ? hook_file_ioctl_common+0x144/0x410 [ 82.515260][ T6011] ? selinux_file_ioctl+0x180/0x270 [ 82.515282][ T6011] ? selinux_file_ioctl+0xb4/0x270 [ 82.515306][ T6011] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 82.515329][ T6011] __x64_sys_ioctl+0x18e/0x210 [ 82.515351][ T6011] do_syscall_64+0xcd/0xf80 [ 82.515373][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.515395][ T6011] RIP: 0033:0x7f1dd978f749 [ 82.515410][ T6011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.515426][ T6011] RSP: 002b:00007f1dda5d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.515444][ T6011] RAX: ffffffffffffffda RBX: 00007f1dd99e6180 RCX: 00007f1dd978f749 [ 82.515456][ T6011] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000008 [ 82.515467][ T6011] RBP: 00007f1dda5d2090 R08: 0000000000000000 R09: 0000000000000000 [ 82.515479][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.515488][ T6011] R13: 00007f1dd99e6218 R14: 00007f1dd99e6180 R15: 00007fff08b26b88 [ 82.515512][ T6011] [ 82.881122][ T24] rc_core: IR keymap rc-hauppauge not found [ 82.887061][ T24] Registered IR keymap rc-empty [ 82.894909][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.920761][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 83.009443][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 83.047995][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 83.547937][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 83.624715][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 83.670745][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 83.711056][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 83.781130][ T6025] fuse: Unknown parameter '00000000000000000000' [ 83.788031][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 83.788173][ T30] audit: type=1400 audit(1768356431.494:175): avc: denied { mounton } for pid=6024 comm="syz.2.25" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.800761][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 188.860610][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 188.867617][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3439/1:b..l P5811/1:b..l P13/1:b..l [ 188.877895][ C1] rcu: (detected by 1, t=10503 jiffies, g=8993, q=1950 ncpus=2) [ 188.885608][ C1] task:kworker/u8:1 state:R running task stack:24552 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 188.899735][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 188.905989][ C1] Call Trace: [ 188.909256][ C1] [ 188.912178][ C1] ? __schedule+0x10b9/0x6150 [ 188.916852][ C1] __schedule+0x1139/0x6150 [ 188.921372][ C1] ? __pfx___schedule+0x10/0x10 [ 188.926216][ C1] ? mark_held_locks+0x49/0x80 [ 188.931063][ C1] preempt_schedule_irq+0x51/0x90 [ 188.936082][ C1] irqentry_exit+0x1d8/0x8c0 [ 188.940671][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.946641][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 188.951831][ C1] Code: b3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 b1 ee 0e 0f 82 74 02 00 00 8b 35 ea e1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 b3 18 12 0f 85 ad 02 00 00 48 83 c4 [ 188.971435][ C1] RSP: 0000:ffffc90000126d10 EFLAGS: 00000206 [ 188.977495][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000a87c6b66 [ 188.985456][ C1] RDX: 0000000000000000 RSI: ffffffff8daa8a1d RDI: ffffffff8bf2b400 [ 188.993414][ C1] RBP: 0000000000000002 R08: 0000000047cad266 R09: 00000000647cad26 [ 189.001372][ C1] R10: 0000000000000002 R11: ffff88801d6f8b30 R12: 0000000000000000 [ 189.009330][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.017320][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 189.022530][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.028677][ C1] unwind_next_frame+0xd1/0x20b0 [ 189.033608][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 189.038710][ C1] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 189.045130][ C1] ? __lock_acquire+0x436/0x2890 [ 189.050059][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.056202][ C1] arch_stack_walk+0x94/0x100 [ 189.060878][ C1] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 189.067294][ C1] stack_trace_save+0x8e/0xc0 [ 