last executing test programs: 5.667940411s ago: executing program 0 (id=1963): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 5.526338051s ago: executing program 0 (id=1964): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @remote, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x40048d1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff8520000001000000950000c0b0611800"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt(r0, 0xdf, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x16) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4001, 0x82, &(0x7f0000000940)="9a09f21259153e7fc4f9347a00317da52c5c2347b455a33e43df50ee7f38c79e6b0ba6573a4769c39ce7ab7316e96dac80312a126704b497e32b1eebf6aba7a4bb5638b43738e73c34b34a37ba61f2200e443ef6c3ec8e20699e7fc538b4fe72f6479efbe1bea48bcaf9f688e24023c5be8279fc240c2285999d0321dd31677b4be7"}], 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5.406370124s ago: executing program 4 (id=1965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, 0x0, 0x0, 0x2) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) (async, rerun: 64) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x8004) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffa, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b482b0ba4854"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5f863c733b07"}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) (rerun: 64) 5.206032249s ago: executing program 4 (id=1968): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x3e8a, &(0x7f00000000c0)={0x0, 0x1b12, 0x13090, 0x3, 0x1bc}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180)) io_submit(r0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x9, r1, 0x0}]) io_uring_enter(r1, 0x2947, 0x2d1a, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="7f0000003a000080080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r2, 0xffffffffffffffff, 0x2c}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r6, 0x18, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) 4.885983658s ago: executing program 0 (id=1972): r0 = dup(0xffffffffffffffff) pwritev2(r0, 0x0, 0x0, 0x8, 0x3, 0x7) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x1, 0x20b, 0x2, 0x8, 0x2]}, &(0x7f0000000140)=0x78) 4.675765813s ago: executing program 4 (id=1973): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0xcc8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3f}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000300)='R', 0x1}], 0x1}}], 0x2, 0x40088d4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x8, 0xe3bc}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x7fffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) sched_setattr(0x0, &(0x7f0000001180)={0x38, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x8, 0x9, 0x74, 0x8}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xfffffffd, 0x6, 0x5, 0x73, 0x3bd74236}, 0xa, 0x80, [{0x3, 0x7ff, 0x1, 0x4, 0xa, 0x8}]}, [{0x38, 0x7fff, 0xf8e8, 0x1e3, 0x10001, 0x3}, {0x5, 0x2, 0x8, 0xffffffff, 0x101, 0x8}, {0x1, 0x4, 0x6, 0x5, 0x1, 0x6}, {0xb87c, 0x800000, 0x4f5, 0xb, 0x400, 0x48c8472b}, {0x5, 0x4, 0x40, 0x1ff, 0x6, 0x8}, {0x4, 0x5, 0x3, 0x8, 0xd5, 0x4}, {0xfff, 0x8, 0x0, 0xff, 0x8, 0x9}, {0x10000, 0x8, 0x6acdc544, 0xf3, 0xc0, 0x200}, {0x80000001, 0x9, 0x0, 0x0, 0x101, 0xfffffffb}, {0x7fffffff, 0xaa45, 0x2, 0x2b, 0x6, 0x8}, {0x7, 0x1b5, 0xfffffffa, 0x2, 0x0, 0x10001}, {0x7fff, 0x1d, 0x3ff, 0x10, 0x5, 0x99f}, {0xcb2, 0x3, 0xffffffff, 0x80000001, 0x5, 0x85d1}, {0x7, 0x5, 0x8d1, 0x8fa, 0x80, 0x800}, {0x2, 0x1, 0xb, 0x6, 0x5, 0x6}, {0x3ff, 0x4, 0xa, 0x200, 0xfffffff7, 0xd}, {0xd86, 0x800, 0x4, 0x9, 0x36, 0x4}, {0x3, 0x7, 0x4, 0x0, 0x6, 0x100}, {0x7, 0x9d, 0x7, 0x40, 0x4, 0x8}, {0x6, 0x10, 0x8, 0x10000, 0x3, 0x949}, {0x4, 0x0, 0x2, 0x5, 0x100, 0x9}, {0x10, 0x6, 0x7, 0x1, 0xf, 0x4}, {0x56a, 0x8, 0x0, 0x1, 0x6512, 0xb1c}, {0x401, 0x3, 0x1, 0x8, 0xffffffc9, 0x8}, {0x7ff, 0xffffffff, 0x4, 0x80000000, 0x10, 0x3}, {0x7fffffff, 0xffffffff, 0x4165, 0x4, 0xc}, {0x4, 0xc8e4, 0x80000000, 0x0, 0xfffffffc, 0xffffff25}, {0x4, 0x10000, 0x10001, 0x7, 0x0, 0x8}, {0x8000, 0x3, 0xf, 0x1ea, 0x7, 0x4}, {0x3ff, 0x8, 0x401, 0x3, 0x8, 0x5428}, {0x2, 0x5, 0x8, 0x4, 0x59c, 0x9}, {0x7, 0xfac00000, 0x6, 0x7d1, 0x3ff, 0x3}, {0x3, 0x0, 0x7ff, 0x401, 0x9e, 0x800}, {0x80000000, 0x9, 0x6, 0xd5, 0xf7, 0x9}, {0x0, 0x5, 0xff, 0xc, 0x1, 0x9}, {0x4, 0x7, 0x9, 0x2, 0x9, 0x9}, {0x97, 0xfd0, 0x0, 0x8, 0x6, 0x7}, {0x7df, 0x6, 0x0, 0xfffffff7, 0x8, 0x7}, {0x7, 0xe265, 0xc, 0x9, 0x9, 0x2}, {0x7, 0x5, 0x6, 0x0, 0x5, 0xf4}, {0xff, 0x6, 0x5, 0xa, 0x6, 0xfff}, {0xa85, 0x22f, 0x10000, 0x5, 0x9, 0x9}, {0x4, 0x8f94, 0x7fff, 0x15454a94, 0x1, 0x7}, {0x4, 0xf, 0x2, 0xafc, 0x2, 0x4}, {0x25, 0x3ff, 0xfffffffd, 0x9, 0x6, 0x4}, {0x1, 0x1, 0x5, 0x7f, 0x1, 0x7ff}, {0x2, 0x0, 0x6, 0x9, 0xd, 0x47}, {0x7, 0x2b, 0x7fffffff, 0x9, 0x2, 0x5a17}, {0x7, 0x200, 0x3ff, 0x7, 0x400, 0x4}, {0x3, 0x3, 0x3, 0x3}, {0x8, 0x0, 0x1, 0x6, 0x6, 0x800}, {0x7f, 0x7, 0x4, 0xfffffff7, 0xc, 0xffff}, {0x0, 0x6, 0x587, 0x1000, 0xffffff70, 0x2}, {0x0, 0x4, 0x2, 0x3, 0x7, 0x2}, {0x10001, 0x8, 0x9, 0xe, 0x2, 0x7}, {0x5, 0x6218, 0x1000, 0x43, 0x0, 0x31}, {0x3, 0xffff, 0xe5e, 0x7, 0xffffff95, 0xa}, {0x4, 0x9ed, 0x1, 0x10, 0xf, 0x10}, {0x7e4a8d3b, 0x5, 0x401, 0x5c, 0x10, 0x3}, {0x2, 0xffff, 0x6, 0x100, 0x1000, 0x287}, {0xbe61, 0x3, 0x8000, 0xffffff7f, 0xb9b, 0x1}, {0x81, 0xd92, 0x7, 0x3, 0x10001, 0xfff}, {0x7e924bf4, 0xfffffffc, 0x3, 0x4, 0x2, 0x400}, {0x59, 0x8, 0x8, 0xfffffffd, 0x2, 0x4}, {0x8, 0xff, 0x0, 0x3, 0x3, 0x4}, {0x9, 0x351f, 0x7, 0xf66e, 0x1, 0xff}, {0x2, 0x95, 0xe7, 0x8}, {0x8, 0xfffffffe, 0x4, 0x400, 0x7f, 0x1}, {0x1, 0x8, 0x200, 0x0, 0x8, 0x7}, {0xfffe0000, 0x5, 0x4e2, 0x7, 0x7, 0x7f}, {0x6b, 0x7fffffff, 0x3b55000, 0x0, 0x342}, {0x0, 0x4, 0x6, 0xffff, 0x6, 0x4}, {0xffffff01, 0x7, 0x81, 0x2, 0x4, 0x1}, {0x9, 0x8, 0x3ff, 0x0, 0xffff, 0x1ff}, {0x3, 0x214d0f3a, 0x3469, 0x9, 0xffff, 0x3}, {0xd, 0x6, 0xff, 0x1, 0x0, 0x10}, {0x10, 0x3, 0x81, 0x4, 0x5, 0x5}, {0x3, 0x4, 0xfffffbff, 0x3, 0x401, 0x7}, {0x7fffffff, 0x2, 0x80000000, 0x1, 0xfffff000, 0x723}, {0x3, 0xa7cc, 0x8, 0x100, 0x2, 0x8}, {0x2, 0x18000000, 0x8000, 0x7f, 0x7, 0x8001}, {0x101, 0x6, 0x4, 0xe4, 0x0, 0x1000}, {0x6, 0x38c, 0x9, 0xe8c, 0x6}, {0x1, 0xfffffff9, 0x9, 0x4, 0xfd, 0x1}, {0x400, 0xc8, 0x0, 0x4, 0x7, 0x10001}, {0x8, 0x9c4, 0x1, 0x80000000, 0x3ff, 0x81}, {0x4778, 0x7, 0x8, 0x1, 0xffffffff, 0x8}, {0xf1, 0x2, 0x0, 0xac61, 0xac87, 0xa}, {0x3ff, 0x0, 0x9, 0x23c3c7c, 0x400, 0x9}, {0x0, 0x8b, 0x3, 0x2, 0x1, 0x1}, {0x5, 0x8c, 0x6, 0x3, 0x3, 0x1}, {0x1fd, 0x3, 0x9, 0x9, 0x82a, 0x5bd}, {0x2, 0x6, 0x1, 0x10001, 0xb1af, 0xfffffff7}, {0xf, 0x80000001, 0x1, 0x900, 0x1, 0x2}, {0xffff, 0x3, 0x777, 0xffffff6b, 0x4, 0x401}, {0x3c, 0x3, 0x5, 0x45e, 0xb, 0x1}, {0x7, 0x1, 0x7, 0x0, 0x6, 0xb80}, {0x5, 0xf, 0x5, 0x2, 0x77, 0xfff}, {0x2, 0x28, 0x7, 0x4, 0x1, 0x7}, {0x2, 0x2, 0xe, 0x1a40, 0x2, 0x4524}, {0x1, 0x1, 0x7ff, 0xffff8000, 0x1, 0x1}, {0x5, 0x9, 0x8, 0x2, 0x6, 0x3ff}, {0x1, 0x2, 0x4, 0xa2, 0x284c649f, 0x2}, {0x1, 0xf, 0x874, 0x2, 0x2, 0x6}, {0x2293, 0x4, 0x7, 0x3, 0x0, 0x9}, {0x3, 0x400, 0x87, 0x0, 0x8, 0x2}, {0x1, 0x1b17c, 0x6, 0x3, 0xa2a8, 0x3}, {0x6, 0x2, 0xc, 0x1ff, 0x2, 0x2}, {0x7, 0xcf3, 0x1, 0x282, 0x3, 0xf1d}, {0x10000, 0x0, 0x4, 0xd, 0x200, 0xa62}, {0x149e, 0x2, 0x1, 0xec14, 0x4, 0x8}, {0x5, 0x7fffffff, 0x401, 0x5, 0x0, 0x4}, {0x7, 0x21, 0x3, 0x2, 0x13b6, 0x2}, {0x4, 0xfffffffc, 0x62, 0x4, 0xe0000000, 0x1000}, {0x677, 0xfffffc01, 0xff, 0x10001, 0x7, 0x4d00000}, {0x5, 0xfb6e, 0x9, 0x2, 0x2, 0x9}, {0x9, 0x3, 0x3, 0x9, 0x101, 0x8db}, {0x80000001, 0xd2e7, 0x7, 0x5, 0x2f7, 0xfffffff9}, {0xd, 0x1, 0x6, 0x8, 0xfffffff7}, {0x1000, 0x4, 0x7, 0x5dfe, 0x2, 0x2}, {0x4, 0x3, 0x7f, 0x2, 0x3, 0xd}, {0x3, 0x894, 0x101, 0x10000, 0x76f, 0x5}, {0xd, 0x0, 0x9, 0x7, 0x1, 0x3a64}, {0xfff, 0x5, 0x9, 0x8}, {0xe51, 0x69f, 0x6b, 0x8, 0x2, 0x9}, {0x5, 0x7, 0x9, 0x4, 0x5, 0xf33}, {0x9, 0x5, 0x0, 0x100, 0x2, 0x101}, {0xa, 0x7f, 0xfffffff9, 0x9, 0x2, 0x9}], [{0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x8}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x7, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0xebdc55b9c68bfc8}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x97ad4ea790579854, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x4}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 4.28484187s ago: executing program 4 (id=1975): syz_emit_ethernet(0x3e, &(0x7f00000016c0)=ANY=[@ANYBLOB="e331100100fdaaaaaaaaaa0086dd00083a00fe800000000000000000000000000000fe8000000000000000000000000000aa800090780000000000000000"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r0 = socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00\x00\x00', @ANYRES32], 0x20) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x512f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @remote}) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r4, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f35", 0x11}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000a20000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/42, 0x2a, 0x0, &(0x7f00000002c0)=""/251, 0xfb}, &(0x7f0000000400)=0x40) sendmmsg$inet_sctp(r5, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="a12805201a83745c98b3f122ade270301cbdc5ed8c2827c8fd6d3dfef02c6193f1cef6e2a7c9bf47c1eac346c1dbbca21c5568ec1dd48ccc61eb0e2085e4d6159e924408cb38014e1ba5d69844f17b031a0b9c546b6946cd7742110c7ceef4b506a0fc3d766e9ea9e6e968607b35cb61b162601c7bd73606cd2c91dc516319a9de3b461e59eda1feae138a05a280f365f91cbbe2ce25488b56344e7557d38a788f373eb07aa881a444c7e7e2d0709b9e686c00f328a56a948733a001ecd0ae1de87762420dc51ceb5b983780e17cc9cf0ecd3884694c6fcc205ad89ebbcc5a0f1e0d5474e28ed15f1247848c3f409b4e1824eed7994b5abc3558dce47b8bb063522732436c80256ffaf9f2201c4f640e82c5587284f92661c13c46ba60e48d8b9bca1292e6f5e991eb552162fdf402dd7dd85c754e55410c53377dbd75b6fd3bfe6e1ddbcfcc275e512a654a5efb38f52fe1000efdd6a5a39f6eed522652d34ae081824da048e9ee56b9dfe99164a2e80bddeeda59415a509282d503e65e5d877aab95d266a5b45525bd0502337ad5194c06813aef1ff7f6654ecfda8dd6562f994937314be3350660dd810e5370899a9a6f25031246e42e6be9d2e813fe68ebf6acd11bf342c4431f4f5036950d81ba1446a2fcda3b2cd308a622b40742b81cb9159abda09ec64c1fd25c2b9ac3e215fdd1f1b18f5e6fd5e15e98275afb08ed30ef45583b89cb4a2c9dd0e167234f1e0486f270bf1c50f26bb9396868b50cf8947b8253758bc636a1a9ba8931900804adedf980298459ad234468ec2e0d59730f3f585e2ee1c468e74f82d07bbb81ba708b6e3cca889288ed310a0740ec64d91d34021b9171323e5790919a359782f007a56f0f76c711e65b93b7cf15f2f793b602bf96a319881b3b56c996dfa30179dce397b3a7f372164033de8be7098f74ab910e4c72f16d129b3be713cc09da713a359da29a91b1ac4971eafefc48268f3b97ad9c71b1f0cb18d44a4d1edf60194d56c84df329489270b02ca199afb75ff65a64fcea7c3adae693abc435faa7b23974f769e2e92a1c806d48b3ff243c714d3b826c591003b39cc9416897f69a705a30e26dfea51d527dcc9fbcb21540379566c8ff35db07ab8aa2391ae432841bc6cc00ec9fe558e691794775558ba027110162dc0ffbe36cf4a7d1a72dc95b7298fd16f1aa899efac1c434fd5c2b1fd4e1a3cfdbbdeff78d81df512656a4fae69f76a78614b7d2f37b9e4bf17fc2221eba193855046058fd3b7df6b5c418cf756c12770debe525dc53b9133e4ddcdeffe8fabe6680ce51c340a67e3d8620ffbf56ac9f0c2217940d81888d0d669f53baf3bd833eeb84800766295a7b629e30316c297106ddcc02824deed731ab7c66dbc4e3292ff2a87e6e5075b35f1c6fc803667795531be1729f29b66d399b8b2a41fb70a6424c17ef8afa027b9b2488bfd6e1723e95b33e3f6e9d6eb15567ffe1901d2b4bd5b0c3e93da2ce0234ca33d0557d3863a33b62af1052ac57415d9d4f3d306089a18b653277b9eda5e23838a19ef803b3f13b7fd0c5cb8dce2ca335b78c61dd56517a75d3ca9891a69b20ac4a235ad4138ef70de16346bb48badb639d8f6222c91c12daee739c35277c8288c7d00bb39a61d95e0d7b42a46a24c31d8bdfb4c471a5efaf4e0d2bd58a8fface974f8b563789ef13563ef44badbe29eaf91cf458c7317d5556eb9d1323c2a5e8905b5f62ccf905fd6bdb9b1ef8706d5931e6332cbf151f65e83dd91685b7d4acf643be5c96d02264bebea22e009b68ace3739475c4074488f40eda11ca394275fc6577981341d4fdc439fbe40178", 0x51c}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10) 3.785755415s ago: executing program 0 (id=1979): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000006c0)=[{{&(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}}], 0x1, 0x14080880) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x2d5, 0x4) recvmmsg(r3, 0x0, 0x0, 0x1000000000fe, 0x0) 3.693234042s ago: executing program 2 (id=1981): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 3.566458368s ago: executing program 2 (id=1982): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @remote, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="28000000000000002900000039000000ff02000700000000fe880000000000000000000000000101880000000000000029000000390000003c0e010500000000fc000000000000000000000000000001ff010000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000b80000000000000029000000390000000614010b0000000000000000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000aa20010000000000000000000000000002fe88000000000000000000000000000100000000000000000000ffff00000000fc000000000000000000000000000001fe880000000000000000000000000101fe8000000000000000000000000000aafe8000000000000000000000000000bb1400000000000000290000003e0000000400000000000000500000000000000029000000360000009e06000000000000010900000000000000000001000718000000000409090006000000000000000400000000000000c2040000000305026e1a0000000000000058000000000000002900000039000000110802050000000000000000000000000000ffff0a01010120010000000000000000000000000000fe80000000000000000000000000003e000000000000000000000000ff00000028000000000000002900000004000000020100000000000005020001c2040001000000010000000014000000000000002900000008000000050000000000000014"], 0x280}}], 0x1, 0x40048d1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff8520000001000000950000c0b0611800"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt(r0, 0xdf, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x16) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4001, 0x82, &(0x7f0000000940)="9a09f21259153e7fc4f9347a00317da52c5c2347b455a33e43df50ee7f38c79e6b0ba6573a4769c39ce7ab7316e96dac80312a126704b497e32b1eebf6aba7a4bb5638b43738e73c34b34a37ba61f2200e443ef6c3ec8e20699e7fc538b4fe72f6479efbe1bea48bcaf9f688e24023c5be8279fc240c2285999d0321dd31677b4be7"}], 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 3.438735097s ago: executing program 1 (id=1983): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x3e8a, &(0x7f00000000c0)={0x0, 0x1b12, 0x13090, 0x3, 0x1bc}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180)) io_submit(r0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x9, r1, 0x0}]) io_uring_enter(r1, 0x2947, 0x2d1a, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="7f0000003a000080080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r2, 0xffffffffffffffff, 0x2c}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r6, 0x18, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) 3.203826001s ago: executing program 3 (id=1984): r0 = socket(0x10, 0x803, 0x0) fdatasync(r0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x80, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49851}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x501040) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xd8, &(0x7f00000000c0)="b84ba0753a4063f518909d2d63a66f44eada3c81879130efcccfd3cd43863b46bc115a69bccf2a93cccc4df0f8ac1c4de56c4356928e96cce6d533a425ca8eb45cb238f8055a0772ff1d1fc722a47c2dfd1270c72018977552ce7a5881a6ac12b8d163b7844dc5da195ea10b496dd18cfb273758c443a7c89730a0b6b290bf75f12bd0c8b42691d5efeba3a4a707c4a672e0bf2a23f572786d14374b94db3323d53e5cd188f193101eafa9b5ecdd8e0512a55fc6a73d0796d9f12f65804f424eb704580cc995383b3ba1f7bcd2bc77155656caea0716a496"}) vmsplice(r1, &(0x7f0000001900)=[{&(0x7f0000000200)="e3733daf234fec0efe749c829e74112bac8f358d3088f942089cae5f56bc944a34e7379a05eaa746d4af2f9c91c77b056308a9f18060e4e3204c95aacc5ebee3133874e7e1438aaa0180e5021fd7166e33800545ebce60962b68639fa19193175cef2298200ee746a83e1f7d8f0492aa4926c4fd3e9d550153d251e885bf79b7d1c15e069d4288be98c8732e6ded07ab9c862e603909", 0x96}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="7ad59cb4dbfd38dbf3193fd85c2f464f63c45433e037c6ced777df444687edfd798d2511bcb988c69edd74a88d87131aa0243e93c77bf1489d6503ab92ef84dd81f6a2e2ce3a260174b0c381d121c100bc8891e134001c2b3a6286adb8d11fec8059d8b8192bd3ea1079e3c32c6db45b3082ba10ca34", 0x76}, {&(0x7f00000016c0)="0694bf1271e6cf053df4296763a88ec898ba6b3c62a615c05b89524902d75ac726515e7f18d7f52a16bccaeb5a2adf7fd9eb9b4406f7a6488acb805b60088e4bdf8ec2b5546a7576a143a70c6ed5d36bae36dbf02cef7a364e1dac214857918e4abd5ef7c998bdf42eb53dfca87d68016e1d0aaac7a728eff29bca369f0563958f9375457ca27d571b318acfb049146953b4816841", 0x95}, {&(0x7f0000001780)="6c99d6b91a754063ce1a95caad3c694e3c81c9ef26341ffef6e7eb2eed7daacaa279ddaa65feffcd7349093255b17fe489ce5911b5c6b9fe798a9c6ba7c8850b4db7efe02deeaaa2f8278ca3c1", 0x4d}, {&(0x7f0000001800)="548c488ed6c34e8ef0ef182e0cf72513c8ff4a995cad7d2bf675247fc3b84feb6e1358660e2b3574ec7cc45018c0e8b9dc71cf1441ddd679e55001f4ca78ba7ec706260a06142066f769094b9b0123fae076c52dca5d128642f51a52e00c60e76553bae9b17c1e8378ee5aa2558789d6f642017a7eb19b169112561066990b154426534e75e333f623037910a5787f2d03ad40c2dd6a25d76ef1a9b834bbdc31dbdcad5b72d5ec1b1a86a14b286a6666129a67ff0b398c7ac375bd1dcce5f944db0b89c30f3a118ca5741c4e17ffff1cf388fddc", 0xd4}], 0x6, 0x5) socket(0x10, 0x803, 0x0) (async) fdatasync(r0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x80, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49851}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x501040) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xd8, &(0x7f00000000c0)="b84ba0753a4063f518909d2d63a66f44eada3c81879130efcccfd3cd43863b46bc115a69bccf2a93cccc4df0f8ac1c4de56c4356928e96cce6d533a425ca8eb45cb238f8055a0772ff1d1fc722a47c2dfd1270c72018977552ce7a5881a6ac12b8d163b7844dc5da195ea10b496dd18cfb273758c443a7c89730a0b6b290bf75f12bd0c8b42691d5efeba3a4a707c4a672e0bf2a23f572786d14374b94db3323d53e5cd188f193101eafa9b5ecdd8e0512a55fc6a73d0796d9f12f65804f424eb704580cc995383b3ba1f7bcd2bc77155656caea0716a496"}) (async) vmsplice(r1, &(0x7f0000001900)=[{&(0x7f0000000200)="e3733daf234fec0efe749c829e74112bac8f358d3088f942089cae5f56bc944a34e7379a05eaa746d4af2f9c91c77b056308a9f18060e4e3204c95aacc5ebee3133874e7e1438aaa0180e5021fd7166e33800545ebce60962b68639fa19193175cef2298200ee746a83e1f7d8f0492aa4926c4fd3e9d550153d251e885bf79b7d1c15e069d4288be98c8732e6ded07ab9c862e603909", 0x96}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="7ad59cb4dbfd38dbf3193fd85c2f464f63c45433e037c6ced777df444687edfd798d2511bcb988c69edd74a88d87131aa0243e93c77bf1489d6503ab92ef84dd81f6a2e2ce3a260174b0c381d121c100bc8891e134001c2b3a6286adb8d11fec8059d8b8192bd3ea1079e3c32c6db45b3082ba10ca34", 0x76}, {&(0x7f00000016c0)="0694bf1271e6cf053df4296763a88ec898ba6b3c62a615c05b89524902d75ac726515e7f18d7f52a16bccaeb5a2adf7fd9eb9b4406f7a6488acb805b60088e4bdf8ec2b5546a7576a143a70c6ed5d36bae36dbf02cef7a364e1dac214857918e4abd5ef7c998bdf42eb53dfca87d68016e1d0aaac7a728eff29bca369f0563958f9375457ca27d571b318acfb049146953b4816841", 0x95}, {&(0x7f0000001780)="6c99d6b91a754063ce1a95caad3c694e3c81c9ef26341ffef6e7eb2eed7daacaa279ddaa65feffcd7349093255b17fe489ce5911b5c6b9fe798a9c6ba7c8850b4db7efe02deeaaa2f8278ca3c1", 0x4d}, {&(0x7f0000001800)="548c488ed6c34e8ef0ef182e0cf72513c8ff4a995cad7d2bf675247fc3b84feb6e1358660e2b3574ec7cc45018c0e8b9dc71cf1441ddd679e55001f4ca78ba7ec706260a06142066f769094b9b0123fae076c52dca5d128642f51a52e00c60e76553bae9b17c1e8378ee5aa2558789d6f642017a7eb19b169112561066990b154426534e75e333f623037910a5787f2d03ad40c2dd6a25d76ef1a9b834bbdc31dbdcad5b72d5ec1b1a86a14b286a6666129a67ff0b398c7ac375bd1dcce5f944db0b89c30f3a118ca5741c4e17ffff1cf388fddc", 0xd4}], 0x6, 0x5) (async) 3.079590635s ago: executing program 1 (id=1985): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0xcc8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3f}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000300)='R', 0x1}], 0x1}}], 0x2, 0x40088d4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x8, 0xe3bc}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x7fffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) sched_setattr(0x0, &(0x7f0000001180)={0x38, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x8, 0x9, 0x74, 0x8}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xfffffffd, 0x6, 0x5, 0x73, 0x3bd74236}, 0xa, 0x80, [{0x3, 0x7ff, 0x1, 0x4, 0xa, 0x8}]}, [{0x38, 0x7fff, 0xf8e8, 0x1e3, 0x10001, 0x3}, {0x5, 0x2, 0x8, 0xffffffff, 0x101, 0x8}, {0x1, 0x4, 0x6, 0x5, 0x1, 0x6}, {0xb87c, 0x800000, 0x4f5, 0xb, 0x400, 0x48c8472b}, {0x5, 0x4, 0x40, 0x1ff, 0x6, 0x8}, {0x4, 0x5, 0x3, 0x8, 0xd5, 0x4}, {0xfff, 0x8, 0x0, 0xff, 0x8, 0x9}, {0x10000, 0x8, 0x6acdc544, 0xf3, 0xc0, 0x200}, {0x80000001, 0x9, 0x0, 0x0, 0x101, 0xfffffffb}, {0x7fffffff, 0xaa45, 0x2, 0x2b, 0x6, 0x8}, {0x7, 0x1b5, 0xfffffffa, 0x2, 0x0, 0x10001}, {0x7fff, 0x1d, 0x3ff, 0x10, 0x5, 0x99f}, {0xcb2, 0x3, 0xffffffff, 0x80000001, 0x5, 0x85d1}, {0x7, 0x5, 0x8d1, 0x8fa, 0x80, 0x800}, {0x2, 0x1, 0xb, 0x6, 0x5, 0x6}, {0x3ff, 0x4, 0xa, 0x200, 0xfffffff7, 0xd}, {0xd86, 0x800, 0x4, 0x9, 0x36, 0x4}, {0x3, 0x7, 0x4, 0x0, 0x6, 0x100}, {0x7, 0x9d, 0x7, 0x40, 0x4, 0x8}, {0x6, 0x10, 0x8, 0x10000, 0x3, 0x949}, {0x4, 0x0, 0x2, 0x5, 0x100, 0x9}, {0x10, 0x6, 0x7, 0x1, 0xf, 0x4}, {0x56a, 0x8, 0x0, 0x1, 0x6512, 0xb1c}, {0x401, 0x3, 0x1, 0x8, 0xffffffc9, 0x8}, {0x7ff, 0xffffffff, 0x4, 0x80000000, 0x10, 0x3}, {0x7fffffff, 0xffffffff, 0x4165, 0x4, 0xc}, {0x4, 0xc8e4, 0x80000000, 0x0, 0xfffffffc, 0xffffff25}, {0x4, 0x10000, 0x10001, 0x7, 0x0, 0x8}, {0x8000, 0x3, 0xf, 0x1ea, 0x7, 0x4}, {0x3ff, 0x8, 0x401, 0x3, 0x8, 0x5428}, {0x2, 0x5, 0x8, 0x4, 0x59c, 0x9}, {0x7, 0xfac00000, 0x6, 0x7d1, 0x3ff, 0x3}, {0x3, 0x0, 0x7ff, 0x401, 0x9e, 0x800}, {0x80000000, 0x9, 0x6, 0xd5, 0xf7, 0x9}, {0x0, 0x5, 0xff, 0xc, 0x1, 0x9}, {0x4, 0x7, 0x9, 0x2, 0x9, 0x9}, {0x97, 0xfd0, 0x0, 0x8, 0x6, 0x7}, {0x7df, 0x6, 0x0, 0xfffffff7, 0x8, 0x7}, {0x7, 0xe265, 0xc, 0x9, 0x9, 0x2}, {0x7, 0x5, 0x6, 0x0, 0x5, 0xf4}, {0xff, 0x6, 0x5, 0xa, 0x6, 0xfff}, {0xa85, 0x22f, 0x10000, 0x5, 0x9, 0x9}, {0x4, 0x8f94, 0x7fff, 0x15454a94, 0x1, 0x7}, {0x4, 0xf, 0x2, 0xafc, 0x2, 0x4}, {0x25, 0x3ff, 0xfffffffd, 0x9, 0x6, 0x4}, {0x1, 0x1, 0x5, 0x7f, 0x1, 0x7ff}, {0x2, 0x0, 0x6, 0x9, 0xd, 0x47}, {0x7, 0x2b, 0x7fffffff, 0x9, 0x2, 0x5a17}, {0x7, 0x200, 0x3ff, 0x7, 0x400, 0x4}, {0x3, 0x3, 0x3, 0x3}, {0x8, 0x0, 0x1, 0x6, 0x6, 0x800}, {0x7f, 0x7, 0x4, 0xfffffff7, 0xc, 0xffff}, {0x0, 0x6, 0x587, 0x1000, 0xffffff70, 0x2}, {0x0, 0x4, 0x2, 0x3, 0x7, 0x2}, {0x10001, 0x8, 0x9, 0xe, 0x2, 0x7}, {0x5, 0x6218, 0x1000, 0x43, 0x0, 0x31}, {0x3, 0xffff, 0xe5e, 0x7, 0xffffff95, 0xa}, {0x4, 0x9ed, 0x1, 0x10, 0xf, 0x10}, {0x7e4a8d3b, 0x5, 0x401, 0x5c, 0x10, 0x3}, {0x2, 0xffff, 0x6, 0x100, 0x1000, 0x287}, {0xbe61, 0x3, 0x8000, 0xffffff7f, 0xb9b, 0x1}, {0x81, 0xd92, 0x7, 0x3, 0x10001, 0xfff}, {0x7e924bf4, 0xfffffffc, 0x3, 0x4, 0x2, 0x400}, {0x59, 0x8, 0x8, 0xfffffffd, 0x2, 0x4}, {0x8, 0xff, 0x0, 0x3, 0x3, 0x4}, {0x9, 0x351f, 0x7, 0xf66e, 0x1, 0xff}, {0x2, 0x95, 0xe7, 0x8}, {0x8, 0xfffffffe, 0x4, 0x400, 0x7f, 0x1}, {0x1, 0x8, 0x200, 0x0, 0x8, 0x7}, {0xfffe0000, 0x5, 0x4e2, 0x7, 0x7, 0x7f}, {0x6b, 0x7fffffff, 0x3b55000, 0x0, 0x342}, {0x0, 0x4, 0x6, 0xffff, 0x6, 0x4}, {0xffffff01, 0x7, 0x81, 0x2, 0x4, 0x1}, {0x9, 0x8, 0x3ff, 0x0, 0xffff, 0x1ff}, {0x3, 0x214d0f3a, 0x3469, 0x9, 0xffff, 0x3}, {0xd, 0x6, 0xff, 0x1, 0x0, 0x10}, {0x10, 0x3, 0x81, 0x4, 0x5, 0x5}, {0x3, 0x4, 0xfffffbff, 0x3, 0x401, 0x7}, {0x7fffffff, 0x2, 0x80000000, 0x1, 0xfffff000, 0x723}, {0x3, 0xa7cc, 0x8, 0x100, 0x2, 0x8}, {0x2, 0x18000000, 0x8000, 0x7f, 0x7, 0x8001}, {0x101, 0x6, 0x4, 0xe4, 0x0, 0x1000}, {0x6, 0x38c, 0x9, 0xe8c, 0x6}, {0x1, 0xfffffff9, 0x9, 0x4, 0xfd, 0x1}, {0x400, 0xc8, 0x0, 0x4, 0x7, 0x10001}, {0x8, 0x9c4, 0x1, 0x80000000, 0x3ff, 0x81}, {0x4778, 0x7, 0x8, 0x1, 0xffffffff, 0x8}, {0xf1, 0x2, 0x0, 0xac61, 0xac87, 0xa}, {0x3ff, 0x0, 0x9, 0x23c3c7c, 0x400, 0x9}, {0x0, 0x8b, 0x3, 0x2, 0x1, 0x1}, {0x5, 0x8c, 0x6, 0x3, 0x3, 0x1}, {0x1fd, 0x3, 0x9, 0x9, 0x82a, 0x5bd}, {0x2, 0x6, 0x1, 0x10001, 0xb1af, 0xfffffff7}, {0xf, 0x80000001, 0x1, 0x900, 0x1, 0x2}, {0xffff, 0x3, 0x777, 0xffffff6b, 0x4, 0x401}, {0x3c, 0x3, 0x5, 0x45e, 0xb, 0x1}, {0x7, 0x1, 0x7, 0x0, 0x6, 0xb80}, {0x5, 0xf, 0x5, 0x2, 0x77, 0xfff}, {0x2, 0x28, 0x7, 0x4, 0x1, 0x7}, {0x2, 0x2, 0xe, 0x1a40, 0x2, 0x4524}, {0x1, 0x1, 0x7ff, 0xffff8000, 0x1, 0x1}, {0x5, 0x9, 0x8, 0x2, 0x6, 0x3ff}, {0x1, 0x2, 0x4, 0xa2, 0x284c649f, 0x2}, {0x1, 0xf, 0x874, 0x2, 0x2, 0x6}, {0x2293, 0x4, 0x7, 0x3, 0x0, 0x9}, {0x3, 0x400, 0x87, 0x0, 0x8, 0x2}, {0x1, 0x1b17c, 0x6, 0x3, 0xa2a8, 0x3}, {0x6, 0x2, 0xc, 0x1ff, 0x2, 0x2}, {0x7, 0xcf3, 0x1, 0x282, 0x3, 0xf1d}, {0x10000, 0x0, 0x4, 0xd, 0x200, 0xa62}, {0x149e, 0x2, 0x1, 0xec14, 0x4, 0x8}, {0x5, 0x7fffffff, 0x401, 0x5, 0x0, 0x4}, {0x7, 0x21, 0x3, 0x2, 0x13b6, 0x2}, {0x4, 0xfffffffc, 0x62, 0x4, 0xe0000000, 0x1000}, {0x677, 0xfffffc01, 0xff, 0x10001, 0x7, 0x4d00000}, {0x5, 0xfb6e, 0x9, 0x2, 0x2, 0x9}, {0x9, 0x3, 0x3, 0x9, 0x101, 0x8db}, {0x80000001, 0xd2e7, 0x7, 0x5, 0x2f7, 0xfffffff9}, {0xd, 0x1, 0x6, 0x8, 0xfffffff7}, {0x1000, 0x4, 0x7, 0x5dfe, 0x2, 0x2}, {0x4, 0x3, 0x7f, 0x2, 0x3, 0xd}, {0x3, 0x894, 0x101, 0x10000, 0x76f, 0x5}, {0xd, 0x0, 0x9, 0x7, 0x1, 0x3a64}, {0xfff, 0x5, 0x9, 0x8}, {0xe51, 0x69f, 0x6b, 0x8, 0x2, 0x9}, {0x5, 0x7, 0x9, 0x4, 0x5, 0xf33}, {0x9, 0x5, 0x0, 0x100, 0x2, 0x101}, {0xa, 0x7f, 0xfffffff9, 0x9, 0x2, 0x9}], [{0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x8}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x7, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0xebdc55b9c68bfc8}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x97ad4ea790579854, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x4}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 3.064611752s ago: executing program 3 (id=1986): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x102) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x2000000000000080, 0x1, r3}}, 0x40) 2.97206958s ago: executing program 4 (id=1987): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2.701964959s ago: executing program 2 (id=1988): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) umount2(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 2.674073201s ago: executing program 1 (id=1989): r0 = dup(0xffffffffffffffff) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="620884e2079ec769fe1c09f25fc85f8b7f5c557aa8ae6a0e064612a07869a629e689fcb00c9223af8ff7a07b71da08bedd6c5654c08d1476602d856adbcb08d2bd18b88daf40ee32089238273c85bc04e5a4e41081bbfd2585a3818d9dc708132b6523d07e252d7d85f84ee5f6002115c55d8e5d2d0ff1e25685ef3173f4e0a48c16aba3d483233999aa98ead3bf35d0cede15036cdf3a2e0c760a7b425286f9a78d080715", 0xa5}], 0x1, 0x8, 0x3, 0x7) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x1, 0x20b, 0x2, 0x8, 0x2]}, &(0x7f0000000140)=0x78) 2.48650054s ago: executing program 3 (id=1990): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x585902) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000540)="1c0000005e001f3814584b0710f4ffffff0000000d00000078f7f3f8", 0x1c) r2 = userfaultfd(0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0xfd, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x3]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0xfffff000, {0xd34b, 0x117}, 0x10, 0x4}) socket(0x2, 0x80805, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x11, 0xd, 0x300) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x22) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) 1.834190573s ago: executing program 0 (id=1991): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108) r7 = accept4$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x80000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r8, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$inet6_opts(r7, 0x29, 0x37, 0x0, 0xffffffffffffff9e) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) 1.709324404s ago: executing program 2 (id=1992): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[]) 1.519566022s ago: executing program 2 (id=1993): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108) r7 = accept4$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x80000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r8, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$inet6_opts(r7, 0x29, 0x37, 0x0, 0xffffffffffffff9e) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) 1.441844679s ago: executing program 3 (id=1994): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000340)) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @remote, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x40048d1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff8520000001000000950000c0b0611800"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt(r0, 0xdf, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) mkdirat(r1, &(0x7f0000000400)='./file1\x00', 0x16) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4001, 0x82, &(0x7f0000000940)="9a09f21259153e7fc4f9347a00317da52c5c2347b455a33e43df50ee7f38c79e6b0ba6573a4769c39ce7ab7316e96dac80312a126704b497e32b1eebf6aba7a4bb5638b43738e73c34b34a37ba61f2200e443ef6c3ec8e20699e7fc538b4fe72f6479efbe1bea48bcaf9f688e24023c5be8279fc240c2285999d0321dd31677b4be7"}], 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000000010104acd577710000eeff141a00000200ffff06001240ffff0000"], 0x1c}}, 0x0) 1.2755787s ago: executing program 1 (id=1995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000193000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x2000000000000060, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x796378c48efb5449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.055338711s ago: executing program 1 (id=1996): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x3e8a, &(0x7f00000000c0)={0x0, 0x1b12, 0x13090, 0x3, 0x1bc}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180)) io_submit(r0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x9, r1, 0x0}]) io_uring_enter(r1, 0x2947, 0x2d1a, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="7f0000003a000080080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r2, 0xffffffffffffffff, 0x2c}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r6, 0x18, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) 730.814709ms ago: executing program 1 (id=1997): openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x15, 0x10001, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16=0x0], 0x14}}, 0x843250f2f06d60f4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e510a45bd95217d2b38c09fedae469737f49b6a3ef2793f4dae81d598e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0xbe5, 0x3, 0x4, 0x6f7, 0x3ff}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) r8 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) read$hiddev(0xffffffffffffffff, 0x0, 0x0) r9 = signalfd(r5, &(0x7f0000000040)={[0x1]}, 0x8) ioctl$RNDADDENTROPY(r9, 0x40085203, &(0x7f0000000180)={0x4, 0x3b, "d4c46cf23c466c6fbd28a3e13292efe4008a8bab4c8e1fe0b20167123714a4f3858200c440b6b3bc39f98b1204fdf4b67dfd00cd3edf703ce09de3"}) keyctl$setperm(0x5, r8, 0x14210927) 635.203474ms ago: executing program 3 (id=1998): r0 = syz_usb_connect$hid(0x0, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x35, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xbe, 0x8}}}}}]}}]}}, 0x0) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x1a, 0x28, {0x28, 0x11, "c263138501ba2c3cbfeace6f054b80b689ef1bec881bee81ce00"/38}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 483.45968ms ago: executing program 4 (id=1999): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) tkill(r1, 0x12) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000057c0)={&(0x7f0000005840)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x12ec}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x3, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = syz_open_dev$vcsa(&(0x7f0000000340), 0x1, 0x501183) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x1d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000008000000000000000900000018110000", @ANYRES32, @ANYBLOB="0080000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000b7080000000000007b8af8ff00000000b7080000a70000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000005000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0xff, &(0x7f0000000800)=""/255, 0x41000, 0x5a, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x1, 0x6, 0xb, 0xfffffff8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000980)=[{0x3, 0x1, 0x7, 0xa}, {0x2, 0x4, 0xd, 0xb}, {0x5, 0x1, 0x6, 0x4}, {0x4, 0x1, 0x6, 0xc}, {0x3, 0x2, 0xb, 0x2}, {0x0, 0x5, 0x5}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a80)={'gretap0\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x20, 0x7800, 0x9, 0x7, {{0x9, 0x4, 0x1, 0x2e, 0x24, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0x27, 0x3, 0xb, [{@empty, 0x80000001}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001140)={0xfffffffffffffed3, r8, 0x1, 0x7, 0x0, {0x1e}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x20008041) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB="18170000fcffffff000027000000850000007d00000095000000000000007791cae98cb7b823bc792b2e658566c601d8afc220825acbf29ae83d9567b775dd911f119cabc1493b1ebad6ee088fca49dfc46c3a79717fade98c485c0d164fa91da6a4c73328ded8aab21e92de5adad7460fe1674e763b8b97895a8053d2bbdca529336c2bb6291cfdd3117a53"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebb, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b900000000dbe9abc89b2b1259", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r11}, 0xc) mmap(&(0x7f0000d42000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 413.460484ms ago: executing program 0 (id=2000): syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = open(0x0, 0x64842, 0x86) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2217, 0x7721, 0x35, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socket(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@getsa={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfd, {@in=@multicast2, 0xc458, 0xa, 0x32}}, 0x28}}, 0x1a95e0a62f118818) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r7 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r7, 0x0, 0xfffffffffffffee0, 0x40800, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_usb_connect(0x4, 0x75b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1883], &(0x7f0000000ec0)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x2, 0xfc, 0xfc, 0x10, 0x4}, 0xc8, &(0x7f0000000f80)={0x5, 0xf, 0xc8, 0x3, [@ptm_cap={0x3}, @generic={0xb6, 0x10, 0x4, "5992b7de7d088b52a352e2d49bfe6888454188a130dccd8d46ae887b6c7af436bb5eba320ded320b69f358f37e5828f2aff338b37219c837e3a4d3267a2a6c1cb97cc78a06eef4edce306a499f6f44a26b7bb69e82c8b7732c62e4886954c52bdf0baedbbc5e57f951bbc5cbc41264dd2f0ad5f2564de923070e5d80b22a8f1794ccc2ce37db5cb2765b0c0ae54b99fe613c8caead5742bf0358ca28b8fdcd1824f79787609380ac18fc65fd3b38934740f287"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xa0, 0x4, 0x3}]}, 0xa, [{0x68, &(0x7f0000000940)=@string={0x68, 0x3, "3d7828ebc1bbc69602c505dae924631f855b29edf83c6aa17a4bca880d9b0103210385cb9bd3e80f8b16cf6fd36740152e48b3af2d57971d4bd370b63dc9846f84d2bca40c3f9b436f3c83be450626b96c109913cc151c821a1a7d5cb3d2e1975cac2c18286b"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x41e}}, {0xac, &(0x7f0000000a80)=@string={0xac, 0x3, "29157a957d95d1ea377c27bbd367f5b8fc75fc1261e61d384d19a53b094db8d19590110076cd67227363cb32ab9df0de5d1cfda0af585a16494e6c141fa24e186b022234cbd50640a988a38ea313ef6ff4bdfba5e7fc4ea466b35b5fef4477aae06fc205c1390038593fd681d0ea7f5c4afffc204068fa225be7457fec0fbc498bb6bf882bcc0d89e79ec69456b0c240f4f82e21cf591079ed1ecc49e5101c2cdfde881e54c087406f33"}}, {0x9c, &(0x7f0000000b40)=@string={0x9c, 0x3, "ff1565d3bc2f9fb48fbb237faf9668017081de7138e3b14b75c8e2c75f4c145603727bf483aefb070141b9f8eb66e0cf0772a9cb22e672ec5f7a3134a21387062746a18e8e8322b88de2be94f9d032b9d019a2f9546de617b9c1f9ef06c3928713d582c94ce308b9a7b956f1987345cfdbe2ed3077f5b70273e8bd2ee5b528581dd88f4f1b01547f122f7dcd58e1babecdfc20076c0198a1bc1e"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x426}}, {0xf4, &(0x7f0000000c40)=@string={0xf4, 0x3, "8f0877803ccb6e76997f995f6e6badcb83df8e7bc46215f171a86df9f0814fed2ce26e43f9a9ddf4127c0f21521581e3043b6bf4588d2828c8569e7b3920a413721d603944726d6839fe3ff53c54a3a89db4f11bf5f729b8722f35f36172182972858c9571df62cde8999d6624048f4cb57fe704c4c865564e7ba67779f3d510b84c881523b2989f83d1286d2e52db7e8ff47d01ed4a51e056d4481fc55c3b06385cb88cad33945644c6d3cb4093111a5a90faadbbbffa52df6327edb4fd6fff9222d41e86abe00d0d9788596be7dee974465299b754b5438bf877254e2646bc351430258398fc988be3028b22b9695f9b70"}}, {0x2b, &(0x7f0000000d40)=@string={0x2b, 0x3, "c5ca4d86c4cbdd9e862ae3f1ebdd8b56c4da2526766e34e2f717ab05182f952685bfe8ebad7e11b9c6"}}, {0x54, &(0x7f0000000dc0)=@string={0x54, 0x3, "239f015d721a817aad6d8fc42144bfe24b11ec3453737947c104b39f11f5c94a1135591d6bb4ae65caf0dbba0665e74b3520bb2b930705588450a6c6810117ee34ced4261e204545c267275aa751d8049754"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x440a}}]}) 186.946662ms ago: executing program 2 (id=2001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@struct={0xc, 0x5, 0x0, 0x4, 0x0, 0x505e72e4, [{0xb, 0x5, 0x2fb}, {0x3, 0x2, 0xfffffff8}, {0xc, 0x4, 0x4}, {0xf, 0x2, 0x4}, {0xa, 0x5, 0x5}]}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x6, [{0x9, 0x3, 0x4}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/178, 0x93, 0xb2, 0x0, 0x1, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x367, 0x9cb60892, 0x48218, r0, 0x9, '\x00', r2, r3, 0x0, 0x2, 0x5, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0x5b04, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0xa, 0x3}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x9, 0x4, 0xc, 0x10, 0x6}, 0x122, &(0x7f0000000600)={0x5, 0xf, 0x122, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x88, 0x4, 0x6, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "56f8cc3cf0ff22886e27f1a916082675"}, @generic={0x6, 0x10, 0x4, "04d91c"}, @generic={0x60, 0x10, 0x1, "85f52089319c540247c4e8b8371e3bc72e9aef026fb980c6ec3a13283062336140903828c25aee5c27fd086c5bbd301c2dc21a36d4fbe0ab6088e0403d7336a4409721bc25d959ee8f440579b196d62b44d878a0b6ecb15a0dcad62d1e"}, @ptm_cap={0x3}, @generic={0x95, 0x10, 0xb, "ce57cd6c91940acdef79c6f4914967e4ea84b08d58a0f4aff80be45b8cbb5203fbc033f0271a813c02e276e60422ef9ca6d56c4a97fdd4ec4374a4db06ca63bd69762bfa5477825c4aa40480b2150b42de2e13f3095a56fb6bd9f5986d7405aafe3c95b74a21f68384cd03b66ce95fe80a790fd33cdb4204794483948f701fc2b7c79e359840d5c0ca315ba7817d77441f92"}]}, 0x6, [{0x76, &(0x7f0000000740)=@string={0x76, 