189.071961][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 189.077336][ C1] kasan_save_stack+0x33/0x60 [ 189.082010][ C1] ? kasan_save_stack+0x33/0x60 [ 189.086848][ C1] ? kasan_save_track+0x14/0x30 [ 189.091698][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 189.096455][ C1] ? __kmalloc_noprof+0x33d/0x910 [ 189.101474][ C1] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 189.107925][ C1] kasan_save_track+0x14/0x30 [ 189.112594][ C1] __kasan_kmalloc+0xaa/0xb0 [ 189.117184][ C1] __kmalloc_noprof+0x33d/0x910 [ 189.122044][ C1] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 189.128483][ C1] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 189.134903][ C1] cfg80211_inform_single_bss_data+0x542/0x1d30 [ 189.141138][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 189.146348][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 189.153034][ C1] ? stack_trace_save+0x8e/0xc0 [ 189.157875][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 189.163234][ C1] ? stack_depot_save_flags+0x29/0x9b0 [ 189.168693][ C1] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 189.174489][ C1] cfg80211_inform_bss_data+0x22b/0x3be0 [ 189.180121][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 189.184873][ C1] ? __kmalloc_noprof+0x33d/0x910 [ 189.189889][ C1] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 189.195943][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0 [ 189.202172][ C1] ? cfg80211_wiphy_work+0x3fb/0x560 [ 189.207452][ C1] ? kthread+0x3c5/0x780 [ 189.211682][ C1] ? ret_from_fork+0x983/0xb10 [ 189.216437][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 189.221383][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 189.227450][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 189.233338][ C1] ? _ieee802_11_parse_elems_full+0x695/0x45a0 [ 189.239505][ C1] ? __lock_acquire+0x436/0x2890 [ 189.244438][ C1] ? ieee802_11_parse_elems_full+0x143/0x3780 [ 189.250511][ C1] cfg80211_inform_bss_frame_data+0x26f/0x720 [ 189.256583][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 189.262209][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 189.268358][ C1] ? find_held_lock+0x2b/0x80 [ 189.273032][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x18ed/0x2fc0 [ 189.279353][ C1] ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0 [ 189.285500][ C1] ? sta_get_last_rx_stats+0x1d7/0x3b0 [ 189.290960][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 189.297456][ C1] ? rcu_is_watching+0x12/0xc0 [ 189.302209][ C1] ? trace_contention_end+0xdd/0x110 [ 189.307506][ C1] ? kcov_remote_start+0x399/0x680 [ 189.312616][ C1] ieee80211_iface_work+0xe28/0x1350 [ 189.317892][ C1] ? rcu_is_watching+0x12/0xc0 [ 189.322653][ C1] cfg80211_wiphy_work+0x3fb/0x560 [ 189.327771][ C1] process_one_work+0x9ba/0x1b20 [ 189.332709][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 189.338334][ C1] ? __pfx_process_one_work+0x10/0x10 [ 189.343703][ C1] ? assign_work+0x1a0/0x250 [ 189.348285][ C1] worker_thread+0x6c8/0xf10 [ 189.352874][ C1] ? __kthread_parkme+0x19e/0x250 [ 189.357888][ C1] ? __pfx_worker_thread+0x10/0x10 [ 189.362991][ C1] kthread+0x3c5/0x780 [ 189.367054][ C1] ? __pfx_kthread+0x10/0x10 [ 189.371637][ C1] ? rcu_is_watching+0x12/0xc0 [ 189.376388][ C1] ? __pfx_kthread+0x10/0x10 [ 189.380968][ C1] ret_from_fork+0x983/0xb10 [ 189.385547][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 189.390650][ C1] ? __switch_to+0x7af/0x10d0 [ 189.395319][ C1] ? __pfx_kthread+0x10/0x10 [ 189.399902][ C1] ret_from_fork_asm+0x1a/0x30 [ 189.404673][ C1] [ 189.407678][ C1] task:syz-executor state:R running task stack:22952 pid:5811 tgid:5811 ppid:5806 task_flags:0x400140 flags:0x00080000 [ 189.421149][ C1] Call Trace: [ 189.424415][ C1] [ 189.427333][ C1] ? __schedule+0x10b9/0x6150 [ 189.432004][ C1] __schedule+0x1139/0x6150 [ 189.436520][ C1] ? __pfx___schedule+0x10/0x10 [ 189.441359][ C1] ? kmem_cache_free+0x171/0x770 [ 189.446301][ C1] preempt_schedule_irq+0x51/0x90 [ 189.451320][ C1] irqentry_exit+0x1d8/0x8c0 [ 189.455905][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.461875][ C1] RIP: 0010:lockref_put_return+0x0/0x20 [ 189.467414][ C1] Code: 16 9c d1 06 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 d5 39 7f fd eb bc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa e8 f7 61 15 fd b8 ff ff ff ff e9 bd e9 d1 06 66 66 2e [ 189.487007][ C1] RSP: 0018:ffffc90002eb7db8 EFLAGS: 00000293 [ 189.493060][ C1] RAX: 0000000000000000 RBX: ffff8880564908d0 RCX: ffffffff824367e9 [ 189.501015][ C1] RDX: ffff88807b66a4c0 RSI: ffffffff8243656a RDI: ffff888056490988 [ 189.508973][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 189.516930][ C1] R10: 0000000000000001 R11: ffff88807b66aff0 R12: ffff888056490988 [ 189.524889][ C1] R13: 0000000000000003 R14: 000000000000c000 R15: ffff8880564de280 [ 189.532859][ C1] ? dput.part.0+0x2e9/0x570 [ 189.537450][ C1] ? dput.part.0+0x6a/0x570 [ 189.541961][ C1] dput.part.0+0x79/0x570 [ 189.546295][ C1] dput+0x1f/0x30 [ 189.549924][ C1] __fput+0x51c/0xb70 [ 189.553909][ C1] fput_close_sync+0x118/0x260 [ 189.558666][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 189.563944][ C1] ? dnotify_flush+0x79/0x4c0 [ 189.568634][ C1] __x64_sys_close+0x8b/0x120 [ 189.573302][ C1] do_syscall_64+0xcd/0xf80 [ 189.577802][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.583685][ C1] RIP: 0033:0x7f6c3918e3aa [ 189.588089][ C1] RSP: 002b:00007fff24831e80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 189.596499][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6c3918e3aa [ 189.604458][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 189.612414][ C1] RBP: 00007fff24831edc R08: 00000000000003b8 R09: 0079746972756365 [ 189.620372][ C1] R10: 00007f6c393b7800 R11: 0000000000000293 R12: 0000000000000007 [ 189.628332][ C1] R13: 00000000000927c0 R14: 00000000000146a6 R15: 00007fff24831f30 [ 189.636311][ C1] [ 189.639317][ C1] task:kworker/u8:12 state:R running task stack:26216 pid:3439 tgid:3439 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 189.652880][ C1] Workqueue: iou_exit io_ring_exit_work [ 189.658429][ C1] Call Trace: [ 189.661694][ C1] [ 189.664614][ C1] ? __schedule+0x10b9/0x6150 [ 189.669310][ C1] __schedule+0x1139/0x6150 [ 189.673821][ C1] ? __pfx___schedule+0x10/0x10 [ 189.678665][ C1] ? mark_held_locks+0x49/0x80 [ 189.683451][ C1] preempt_schedule_irq+0x51/0x90 [ 189.688469][ C1] irqentry_exit+0x1d8/0x8c0 [ 189.693064][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.699037][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 189.704235][ C1] Code: b3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 b1 ee 0e 0f 82 74 02 00 00 8b 35 ea e1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 b3 18 12 0f 85 ad 02 00 00 48 83 c4 [ 189.723834][ C1] RSP: 0000:ffffc9000caf7868 EFLAGS: 00000206 [ 189.729893][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000e7de1246 [ 189.737854][ C1] RDX: 0000000000000000 RSI: ffffffff8daa8a1d RDI: ffffffff8bf2b400 [ 189.745812][ C1] RBP: 0000000000000002 R08: 000000009bec8dc8 R09: 0000000089bec8dc [ 189.753778][ C1] R10: 0000000000000002 R11: ffff888032788b30 R12: 0000000000000000 [ 189.761739][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.769713][ C1] ? refill_obj_stock+0x388/0x6d0 [ 189.774741][ C1] __memcg_slab_free_hook+0x2e5/0x590 [ 189.780104][ C1] ? __memcg_slab_free_hook+0x2d1/0x590 [ 189.785650][ C1] kmem_cache_free+0x52d/0x770 [ 189.790407][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 189.795778][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 189.801149][ C1] __io_req_caches_free+0x19e/0x5c0 [ 189.806351][ C1] io_ring_exit_work+0x33c/0x1170 [ 189.811378][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 189.816831][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 189.822022][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 189.827821][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 189.833461][ C1] ? rcu_is_watching+0x12/0xc0 [ 189.838227][ C1] process_one_work+0x9ba/0x1b20 [ 189.843170][ C1] ? __pfx_process_one_work+0x10/0x10 [ 189.848546][ C1] ? assign_work+0x1a0/0x250 [ 189.853139][ C1] worker_thread+0x6c8/0xf10 [ 189.857733][ C1] ? __kthread_parkme+0x19e/0x250 [ 189.862747][ C1] ? __pfx_worker_thread+0x10/0x10 [ 189.867851][ C1] kthread+0x3c5/0x780 [ 