0x3, "66ea86443c1ae3d8b04372781d4aaef429900b41a4a185a36e4463bdcb38546b6eda8eb4968ad147144414577142ffb1159bdb4fbd6e27c186bde5106e016c05caf9dd8afbac6effe6cc2c08fd03742a8913e9a77500e10a02571dcf301f6df734499d82376fd03c7bb749579e8223705fde6b3d"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2009}}, {0xbe, &(0x7f0000000a80)=@string={0xbe, 0x3, "12ecfa522e19898336fe895506ea2017f54c982f3cae07c3ff3462d9e689f89a1dcc75acf65d5f7d3d4fca55b5d1b5607fb47f2519a8a6dcad94761d7e5925b042e7a5f34ac1c3a32aa7f2b2206dfc4ab8e6609aef81948c0076710affcafd14fd9446b7057a5256f0a29c9bee8d4c462404bd18d9fe9a4abcd3d26aa20c634fed101b7498117a0933d2faac16448e2f441e75d79e88c44d294973e95d2b0db43e81adc5ec419618d72dcc98c4d25bf0878af3d0836b0501874a2627"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x426}}]}) 0s ago: executing program 3 (id=2002): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x383043, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000080) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x1, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) kernel console output (not intermixed with test programs): tclass=sctp_socket permissive=0 [ 174.319995][ T7502] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 174.328634][ T7502] netlink: 'syz.1.571': attribute type 2 has an invalid length. [ 175.029081][ T7529] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.029137][ T35] wlan1: Selected IBSS BSSID 9a:31:d7:e2:49:67 based on configured SSID [ 175.101751][ T7538] futex_wake_op: syz.4.580 tries to shift op by 144; fix this program [ 175.218399][ T7540] netlink: 'syz.0.586': attribute type 3 has an invalid length. [ 175.228430][ T7540] netlink: 3 bytes leftover after parsing attributes in process `syz.0.586'. [ 176.537259][ T7582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.598'. [ 176.774314][ T7587] trusted_key: encrypted_key: insufficient parameters specified [ 176.882159][ T7587] bond0: entered promiscuous mode [ 176.937292][ T7587] bond_slave_0: entered promiscuous mode [ 176.990078][ T7587] bond_slave_1: entered promiscuous mode [ 177.210588][ T7598] syzkaller1: entered promiscuous mode [ 177.231463][ T7598] syzkaller1: entered allmulticast mode [ 177.378626][ T7603] netlink: 'syz.3.606': attribute type 3 has an invalid length. [ 177.428454][ T7603] netlink: 3 bytes leftover after parsing attributes in process `syz.3.606'. [ 178.728522][ T29] kauditd_printk_skb: 2177 callbacks suppressed [ 178.728540][ T29] audit: type=1400 audit(1784502674.625:4676): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 178.806548][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.819803][ T29] audit: type=1400 audit(1784502674.635:4677): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 178.853276][ T5274] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 178.874307][ T5612] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.881235][ T29] audit: type=1400 audit(1784502674.665:4678): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 178.913798][ T7638] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.930815][ T7638] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 178.946677][ T7638] audit: backlog limit exceeded [ 178.961385][ T5612] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 179.340492][ T7654] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 179.350132][ T78] wlan1: Selected IBSS BSSID b6:9e:5a:c9:88:f0 based on configured SSID [ 179.899345][ T5628] Bluetooth: hci0: Unable to find connection for big 0x00 [ 180.168426][ T4929] Bluetooth: hci2: command 0x0406 tx timeout [ 180.479444][ T7681] FAULT_INJECTION: forcing a failure. [ 180.479444][ T7681] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.521090][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.2.634 Not tainted syzkaller #0 PREEMPT(full) [ 180.521116][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 180.521126][ T7681] Call Trace: [ 180.521133][ T7681] [ 180.521141][ T7681] dump_stack_lvl+0x100/0x190 [ 180.521170][ T7681] should_fail_ex.cold+0x5/0xa [ 180.521193][ T7681] _copy_from_user+0x2e/0xd0 [ 180.521218][ T7681] kstrtouint_from_user+0xd6/0x1d0 [ 180.521241][ T7681] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 180.521264][ T7681] ? __lock_acquire+0x49f/0x1a40 [ 180.521296][ T7681] proc_fail_nth_write+0x83/0x220 [ 180.521324][ T7681] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.521356][ T7681] vfs_write+0x2aa/0x1050 [ 180.521384][ T7681] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.521412][ T7681] ? __pfx_vfs_write+0x10/0x10 [ 180.521436][ T7681] ? __fget_files+0x215/0x3d0 [ 180.521460][ T7681] ? __fget_files+0x21f/0x3d0 [ 180.521480][ T7681] ksys_write+0x12a/0x250 [ 180.521501][ T7681] ? __pfx_ksys_write+0x10/0x10 [ 180.521528][ T7681] do_syscall_64+0x115/0x870 [ 180.521547][ T7681] ? clear_bhb_loop+0x40/0x90 [ 180.521570][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.521588][ T7681] RIP: 0033:0x7f0c9f35e6ce [ 180.521604][ T7681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.521620][ T7681] RSP: 002b:00007f0ca031bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.521652][ T7681] RAX: ffffffffffffffda RBX: 00007f0ca031c6c0 RCX: 00007f0c9f35e6ce [ 180.521663][ T7681] RDX: 0000000000000001 RSI: 00007f0ca031c0a0 RDI: 0000000000000003 [ 180.521673][ T7681] RBP: 00007f0ca031c090 R08: 0000000000000000 R09: 0000000000000000 [ 180.521687][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.521696][ T7681] R13: 00007f0c9f626038 R14: 00007f0c9f625fa0 R15: 00007ffd7848aa98 [ 180.521721][ T7681] [ 180.958728][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 181.139263][ T7693] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.875180][ T7705] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 183.609732][ T35] wlan1: Trigger new scan to find an IBSS to join [ 183.740996][ T29] kauditd_printk_skb: 6898 callbacks suppressed [ 183.741023][ T29] audit: type=1400 audit(1784502679.635:10948): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.769529][ T29] audit: type=1400 audit(1784502679.635:10949): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.791574][ T29] audit: type=1400 audit(1784502679.635:10950): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.813415][ T29] audit: type=1400 audit(1784502679.635:10951): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.839581][ T29] audit: type=1400 audit(1784502679.635:10952): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.881225][ T5274] audit: audit_backlog=66 > audit_backlog_limit=64 [ 183.882477][ T5609] audit: audit_backlog=66 > audit_backlog_limit=64 [ 183.904550][ T5274] audit: audit_lost=213 audit_rate_limit=0 audit_backlog_limit=64 [ 183.906444][ T5609] audit: audit_lost=214 audit_rate_limit=0 audit_backlog_limit=64 [ 183.923877][ T29] audit: type=1400 audit(1784502679.635:10953): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.328438][ T4929] Bluetooth: hci2: command 0x0406 tx timeout [ 185.027709][ T7774] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.679342][ T13] wlan1: Trigger new scan to find an IBSS to join [ 187.935220][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.695'. [ 188.217672][ T7859] FAULT_INJECTION: forcing a failure. [ 188.217672][ T7859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.271973][ T7861] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.285062][ T13] wlan1: Selected IBSS BSSID b6:9e:5a:c9:88:f0 based on configured SSID [ 188.298088][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.4.698 Not tainted syzkaller #0 PREEMPT(full) [ 188.298105][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 188.298112][ T7859] Call Trace: [ 188.298117][ T7859] [ 188.298121][ T7859] dump_stack_lvl+0x100/0x190 [ 188.298139][ T7859] should_fail_ex.cold+0x5/0xa [ 188.298153][ T7859] _copy_from_user+0x2e/0xd0 [ 188.298168][ T7859] copy_msghdr_from_user+0x9f/0x4c0 [ 188.298185][ T7859] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 188.298206][ T7859] ___sys_sendmsg+0x106/0x1e0 [ 188.298222][ T7859] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.298236][ T7859] ? __lock_acquire+0x49f/0x1a40 [ 188.298249][ T7859] ? get_pid_task+0x106/0x250 [ 188.298285][ T7859] __sys_sendmsg+0x160/0x210 [ 188.298303][ T7859] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.298330][ T7859] do_syscall_64+0x115/0x870 [ 188.298346][ T7859] ? clear_bhb_loop+0x40/0x90 [ 188.298368][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.298384][ T7859] RIP: 0033:0x7f6e6ad9de99 [ 188.298397][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.298408][ T7859] RSP: 002b:00007f6e6bbfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.298432][ T7859] RAX: ffffffffffffffda RBX: 00007f6e6b026090 RCX: 00007f6e6ad9de99 [ 188.298439][ T7859] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 188.298445][ T7859] RBP: 00007f6e6bbfd090 R08: 0000000000000000 R09: 0000000000000000 [ 188.298452][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.298457][ T7859] R13: 00007f6e6b026128 R14: 00007f6e6b026090 R15: 00007ffca2285d58 [ 188.298471][ T7859] [ 188.748601][ T29] kauditd_printk_skb: 10007 callbacks suppressed [ 188.748620][ T29] audit: type=1400 audit(1784502684.645:20608): avc: denied { read write } for pid=5621 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 188.817432][ T7880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.824514][ T7878] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.825407][ T7880] audit: audit_lost=332 audit_rate_limit=0 audit_backlog_limit=64 [ 188.847462][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.854543][ T5274] audit: audit_lost=333 audit_rate_limit=0 audit_backlog_limit=64 [ 188.859437][ T5611] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.863057][ T29] audit: type=1400 audit(1784502684.645:20609): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.891142][ T7878] audit: audit_lost=334 audit_rate_limit=0 audit_backlog_limit=64 [ 188.891713][ T5274] audit: backlog limit exceeded [ 192.121654][ T9] IPVS: starting estimator thread 0... [ 192.129648][ T7947] trusted_key: encrypted_key: insufficient parameters specified [ 192.206420][ T7946] IPVS: sed: FWM 3 0x00000003 - no destination available [ 192.238487][ T7948] IPVS: using max 54 ests per chain, 129600 per kthread [ 192.641253][ T3330] wlan1: Trigger new scan to find an IBSS to join [ 193.537556][ T35] wlan1: Creating new IBSS network, BSSID a2:40:ee:d6:e8:1d [ 193.764403][ T29] kauditd_printk_skb: 12515 callbacks suppressed [ 193.764420][ T29] audit: type=1400 audit(1784502689.665:32303): avc: denied { allowed } for pid=7992 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 193.819632][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.832272][ T5274] audit: audit_lost=609 audit_rate_limit=0 audit_backlog_limit=64 [ 193.834061][ T7997] netlink: 'syz.0.743': attribute type 4 has an invalid length. [ 193.860098][ T5274] audit: backlog limit exceeded [ 193.865239][ T8001] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.873774][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.887107][ T5611] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.898451][ T5274] audit: audit_lost=610 audit_rate_limit=0 audit_backlog_limit=64 [ 193.906104][ T29] audit: type=1400 audit(1784502689.695:32304): avc: denied { accept } for pid=7985 comm="syz.0.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=0 [ 193.911820][ T8001] audit: audit_lost=611 audit_rate_limit=0 audit_backlog_limit=64 [ 195.036540][ T8033] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.053647][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.061967][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.227445][ T8037] batman_adv: batadv0: Adding interface: vlan2 [ 195.242695][ T8037] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.288512][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.327164][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.360885][ T8037] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 195.687992][ T8048] syzkaller0: entered promiscuous mode [ 195.740312][ T8048] syzkaller0: entered allmulticast mode [ 195.887624][ T8061] netlink: 'syz.0.770': attribute type 4 has an invalid length. [ 195.900019][ T8062] syz.4.772 uses obsolete (PF_INET,SOCK_PACKET) [ 196.143969][ T8067] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 196.158411][ T3307] wlan1: Selected IBSS BSSID a2:40:ee:d6:e8:1d based on configured SSID [ 197.100254][ T8087] FAULT_INJECTION: forcing a failure. [ 197.100254][ T8087] name failslab, interval 1, probability 0, space 0, times 0 [ 197.141728][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: syz.0.782 Not tainted syzkaller #0 PREEMPT(full) [ 197.141752][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 197.141763][ T8087] Call Trace: [ 197.141770][ T8087] [ 197.141777][ T8087] dump_stack_lvl+0x100/0x190 [ 197.141807][ T8087] should_fail_ex.cold+0x5/0xa [ 197.141830][ T8087] should_failslab+0xc2/0x120 [ 197.141857][ T8087] kmem_cache_alloc_noprof+0x91/0x6a0 [ 197.141878][ T8087] ? trace_kmem_cache_alloc+0xdd/0x100 [ 197.141902][ T8087] ? security_file_alloc+0x34/0x2c0 [ 197.141935][ T8087] security_file_alloc+0x34/0x2c0 [ 197.141959][ T8087] init_file+0x95/0x480 [ 197.141986][ T8087] alloc_empty_file+0x79/0x1c0 [ 197.142009][ T8087] path_openat+0xe7/0x4280 [ 197.142027][ T8087] ? __kasan_slab_alloc+0x89/0x90 [ 197.142047][ T8087] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 197.142064][ T8087] ? do_getname+0x35/0x390 [ 197.142083][ T8087] ? do_sys_openat2+0xc7/0x1e0 [ 197.142102][ T8087] ? __x64_sys_openat+0x12d/0x210 [ 197.142121][ T8087] ? do_syscall_64+0x115/0x870 [ 197.142138][ T8087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.142164][ T8087] ? __pfx_path_openat+0x10/0x10 [ 197.142188][ T8087] do_file_open+0x20e/0x430 [ 197.142208][ T8087] ? __pfx_do_file_open+0x10/0x10 [ 197.142239][ T8087] ? alloc_fd+0x471/0x7a0 [ 197.142260][ T8087] ? do_getname+0x191/0x390 [ 197.142281][ T8087] do_sys_openat2+0x10f/0x1e0 [ 197.142302][ T8087] ? __pfx_do_sys_openat2+0x10/0x10 [ 197.142323][ T8087] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.142343][ T8087] ? __fget_files+0x21f/0x3d0 [ 197.142364][ T8087] __x64_sys_openat+0x12d/0x210 [ 197.142385][ T8087] ? __pfx___x64_sys_openat+0x10/0x10 [ 197.142405][ T8087] ? ksys_write+0x1ac/0x250 [ 197.142439][ T8087] do_syscall_64+0x115/0x870 [ 197.142454][ T8087] ? clear_bhb_loop+0x40/0x90 [ 197.142476][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.142493][ T8087] RIP: 0033:0x7fccd5d5e6ce [ 197.142510][ T8087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.142527][ T8087] RSP: 002b:00007fccd6cd0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 197.142545][ T8087] RAX: ffffffffffffffda RBX: 00007fccd6cd16c0 RCX: 00007fccd5d5e6ce [ 197.142556][ T8087] RDX: 0000000000000000 RSI: 00007fccd6cd0f90 RDI: ffffffffffffff9c [ 197.142580][ T8087] RBP: 00007fccd6cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 197.142591][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.142614][ T8087] R13: 00007fccd6026038 R14: 00007fccd6025fa0 R15: 00007ffe77291df8 [ 197.142638][ T8087] [ 197.668665][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.785'. [ 197.678668][ T3307] wlan1: Trigger new scan to find an IBSS to join [ 197.773618][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 197.844831][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 198.768790][ T29] kauditd_printk_skb: 9522 callbacks suppressed [ 198.768807][ T29] audit: type=1400 audit(1784502694.675:41474): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.854907][ T29] audit: type=1400 audit(1784502694.675:41475): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.893790][ T8131] netlink: 'syz.0.797': attribute type 2 has an invalid length. [ 198.926922][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.934907][ T29] audit: type=1400 audit(1784502694.675:41476): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.974562][ T5274] audit: audit_lost=729 audit_rate_limit=0 audit_backlog_limit=64 [ 198.993512][ T5274] audit: backlog limit exceeded [ 199.016453][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.028517][ T29] audit: type=1400 audit(1784502694.675:41477): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.060087][ T5274] audit: audit_lost=730 audit_rate_limit=0 audit_backlog_limit=64 [ 199.077590][ T5274] audit: backlog limit exceeded [ 200.639589][ T13] wlan1: Trigger new scan to find an IBSS to join [ 200.775631][ T8183] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 201.686144][ T8205] netlink: 'syz.3.822': attribute type 4 has an invalid length. [ 202.238361][ T5615] Bluetooth: hci1: command 0x2016 tx timeout [ 202.244545][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 202.244560][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 202.250744][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 202.250794][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 203.178007][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 203.227606][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.831'. [ 203.262807][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 203.290017][ T8239] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.299721][ T1123] wlan1: Selected IBSS BSSID b6:9e:5a:c9:88:f0 based on configured SSID [ 203.474945][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 203.508723][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.831'. [ 203.547985][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 203.567965][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.600504][ T78] wlan1: Creating new IBSS network, BSSID b6:02:44:b2:f2:a1 [ 203.653802][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.692883][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.755268][ T8248] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.768568][ T13] wlan1: Selected IBSS BSSID 9a:31:d7:e2:49:67 based on configured SSID [ 203.786055][ T29] kauditd_printk_skb: 8290 callbacks suppressed [ 203.786074][ T29] audit: type=1400 audit(1784502699.685:49534): avc: denied { create } for pid=8247 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 203.830263][ T78] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.872289][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.908625][ T5274] audit: audit_lost=809 audit_rate_limit=0 audit_backlog_limit=64 [ 203.923203][ T29] audit: type=1400 audit(1784502699.685:49535): avc: denied { allowed } for pid=8247 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 203.942959][ T29] audit: type=1400 audit(1784502699.725:49536): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.965941][ T29] audit: type=1400 audit(1784502699.725:49537): avc: denied { allowed } for pid=8247 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 203.997869][ T5274] audit: backlog limit exceeded [ 203.998330][ T29] audit: type=1400 audit(1784502699.725:49538): avc: denied { allowed } for pid=8247 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 204.022628][ T29] audit: type=1400 audit(1784502699.725:49539): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.028178][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.486344][ T8269] FAULT_INJECTION: forcing a failure. [ 204.486344][ T8269] name failslab, interval 1, probability 0, space 0, times 0 [ 204.538474][ T8269] CPU: 0 UID: 0 PID: 8269 Comm: syz.4.843 Not tainted syzkaller #0 PREEMPT(full) [ 204.538499][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 204.538510][ T8269] Call Trace: [ 204.538516][ T8269] [ 204.538523][ T8269] dump_stack_lvl+0x100/0x190 [ 204.538551][ T8269] should_fail_ex.cold+0x5/0xa [ 204.538575][ T8269] should_failslab+0xc2/0x120 [ 204.538596][ T8269] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 204.538619][ T8269] ? sidtab_sid2str_get+0x17a/0x670 [ 204.538653][ T8269] kmemdup_noprof+0x29/0x60 [ 204.538673][ T8269] sidtab_sid2str_get+0x17a/0x670 [ 204.538702][ T8269] security_sid_to_context_core+0x35a/0x6d0 [ 204.538733][ T8269] avc_audit_post_callback+0x109/0x910 [ 204.538763][ T8269] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 204.538795][ T8269] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 204.538821][ T8269] ? skb_put+0x138/0x180 [ 204.538845][ T8269] ? audit_log_n_string+0x256/0x550 [ 204.538880][ T8269] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 204.538909][ T8269] common_lsm_audit+0x23f/0x2b0 [ 204.538936][ T8269] ? __pfx_common_lsm_audit+0x10/0x10 [ 204.538968][ T8269] slow_avc_audit+0x186/0x210 [ 204.538987][ T8269] ? __pfx_slow_avc_audit+0x10/0x10 [ 204.539006][ T8269] ? find_held_lock+0x2b/0x80 [ 204.539034][ T8269] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 204.539051][ T8269] ? avc_denied+0x14a/0x190 [ 204.539071][ T8269] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 204.539093][ T8269] avc_has_perm+0x1a6/0x1e0 [ 204.539113][ T8269] ? __pfx_avc_has_perm+0x10/0x10 [ 204.539135][ T8269] ? bpf_lsm_capable+0x9/0x10 [ 204.539156][ T8269] selinux_kernel_load_data+0x353/0x590 [ 204.539175][ T8269] security_kernel_load_data+0x91/0x220 [ 204.539202][ T8269] __x64_sys_kexec_load+0xce/0x230 [ 204.539226][ T8269] do_syscall_64+0x115/0x870 [ 204.539242][ T8269] ? clear_bhb_loop+0x40/0x90 [ 204.539263][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.539281][ T8269] RIP: 0033:0x7f6e6ad9de99 [ 204.539297][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.539321][ T8269] RSP: 002b:00007f6e6bc1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 204.539339][ T8269] RAX: ffffffffffffffda RBX: 00007f6e6b025fa0 RCX: 00007f6e6ad9de99 [ 204.539351][ T8269] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 000000000000ff0f [ 204.539379][ T8269] RBP: 00007f6e6bc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 204.539390][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.539400][ T8269] R13: 00007f6e6b026038 R14: 00007f6e6b025fa0 R15: 00007ffca2285d58 [ 204.539425][ T8269] [ 204.843114][ T78] wlan1: Trigger new scan to find an IBSS to join [ 205.088053][ T8279] FAULT_INJECTION: forcing a failure. [ 205.088053][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 205.102578][ T8279] CPU: 1 UID: 0 PID: 8279 Comm: syz.2.848 Not tainted syzkaller #0 PREEMPT(full) [ 205.102603][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 205.102615][ T8279] Call Trace: [ 205.102621][ T8279] [ 205.102628][ T8279] dump_stack_lvl+0x100/0x190 [ 205.102658][ T8279] should_fail_ex.cold+0x5/0xa [ 205.102682][ T8279] should_failslab+0xc2/0x120 [ 205.102704][ T8279] __kmalloc_noprof+0xfc/0x820 [ 205.102724][ T8279] ? ___neigh_create+0x1532/0x2940 [ 205.102756][ T8279] ___neigh_create+0x1532/0x2940 [ 205.102793][ T8279] ? __pfx____neigh_create+0x10/0x10 [ 205.102823][ T8279] ip_finish_output2+0x1d3c/0x2400 [ 205.102861][ T8279] ? __pfx_ip_finish_output2+0x10/0x10 [ 205.102888][ T8279] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 205.102909][ T8279] ? nf_nat_ipv4_out+0xb2/0x510 [ 205.102928][ T8279] ? find_held_lock+0x2b/0x80 [ 205.102952][ T8279] __ip_finish_output.part.0+0x444/0x6f0 [ 205.102981][ T8279] ip_output+0x39b/0xc10 [ 205.103010][ T8279] ? __pfx_ip_output+0x10/0x10 [ 205.103035][ T8279] ? ip_make_skb+0x1f4/0x310 [ 205.103055][ T8279] ? __pfx_ip_finish_output+0x10/0x10 [ 205.103072][ T8279] ? __pfx_ip_make_skb+0x10/0x10 [ 205.103104][ T8279] ? ip_route_output_key_hash+0x14c/0x2b0 [ 205.103128][ T8279] ? __pfx_ip_output+0x10/0x10 [ 205.103155][ T8279] ip_send_skb+0x232/0x2a0 [ 205.103174][ T8279] udp_send_skb+0xa58/0xfe0 [ 205.103209][ T8279] udp_sendmsg+0x1760/0x2720 [ 205.103242][ T8279] ? __pfx_udp_sendmsg+0x10/0x10 [ 205.103269][ T8279] ? __pfx_avc_has_perm+0x10/0x10 [ 205.103288][ T8279] ? rcu_is_watching+0x12/0xc0 [ 205.103317][ T8279] ? do_user_addr_fault+0x7de/0x12f0 [ 205.103344][ T8279] ? do_user_addr_fault+0x7de/0x12f0 [ 205.103374][ T8279] ? __pfx_sock_has_perm+0x10/0x10 [ 205.103420][ T8279] ? __pfx_udp_sendmsg+0x10/0x10 [ 205.103448][ T8279] inet_sendmsg+0x105/0x140 [ 205.103468][ T8279] ____sys_sendmsg+0x9c9/0xbe0 [ 205.103491][ T8279] ? __pfx_inet_sendmsg+0x10/0x10 [ 205.103513][ T8279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.103540][ T8279] ? __pfx__kstrtoull+0x10/0x10 [ 205.103572][ T8279] ___sys_sendmsg+0x190/0x1e0 [ 205.103600][ T8279] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.103630][ T8279] ? __lock_acquire+0x49f/0x1a40 [ 205.103671][ T8279] ? proc_fail_nth_write+0x9f/0x220 [ 205.103696][ T8279] ? find_held_lock+0x2b/0x80 [ 205.103723][ T8279] __sys_sendmmsg+0x20c/0x440 [ 205.103746][ T8279] ? __pfx___sys_sendmmsg+0x10/0x10 [ 205.103765][ T8279] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 205.103797][ T8279] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.103831][ T8279] ? xfd_validate_state+0x129/0x190 [ 205.103860][ T8279] __x64_sys_sendmmsg+0x9c/0x100 [ 205.103879][ T8279] ? lockdep_hardirqs_on+0x78/0x100 [ 205.103906][ T8279] do_syscall_64+0x115/0x870 [ 205.103922][ T8279] ? clear_bhb_loop+0x40/0x90 [ 205.103944][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.103962][ T8279] RIP: 0033:0x7f0c9f39de99 [ 205.103979][ T8279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.103996][ T8279] RSP: 002b:00007f0ca031c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 205.104015][ T8279] RAX: ffffffffffffffda RBX: 00007f0c9f625fa0 RCX: 00007f0c9f39de99 [ 205.104026][ T8279] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 205.104037][ T8279] RBP: 00007f0ca031c090 R08: 0000000000000000 R09: 0000000000000000 [ 205.104047][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.104057][ T8279] R13: 00007f0c9f626038 R14: 00007f0c9f625fa0 R15: 00007ffd7848aa98 [ 205.104082][ T8279] [ 206.321823][ T8309] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.302216][ T8364] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.313409][ T78] wlan1: Selected IBSS BSSID 9a:31:d7:e2:49:67 based on configured SSID [ 208.639056][ T3307] wlan1: Trigger new scan to find an IBSS to join [ 208.788320][ T29] kauditd_printk_skb: 20612 callbacks suppressed [ 208.788338][ T29] audit: type=1400 audit(1784502704.685:59413): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.836879][ T29] audit: type=1400 audit(1784502704.695:59414): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.860767][ T29] audit: type=1400 audit(1784502704.695:59415): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.882139][ T29] audit: type=1400 audit(1784502704.695:59416): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.895684][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.903359][ T29] audit: type=1400 audit(1784502704.695:59417): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.903398][ T29] audit: type=1400 audit(1784502704.695:59418): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.903428][ T29] audit: type=1400 audit(1784502704.695:59419): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.903462][ T29] audit: type=1400 audit(1784502704.695:59420): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.903493][ T29] audit: type=1400 audit(1784502704.695:59421): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 209.963101][ T8412] netlink: 'syz.4.900': attribute type 4 has an invalid length. [ 210.043681][ T8416] netlink: 'syz.4.900': attribute type 4 has an invalid length. [ 210.558456][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 211.678962][ T3381] wlan1: Trigger new scan to find an IBSS to join [ 211.783971][ T78] wlan1: Selected IBSS BSSID 9a:31:d7:e2:49:67 based on configured SSID [ 211.783979][ T8456] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 212.090355][ T8464] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 212.472354][ T8468] bridge2: entered promiscuous mode [ 212.495290][ T8468] bond8: (slave bridge2): making interface the new active one [ 212.553332][ T8468] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 212.628894][ T8477] netlink: 'syz.2.926': attribute type 4 has an invalid length. [ 212.703280][ T8483] netlink: 'syz.2.926': attribute type 4 has an invalid length. [ 212.994951][ T8487] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.007369][ T3381] wlan1: Selected IBSS BSSID b6:02:44:b2:f2:a1 based on configured SSID [ 213.613102][ T8499] netlink: 'syz.1.931': attribute type 3 has an invalid length. [ 213.666537][ T8502] netlink: 'syz.4.933': attribute type 4 has an invalid length. [ 213.674451][ T8499] netlink: 'syz.1.931': attribute type 3 has an invalid length. [ 213.798432][ T29] kauditd_printk_skb: 10402 callbacks suppressed [ 213.798451][ T29] audit: type=1400 audit(1784502709.695:69714): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.859391][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.862492][ T29] audit: type=1400 audit(1784502709.695:69715): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.876210][ T5274] audit: audit_lost=4427 audit_rate_limit=0 audit_backlog_limit=64 [ 213.904897][ T29] audit: type=1400 audit(1784502709.705:69716): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.932751][ T5274] audit: backlog limit exceeded [ 213.942485][ T29] audit: type=1400 audit(1784502709.705:69717): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.948231][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.990814][ T29] audit: type=1400 audit(1784502709.705:69718): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.007534][ T5274] audit: audit_lost=4428 audit_rate_limit=0 audit_backlog_limit=64 [ 214.639787][ T3381] wlan1: Trigger new scan to find an IBSS to join [ 214.669896][ T8520] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 214.726251][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 215.008088][ T8520] bridge6: entered promiscuous mode [ 215.028531][ T8520] bond12: (slave bridge6): making interface the new active one [ 215.067863][ T8520] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 215.349569][ T8546] netlink: 'syz.1.946': attribute type 4 has an invalid length. [ 215.427310][ T8547] netlink: 'syz.1.946': attribute type 4 has an invalid length. [ 215.538922][ T1123] wlan1: Creating new IBSS network, BSSID 46:c7:84:20:47:72 [ 218.222618][ T8598] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.226734][ T3330] wlan1: Selected IBSS BSSID 46:c7:84:20:47:72 based on configured SSID [ 218.660359][ T8610] FAULT_INJECTION: forcing a failure. [ 218.660359][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 218.709865][ T8610] CPU: 1 UID: 0 PID: 8610 Comm: syz.2.974 Not tainted syzkaller #0 PREEMPT(full) [ 218.709890][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 218.709901][ T8610] Call Trace: [ 218.709907][ T8610] [ 218.709915][ T8610] dump_stack_lvl+0x100/0x190 [ 218.709945][ T8610] should_fail_ex.cold+0x5/0xa [ 218.709964][ T8610] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 218.709993][ T8610] should_failslab+0xc2/0x120 [ 218.710015][ T8610] kmem_cache_alloc_noprof+0x91/0x6a0 [ 218.710036][ T8610] ? skb_clone+0x190/0x400 [ 218.710061][ T8610] skb_clone+0x190/0x400 [ 218.710081][ T8610] netlink_deliver_tap+0xaed/0xcc0 [ 218.710114][ T8610] netlink_unicast+0x62b/0x850 [ 218.710145][ T8610] ? __pfx_netlink_unicast+0x10/0x10 [ 218.710169][ T8610] ? __build_skb_around+0x278/0x390 [ 218.710202][ T8610] netlink_sendmsg+0x8b0/0xda0 [ 218.710252][ T8610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.710278][ T8610] ? selinux_socket_sendmsg+0x198/0x2f0 [ 218.710303][ T8610] sock_sendmsg+0x394/0x410 [ 218.710328][ T8610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.710353][ T8610] ? __pfx_sock_sendmsg+0x10/0x10 [ 218.710389][ T8610] splice_to_socket+0xb3c/0x11a0 [ 218.710420][ T8610] ? __pfx_splice_to_socket+0x10/0x10 [ 218.710443][ T8610] ? inode_has_perm+0x16d/0x1d0 [ 218.710484][ T8610] ? bpf_lsm_file_permission+0x9/0x10 [ 218.710509][ T8610] ? security_file_permission+0x76/0x210 [ 218.710537][ T8610] ? rw_verify_area+0xce/0x6d0 [ 218.710558][ T8610] ? __pfx_splice_to_socket+0x10/0x10 [ 218.710578][ T8610] do_splice+0x109c/0x1f90 [ 218.710596][ T8610] ? __lock_acquire+0x49f/0x1a40 [ 218.710617][ T8610] ? ksys_write+0x190/0x250 [ 218.710644][ T8610] ? __pfx_do_splice+0x10/0x10 [ 218.710658][ T8610] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 218.710675][ T8610] ? find_held_lock+0x2b/0x80 [ 218.710701][ T8610] __do_splice+0x33b/0x370 [ 218.710720][ T8610] ? __pfx___do_splice+0x10/0x10 [ 218.710743][ T8610] __x64_sys_splice+0x187/0x250 [ 218.710765][ T8610] do_syscall_64+0x115/0x870 [ 218.710781][ T8610] ? clear_bhb_loop+0x40/0x90 [ 218.710803][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.710820][ T8610] RIP: 0033:0x7f0c9f39de99 [ 218.710838][ T8610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.710854][ T8610] RSP: 002b:00007f0ca02fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 218.710871][ T8610] RAX: ffffffffffffffda RBX: 00007f0c9f626090 RCX: 00007f0c9f39de99 [ 218.710881][ T8610] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 218.710890][ T8610] RBP: 00007f0ca02fb090 R08: 000000000004ffe6 R09: 0000000000000000 [ 218.710899][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.710908][ T8610] R13: 00007f0c9f626128 R14: 00007f0c9f626090 R15: 00007ffd7848aa98 [ 218.710929][ T8610] [ 218.716729][ T8610] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.974'. [ 218.808464][ T29] kauditd_printk_skb: 10753 callbacks suppressed [ 218.808481][ T29] audit: type=1400 audit(1784502714.715:80471): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.972062][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.989483][ T29] audit: type=1400 audit(1784502714.735:80472): avc: denied { create } for pid=8612 comm="syz.1.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 219.043385][ T5274] audit: audit_lost=4429 audit_rate_limit=0 audit_backlog_limit=64 [ 219.043409][ T5274] audit: backlog limit exceeded [ 219.043611][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.104074][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.112935][ T5609] audit: audit_lost=4430 audit_rate_limit=0 audit_backlog_limit=64 [ 219.145003][ T5609] audit: backlog limit exceeded [ 219.156289][ T8617] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.485273][ T8636] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 219.767080][ T8650] bridge7: entered promiscuous mode [ 219.812854][ T8650] bond15: (slave bridge7): making interface the new active one [ 219.825281][ T8650] bond15: (slave bridge7): Enslaving as an active interface with an up link [ 219.984481][ T3330] wlan1: Selected IBSS BSSID 9a:31:d7:e2:49:67 based on configured SSID [ 219.995402][ T8655] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 221.251068][ T8685] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 221.375565][ T8685] bridge8: entered promiscuous mode [ 221.449452][ T1123] wlan1: Selected IBSS BSSID 46:c7:84:20:47:72 based on configured SSID [ 221.460325][ T8694] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 222.269362][ T8725] netlink: 'syz.2.1015': attribute type 4 has an invalid length. [ 223.759175][ T1123] wlan1: Selected IBSS BSSID b6:02:44:b2:f2:a1 based on configured SSID [ 223.768044][ T8765] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 223.818570][ T29] kauditd_printk_skb: 11955 callbacks suppressed [ 223.818609][ T29] audit: type=1400 audit(1784502719.715:92160): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.863122][ T29] audit: type=1400 audit(1784502719.725:92161): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.895086][ T29] audit: type=1400 audit(1784502719.725:92162): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.920491][ T29] audit: type=1400 audit(1784502719.725:92163): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.943931][ T29] audit: type=1400 audit(1784502719.725:92164): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.948729][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.965684][ T29] audit: type=1400 audit(1784502719.725:92165): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.996738][ T8769] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 224.005706][ T8770] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.014367][ T8770] audit: audit_lost=4521 audit_rate_limit=0 audit_backlog_limit=64 [ 224.024431][ T8770] audit: backlog limit exceeded [ 224.191560][ T8769] bridge3: entered promiscuous mode [ 225.001588][ T8792] netlink: 'syz.0.1040': attribute type 4 has an invalid length. [ 225.461238][ T8806] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 225.471187][ T1123] wlan1: Selected IBSS BSSID 46:c7:84:20:47:72 based on configured SSID [ 225.492038][ T8807] netlink: 'syz.4.1045': attribute type 4 has an invalid length. [ 225.562958][ T8808] netlink: 'syz.4.1045': attribute type 4 has an invalid length. [ 225.636347][ T8810] netlink: 'syz.2.1047': attribute type 1 has an invalid length. [ 225.781994][ T8810] bridge7: entered promiscuous mode [ 227.038387][ T3330] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 227.120170][ T8852] netlink: 'syz.4.1063': attribute type 4 has an invalid length. [ 227.592513][ T8870] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 227.674275][ T8871] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 228.530035][ T8880] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 228.721807][ T8880] bridge4: entered promiscuous mode [ 228.828512][ T29] kauditd_printk_skb: 12804 callbacks suppressed [ 228.828527][ T29] audit: type=1400 audit(1784502724.725:103870): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.890361][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.896922][ T5274] audit: audit_lost=4888 audit_rate_limit=0 audit_backlog_limit=64 [ 228.912704][ T5612] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.924580][ T5611] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.930594][ T29] audit: type=1400 audit(1784502724.725:103874): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.935713][ T5612] audit: audit_lost=4889 audit_rate_limit=0 audit_backlog_limit=64 [ 228.952423][ T5274] audit: backlog limit exceeded [ 228.952732][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.961114][ T5621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 231.033597][ T8938] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 231.160319][ T8938] bridge4: entered promiscuous mode [ 232.399569][ T8977] FAULT_INJECTION: forcing a failure. [ 232.399569][ T8977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.431188][ T8977] CPU: 1 UID: 0 PID: 8977 Comm: syz.1.1114 Not tainted syzkaller #0 PREEMPT(full) [ 