189.871913][ C1] ? __pfx_kthread+0x10/0x10 [ 189.876497][ C1] ? rcu_is_watching+0x12/0xc0 [ 189.881246][ C1] ? __pfx_kthread+0x10/0x10 [ 189.885826][ C1] ret_from_fork+0x983/0xb10 [ 189.890411][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 189.895515][ C1] ? __switch_to+0x7af/0x10d0 [ 189.900184][ C1] ? __pfx_kthread+0x10/0x10 [ 189.904770][ C1] ret_from_fork_asm+0x1a/0x30 [ 189.909543][ C1] [ 189.912546][ C1] rcu: rcu_preempt kthread starved for 10607 jiffies! g8993 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 189.923636][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 189.933597][ C1] rcu: RCU grace-period kthread stack dump: [ 189.939476][ C1] task:rcu_preempt state:R running task stack:28328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 189.952954][ C1] Call Trace: [ 189.956220][ C1] [ 189.959150][ C1] ? __schedule+0x10b9/0x6150 [ 189.963819][ C1] __schedule+0x1139/0x6150 [ 189.968313][ C1] ? __lock_acquire+0x436/0x2890 [ 189.973247][ C1] ? __mod_timer+0x8f2/0xd30 [ 189.977838][ C1] ? __pfx___schedule+0x10/0x10 [ 189.982677][ C1] ? find_held_lock+0x2b/0x80 [ 189.987350][ C1] ? schedule+0x2d7/0x3a0 [ 189.991677][ C1] schedule+0xe7/0x3a0 [ 189.995744][ C1] schedule_timeout+0x123/0x290 [ 190.000584][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 190.005943][ C1] ? __pfx_process_timeout+0x10/0x10 [ 190.011228][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.017025][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 190.022480][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 190.027239][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 190.032517][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.037711][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 190.042655][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 190.047502][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 190.053305][ C1] rcu_gp_kthread+0x26d/0x380 [ 190.057976][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 190.063162][ C1] ? rcu_is_watching+0x12/0xc0 [ 190.067920][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.073112][ C1] ? __kthread_parkme+0x19e/0x250 [ 190.078124][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 190.083314][ C1] kthread+0x3c5/0x780 [ 190.087375][ C1] ? __pfx_kthread+0x10/0x10 [ 190.091957][ C1] ? rcu_is_watching+0x12/0xc0 [ 190.096708][ C1] ? __pfx_kthread+0x10/0x10 [ 190.101290][ C1] ret_from_fork+0x983/0xb10 [ 190.105872][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 190.110977][ C1] ? __switch_to+0x7af/0x10d0 [ 190.115644][ C1] ? __pfx_kthread+0x10/0x10 [ 190.120225][ C1] ret_from_fork_asm+0x1a/0x30 [ 190.124999][ C1] [ 190.128005][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 190.134325][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 190.143248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.153289][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 190.158919][ C1] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 190.178517][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 190.184575][ C1] RAX: 0000000000c741a1 RBX: 0000000000000001 RCX: ffffffff8b7866d9 [ 190.192539][ C1] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400 [ 190.200501][ C1] RBP: ffffed1003b59498 R08: 0000000000000001 R09: ffffed10170a673d [ 190.208459][ C1] R10: ffff8880b85339eb R11: ffff88801dacaff0 R12: 0000000000000001 [ 190.216416][ C1] R13: ffff88801daca4c0 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 190.224375][ C1] FS: 0000000000000000(0000) GS:ffff8881249f4000(0000) knlGS:0000000000000000 [ 190.233291][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.239861][ C1] CR2: 000020000004d000 CR3: 000000003415d000 CR4: 00000000003526f0 [ 190.247823][ C1] Call Trace: [ 190.251090][ C1] [ 190.254007][ C1] default_idle+0x13/0x20 [ 190.258331][ C1] default_idle_call+0x6c/0xb0 [ 190.263087][ C1] do_idle+0x38d/0x510 [ 190.267156][ C1] ? __pfx_do_idle+0x10/0x10 [ 190.271749][ C1] cpu_startup_entry+0x4f/0x60 [ 190.276506][ C1] start_secondary+0x21d/0x2d0 [ 190.281256][ C1] ? __pfx_start_secondary+0x10/0x10 [ 190.286534][ C1] common_startup_64+0x13e/0x148 [ 190.291474][ C1]