232.431210][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 232.431217][ T8977] Call Trace: [ 232.431222][ T8977] [ 232.431227][ T8977] dump_stack_lvl+0x100/0x190 [ 232.431249][ T8977] should_fail_ex.cold+0x5/0xa [ 232.431264][ T8977] _copy_to_user+0x32/0xd0 [ 232.431282][ T8977] simple_read_from_buffer+0xcb/0x170 [ 232.431302][ T8977] proc_fail_nth_read+0x1af/0x230 [ 232.431319][ T8977] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.431335][ T8977] ? rw_verify_area+0xce/0x6d0 [ 232.431349][ T8977] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.431364][ T8977] vfs_read+0x1e4/0xb40 [ 232.431381][ T8977] ? __pfx_vfs_read+0x10/0x10 [ 232.431395][ T8977] ? __fget_files+0x215/0x3d0 [ 232.431408][ T8977] ? __fget_files+0x21f/0x3d0 [ 232.431421][ T8977] ksys_read+0x12a/0x250 [ 232.431435][ T8977] ? __pfx_ksys_read+0x10/0x10 [ 232.431454][ T8977] do_syscall_64+0x115/0x870 [ 232.431465][ T8977] ? clear_bhb_loop+0x40/0x90 [ 232.431479][ T8977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.431489][ T8977] RIP: 0033:0x7f207675e6ce [ 232.431499][ T8977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.431510][ T8977] RSP: 002b:00007f20776c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.431522][ T8977] RAX: ffffffffffffffda RBX: 00007f20776c26c0 RCX: 00007f207675e6ce [ 232.431533][ T8977] RDX: 000000000000000f RSI: 00007f20776c20a0 RDI: 0000000000000003 [ 232.431543][ T8977] RBP: 00007f20776c2090 R08: 0000000000000000 R09: 0000000000000000 [ 232.431551][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.431557][ T8977] R13: 00007f2076a26038 R14: 00007f2076a25fa0 R15: 00007ffdf7117388 [ 232.431570][ T8977] [ 233.842892][ T29] kauditd_printk_skb: 12536 callbacks suppressed [ 233.842909][ T29] audit: type=1400 audit(1784502729.745:114412): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 233.843844][ T8999] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 233.856465][ T29] audit: type=1400 audit(1784502729.755:114413): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 233.943771][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.954570][ T5274] audit: audit_lost=5557 audit_rate_limit=0 audit_backlog_limit=64 [ 233.967520][ T29] audit: type=1400 audit(1784502729.755:114414): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 233.999896][ T5274] audit: backlog limit exceeded [ 234.014075][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.028351][ T5274] audit: audit_lost=5558 audit_rate_limit=0 audit_backlog_limit=64 [ 234.040018][ T29] audit: type=1400 audit(1784502729.755:114415): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.067001][ T5274] audit: backlog limit exceeded [ 234.078788][ T3381] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 234.152413][ T9002] bridge4: entered promiscuous mode [ 234.920969][ T9023] netlink: 'syz.1.1130': attribute type 4 has an invalid length. [ 238.850475][ T29] kauditd_printk_skb: 12415 callbacks suppressed [ 238.850501][ T29] audit: type=1400 audit(1784502734.745:126831): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.900366][ T29] audit: type=1400 audit(1784502734.755:126832): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.923332][ T29] audit: type=1400 audit(1784502734.755:126833): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.924438][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.956976][ T5274] audit: audit_lost=5559 audit_rate_limit=0 audit_backlog_limit=64 [ 238.965116][ T5274] audit: backlog limit exceeded [ 238.966376][ T29] audit: type=1400 audit(1784502734.755:126834): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.970690][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.002126][ T29] audit: type=1400 audit(1784502734.755:126835): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.024118][ T29] audit: type=1400 audit(1784502734.755:126836): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.722062][ T9099] netlink: 'syz.0.1154': attribute type 4 has an invalid length. [ 239.818536][ T9100] netlink: 'syz.0.1154': attribute type 4 has an invalid length. [ 240.093163][ T9108] netlink: 'syz.2.1158': attribute type 4 has an invalid length. [ 240.538130][ T9117] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 240.547294][ T78] wlan1: Selected IBSS BSSID b6:02:44:b2:f2:a1 based on configured SSID [ 243.860176][ T29] kauditd_printk_skb: 12796 callbacks suppressed [ 243.860194][ T29] audit: type=1400 audit(1784502739.765:137915): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.945679][ T29] audit: type=1400 audit(1784502739.765:137916): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.948758][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.971205][ T9183] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.983280][ T9183] audit: audit_lost=6133 audit_rate_limit=0 audit_backlog_limit=64 [ 243.991875][ T9183] audit: backlog limit exceeded [ 243.996945][ T29] audit: type=1400 audit(1784502739.765:137917): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 244.034249][ T9184] audit: audit_backlog=65 > audit_backlog_limit=64 [ 244.048873][ T9184] audit: audit_lost=6134 audit_rate_limit=0 audit_backlog_limit=64 [ 244.050906][ T29] audit: type=1400 audit(1784502739.765:137918): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 244.587854][ T9198] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 247.358400][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 247.759983][ T9276] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.868360][ T29] kauditd_printk_skb: 10311 callbacks suppressed [ 248.868379][ T29] audit: type=1400 audit(1784502744.765:148083): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.899381][ T29] audit: type=1400 audit(1784502744.765:148084): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.922235][ T29] audit: type=1400 audit(1784502744.775:148085): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.972080][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.983134][ T9300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.985082][ T29] audit: type=1400 audit(1784502744.775:148086): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.029766][ T5612] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.037932][ T5274] audit: audit_lost=6184 audit_rate_limit=0 audit_backlog_limit=64 [ 249.039921][ T5612] audit: audit_lost=6185 audit_rate_limit=0 audit_backlog_limit=64 [ 249.056035][ T29] audit: type=1400 audit(1784502744.775:148087): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.439276][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 250.718963][ T3330] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.599866][ T3330] wlan1: Trigger new scan to find an IBSS to join [ 251.678691][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 253.760427][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 253.880829][ T29] kauditd_printk_skb: 12629 callbacks suppressed [ 253.881025][ T29] audit: type=1400 audit(1784502749.775:160713): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.001749][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.012675][ T29] audit: type=1400 audit(1784502749.775:160714): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.019806][ T5274] audit: audit_lost=6187 audit_rate_limit=0 audit_backlog_limit=64 [ 254.060576][ T9399] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.076113][ T9399] audit: audit_lost=6188 audit_rate_limit=0 audit_backlog_limit=64 [ 254.087183][ T9401] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.094477][ T29] audit: type=1400 audit(1784502749.785:160715): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.100135][ T5274] audit: backlog limit exceeded [ 254.119677][ T9399] audit: backlog limit exceeded [ 254.336911][ T9412] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 254.342643][ T78] wlan1: Selected IBSS BSSID 46:c7:84:20:47:72 based on configured SSID [ 254.374662][ T9414] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 254.650940][ T13] wlan1: Trigger new scan to find an IBSS to join [ 255.262062][ T9442] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 255.561910][ T78] wlan1: Creating new IBSS network, BSSID da:81:77:2b:ca:80 [ 256.226790][ T9479] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 256.237610][ T13] wlan1: Selected IBSS BSSID da:81:77:2b:ca:80 based on configured SSID [ 256.482295][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.488921][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.676328][ T9514] netlink: 'syz.3.1310': attribute type 4 has an invalid length. [ 257.690580][ T13] wlan1: Trigger new scan to find an IBSS to join [ 257.734816][ T9514] netlink: 'syz.3.1310': attribute type 4 has an invalid length. [ 258.923505][ T29] kauditd_printk_skb: 13472 callbacks suppressed [ 258.923523][ T29] audit: type=1400 audit(1784502754.825:174057): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.014236][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.021053][ T5274] audit: audit_lost=6233 audit_rate_limit=0 audit_backlog_limit=64 [ 259.029142][ T5274] audit: backlog limit exceeded [ 259.034250][ T5621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.034303][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.047571][ T5274] audit: audit_lost=6234 audit_rate_limit=0 audit_backlog_limit=64 [ 259.054974][ T29] audit: type=1400 audit(1784502754.825:174058): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.055675][ T5274] audit: backlog limit exceeded [ 259.084167][ T5621] audit: audit_lost=6235 audit_rate_limit=0 audit_backlog_limit=64 [ 260.398419][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 261.746604][ T9606] netlink: 'syz.1.1344': attribute type 4 has an invalid length. [ 262.638514][ T3307] wlan1: Trigger new scan to find an IBSS to join [ 263.251286][ T9637] netlink: 'syz.4.1355': attribute type 4 has an invalid length. [ 263.572322][ T78] wlan1: Creating new IBSS network, BSSID 8a:53:97:2e:f3:40 [ 263.928790][ T29] kauditd_printk_skb: 9309 callbacks suppressed [ 263.928808][ T29] audit: type=1400 audit(1784502759.835:182038): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.951739][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.982216][ T5274] audit: audit_lost=6679 audit_rate_limit=0 audit_backlog_limit=64 [ 263.996914][ T9652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.013697][ T5274] audit: backlog limit exceeded [ 264.018543][ T29] audit: type=1400 audit(1784502759.835:182039): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.026223][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.041574][ T9652] audit: audit_lost=6680 audit_rate_limit=0 audit_backlog_limit=64 [ 264.069203][ T9653] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.086071][ T29] audit: type=1400 audit(1784502759.835:182040): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.558493][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 264.945713][ T9666] netlink: 'syz.1.1364': attribute type 4 has an invalid length. [ 265.479522][ T9683] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.479535][ T13] wlan1: Selected IBSS BSSID da:81:77:2b:ca:80 based on configured SSID [ 265.705650][ T5613] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 265.715392][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 265.715423][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 265.715437][ T5613] Workqueue: hci3 hci_rx_work [ 265.715492][ T5613] Call Trace: [ 265.715500][ T5613] [ 265.715510][ T5613] dump_stack_lvl+0x100/0x190 [ 265.715546][ T5613] sysfs_warn_dup.cold+0x1c/0x28 [ 265.715580][ T5613] sysfs_create_dir_ns+0x24b/0x2b0 [ 265.715624][ T5613] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 265.715652][ T5613] ? find_held_lock+0x2b/0x80 [ 265.715683][ T5613] ? kobject_add_internal+0x25f/0x930 [ 265.715710][ T5613] ? kobject_add_internal+0x25f/0x930 [ 265.715738][ T5613] ? do_raw_spin_unlock+0x145/0x1e0 [ 265.715766][ T5613] kobject_add_internal+0x2c8/0x930 [ 265.715795][ T5613] kobject_add+0x16a/0x1e0 [ 265.715819][ T5613] ? __pfx_kobject_add+0x10/0x10 [ 265.715840][ T5613] ? class_to_subsys+0x10f/0x150 [ 265.715875][ T5613] ? kobject_put+0xb9/0x640 [ 265.715896][ T5613] ? _raw_spin_unlock+0x28/0x50 [ 265.715928][ T5613] device_add+0x294/0x1970 [ 265.715951][ T5613] ? __pfx_dev_set_name+0x10/0x10 [ 265.715987][ T5613] ? __pfx_device_add+0x10/0x10 [ 265.716010][ T5613] ? mgmt_send_event_skb+0x2fb/0x460 [ 265.716050][ T5613] hci_conn_add_sysfs+0x1a3/0x260 [ 265.716072][ T5613] le_conn_complete_evt+0x11eb/0x1f60 [ 265.716106][ T5613] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 265.716130][ T5613] ? hci_event_packet+0x186/0xcd0 [ 265.716164][ T5613] hci_le_conn_complete_evt+0x23c/0x3a0 [ 265.716192][ T5613] ? skb_pull_data+0x15f/0x1e0 [ 265.716222][ T5613] hci_le_meta_evt+0x34a/0x5f0 [ 265.716239][ T5613] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 265.716269][ T5613] hci_event_packet+0x51c/0xcd0 [ 265.716298][ T5613] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 265.716315][ T5613] ? __pfx_hci_event_packet+0x10/0x10 [ 265.716352][ T5613] ? kcov_remote_start+0x384/0x670 [ 265.716382][ T5613] ? lockdep_hardirqs_on+0x78/0x100 [ 265.716418][ T5613] hci_rx_work+0x451/0xfc0 [ 265.716451][ T5613] process_one_work+0xa23/0x1940 [ 265.716481][ T5613] ? __pfx_process_one_work+0x10/0x10 [ 265.716509][ T5613] ? __pfx_hci_rx_work+0x10/0x10 [ 265.716540][ T5613] worker_thread+0x5ef/0xe50 [ 265.716570][ T5613] ? kthread+0x13a/0x450 [ 265.716598][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 265.716616][ T5613] kthread+0x370/0x450 [ 265.716642][ T5613] ? __pfx_kthread+0x10/0x10 [ 265.716679][ T5613] ret_from_fork+0x72b/0xd50 [ 265.716714][ T5613] ? __pfx_ret_from_fork+0x10/0x10 [ 265.716752][ T5613] ? __switch_to+0x800/0x10f0 [ 265.716779][ T5613] ? __pfx_kthread+0x10/0x10 [ 265.716822][ T5613] ret_from_fork_asm+0x1a/0x30 [ 265.716877][ T5613] [ 265.716927][ T5613] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 265.996317][ T5613] Bluetooth: hci3: failed to register connection device [ 266.463944][ T9705] capability: warning: `syz.4.1379' uses deprecated v2 capabilities in a way that may be insecure [ 267.438475][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 267.975763][ T5613] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 267.987711][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 267.987738][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 267.987752][ T5613] Workqueue: hci4 hci_rx_work [ 267.987784][ T5613] Call Trace: [ 267.987791][ T5613] [ 267.987799][ T5613] dump_stack_lvl+0x100/0x190 [ 267.987825][ T5613] sysfs_warn_dup.cold+0x1c/0x28 [ 267.987851][ T5613] sysfs_create_dir_ns+0x24b/0x2b0 [ 267.987879][ T5613] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 267.987913][ T5613] ? find_held_lock+0x2b/0x80 [ 267.987940][ T5613] ? kobject_add_internal+0x25f/0x930 [ 267.987966][ T5613] ? kobject_add_internal+0x25f/0x930 [ 267.987992][ T5613] ? do_raw_spin_unlock+0x145/0x1e0 [ 267.988020][ T5613] kobject_add_internal+0x2c8/0x930 [ 267.988048][ T5613] kobject_add+0x16a/0x1e0 [ 267.988072][ T5613] ? __pfx_kobject_add+0x10/0x10 [ 267.988094][ T5613] ? preempt_schedule_thunk+0x16/0x40 [ 267.988118][ T5613] ? kobject_put+0xb9/0x640 [ 267.988139][ T5613] ? _raw_spin_unlock+0x3e/0x50 [ 267.988173][ T5613] device_add+0x294/0x1970 [ 267.988200][ T5613] ? __pfx_dev_set_name+0x10/0x10 [ 267.988227][ T5613] ? __pfx_device_add+0x10/0x10 [ 267.988254][ T5613] ? mgmt_send_event_skb+0x2fb/0x460 [ 267.988285][ T5613] hci_conn_add_sysfs+0x1a3/0x260 [ 267.988305][ T5613] le_conn_complete_evt+0x11eb/0x1f60 [ 267.988359][ T5613] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 267.988389][ T5613] ? hci_event_packet+0x186/0xcd0 [ 267.988424][ T5613] hci_le_conn_complete_evt+0x23c/0x3a0 [ 267.988455][ T5613] ? skb_pull_data+0x15f/0x1e0 [ 267.988484][ T5613] hci_le_meta_evt+0x34a/0x5f0 [ 267.988501][ T5613] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 267.988533][ T5613] hci_event_packet+0x51c/0xcd0 [ 267.988562][ T5613] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 267.988580][ T5613] ? __pfx_hci_event_packet+0x10/0x10 [ 267.988610][ T5613] ? kcov_remote_start+0x384/0x670 [ 267.988630][ T5613] ? lockdep_hardirqs_on+0x78/0x100 [ 267.988659][ T5613] hci_rx_work+0x451/0xfc0 [ 267.988688][ T5613] process_one_work+0xa23/0x1940 [ 267.988719][ T5613] ? __pfx_process_one_work+0x10/0x10 [ 267.988745][ T5613] ? __pfx_hci_rx_work+0x10/0x10 [ 267.988775][ T5613] worker_thread+0x5ef/0xe50 [ 267.988803][ T5613] ? kthread+0x13a/0x450 [ 267.988827][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 267.988843][ T5613] kthread+0x370/0x450 [ 267.988870][ T5613] ? __pfx_kthread+0x10/0x10 [ 267.988907][ T5613] ret_from_fork+0x72b/0xd50 [ 267.988935][ T5613] ? __pfx_ret_from_fork+0x10/0x10 [ 267.988961][ T5613] ? __switch_to+0x800/0x10f0 [ 267.988981][ T5613] ? __pfx_kthread+0x10/0x10 [ 267.989011][ T5613] ret_from_fork_asm+0x1a/0x30 [ 267.989052][ T5613] [ 268.252816][ T5613] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 268.267869][ T5613] Bluetooth: hci4: failed to register connection device [ 268.798614][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 268.810539][ T9774] netlink: 'syz.4.1404': attribute type 4 has an invalid length. [ 268.940329][ T29] kauditd_printk_skb: 10740 callbacks suppressed [ 268.940346][ T29] audit: type=1400 audit(1784502764.845:191120): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 269.010727][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.012870][ T5621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.019736][ T5274] audit: audit_lost=7235 audit_rate_limit=0 audit_backlog_limit=64 [ 269.036663][ T9785] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.039980][ T29] audit: type=1400 audit(1784502764.875:191121): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 269.058962][ T5621] audit: audit_lost=7236 audit_rate_limit=0 audit_backlog_limit=64 [ 269.067462][ T5274] audit: backlog limit exceeded [ 269.077662][ T9785] audit: audit_lost=7237 audit_rate_limit=0 audit_backlog_limit=64 [ 269.086630][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.518479][ T4929] Bluetooth: hci3: command 0x0406 tx timeout [ 270.309532][ T9819] netlink: 'syz.4.1416': attribute type 4 has an invalid length. [ 270.807293][ T9837] netlink: 'syz.3.1425': attribute type 4 has an invalid length. [ 270.878583][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 271.198407][ T3307] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 271.598840][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 272.958754][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 273.503745][ T9902] netlink: 'syz.4.1452': attribute type 4 has an invalid length. [ 273.680065][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 273.785706][ T9909] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 273.927924][ T9911] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 273.949260][ T29] kauditd_printk_skb: 9263 callbacks suppressed [ 273.949277][ T29] audit: type=1400 audit(1784502769.845:200021): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 273.973318][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.993574][ T5274] audit: audit_lost=7359 audit_rate_limit=0 audit_backlog_limit=64 [ 274.016120][ T9914] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.017428][ T5274] audit: backlog limit exceeded [ 274.038661][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.047176][ T9914] audit: audit_lost=7360 audit_rate_limit=0 audit_backlog_limit=64 [ 274.050408][ T5274] audit: audit_lost=7361 audit_rate_limit=0 audit_backlog_limit=64 [ 274.059857][ T29] audit: type=1400 audit(1784502769.845:200022): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.066129][ T9915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.038342][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 276.367733][ T9951] FAULT_INJECTION: forcing a failure. [ 276.367733][ T9951] name failslab, interval 1, probability 0, space 0, times 0 [ 276.498407][ T9951] CPU: 0 UID: 0 PID: 9951 Comm: syz.0.1467 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.498439][ T9951] Tainted: [L]=SOFTLOCKUP [ 276.498444][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 276.498452][ T9951] Call Trace: [ 276.498457][ T9951] [ 276.498461][ T9951] dump_stack_lvl+0x100/0x190 [ 276.498481][ T9951] should_fail_ex.cold+0x5/0xa [ 276.498496][ T9951] should_failslab+0xc2/0x120 [ 276.498524][ T9951] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 276.498543][ T9951] ? sidtab_sid2str_get+0x17a/0x670 [ 276.498565][ T9951] kmemdup_noprof+0x29/0x60 [ 276.498577][ T9951] sidtab_sid2str_get+0x17a/0x670 [ 276.498596][ T9951] security_sid_to_context_core+0x35a/0x6d0 [ 276.498611][ T9951] ? avc_audit_post_callback+0x115/0x910 [ 276.498632][ T9951] avc_audit_post_callback+0x1aa/0x910 [ 276.498650][ T9951] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 276.498666][ T9951] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 276.498682][ T9951] ? skb_put+0x138/0x180 [ 276.498697][ T9951] ? audit_log_n_string+0x256/0x550 [ 276.498722][ T9951] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 276.498743][ T9951] common_lsm_audit+0x23f/0x2b0 [ 276.498760][ T9951] ? __pfx_common_lsm_audit+0x10/0x10 [ 276.498776][ T9951] ? arch_stack_walk+0xa6/0xf0 [ 276.498794][ T9951] slow_avc_audit+0x186/0x210 [ 276.498805][ T9951] ? __pfx_slow_avc_audit+0x10/0x10 [ 276.498818][ T9951] ? find_held_lock+0x2b/0x80 [ 276.498840][ T9951] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 276.498856][ T9951] ? avc_denied+0x14a/0x190 [ 276.498875][ T9951] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 276.498888][ T9951] avc_has_perm+0x1a6/0x1e0 [ 276.498899][ T9951] ? __pfx_avc_has_perm+0x10/0x10 [ 276.498909][ T9951] ? __lock_acquire+0x49f/0x1a40 [ 276.498926][ T9951] __file_map_prot_check+0x368/0x830 [ 276.498939][ T9951] selinux_mmap_file+0x14d/0x1c0 [ 276.498949][ T9951] ? __pfx_selinux_mmap_file+0x10/0x10 [ 276.498960][ T9951] ? get_pid_task+0x106/0x250 [ 276.498976][ T9951] ? proc_fail_nth_write+0x9f/0x220 [ 276.498998][ T9951] security_mmap_file+0xc3/0x9b0 [ 276.499014][ T9951] vm_mmap_pgoff+0xec/0x470 [ 276.499027][ T9951] ? ksys_write+0x190/0x250 [ 276.499042][ T9951] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 276.499057][ T9951] ? __mutex_unlock_slowpath+0x35d/0x930 [ 276.499072][ T9951] ksys_mmap_pgoff+0xe4/0x610 [ 276.499087][ T9951] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 276.499099][ T9951] ? fput+0x79/0x100 [ 276.499110][ T9951] ? ksys_write+0x1ac/0x250 [ 276.499124][ T9951] ? __pfx_ksys_write+0x10/0x10 [ 276.499141][ T9951] __x64_sys_mmap+0x125/0x190 [ 276.499157][ T9951] do_syscall_64+0x115/0x870 [ 276.499167][ T9951] ? clear_bhb_loop+0x40/0x90 [ 276.499180][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.499192][ T9951] RIP: 0033:0x7fccd5d9de99 [ 276.499202][ T9951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.499212][ T9951] RSP: 002b:00007fccd6cd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 276.499224][ T9951] RAX: ffffffffffffffda RBX: 00007fccd6025fa0 RCX: 00007fccd5d9de99 [ 276.499231][ T9951] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 276.499240][ T9951] RBP: 00007fccd6cd1090 R08: ffffffffffffffff R09: 0000000000000000 [ 276.499246][ T9951] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000001 [ 276.499252][ T9951] R13: 00007fccd6026038 R14: 00007fccd6025fa0 R15: 00007ffe77291df8 [ 276.499266][ T9951] [ 278.048095][ T9975] netlink: 'syz.2.1473': attribute type 4 has an invalid length. [ 278.230730][ T9983] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 278.240597][ T3307] wlan1: Selected IBSS BSSID 8a:53:97:2e:f3:40 based on configured SSID [ 278.964627][ T29] kauditd_printk_skb: 7938 callbacks suppressed [ 278.964645][ T29] audit: type=1400 audit(1784502774.865:207444): avc: denied { mounton } for pid=9998 comm="syz.4.1483" path="/284/file0" dev="tmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 279.074193][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.087040][ T9999] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.093295][ T29] audit: type=1400 audit(1784502774.875:207445): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.117811][ T29] audit: type=1400 audit(1784502774.875:207446): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.141800][ T29] audit: type=1400 audit(1784502774.875:207447): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.164546][ T29] audit: type=1400 audit(1784502774.875:207448): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.203860][ T5274] audit: audit_lost=7534 audit_rate_limit=0 audit_backlog_limit=64 [ 279.219554][ T9999] audit: audit_lost=7535 audit_rate_limit=0 audit_backlog_limit=64 [ 279.241285][ T9999] audit: backlog limit exceeded [ 279.680410][T10017] FAULT_INJECTION: forcing a failure. [ 279.680410][T10017] name failslab, interval 1, probability 0, space 0, times 0 [ 279.694512][T10017] CPU: 1 UID: 0 PID: 10017 Comm: syz.3.1489 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.694541][T10017] Tainted: [L]=SOFTLOCKUP [ 279.694547][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 279.694557][T10017] Call Trace: [ 279.694563][T10017] [ 279.694570][T10017] dump_stack_lvl+0x100/0x190 [ 279.694599][T10017] should_fail_ex.cold+0x5/0xa [ 279.694621][T10017] should_failslab+0xc2/0x120 [ 279.694644][T10017] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 279.694667][T10017] ? sidtab_sid2str_get+0x17a/0x670 [ 279.694699][T10017] kmemdup_noprof+0x29/0x60 [ 279.694718][T10017] sidtab_sid2str_get+0x17a/0x670 [ 279.694748][T10017] security_sid_to_context_core+0x35a/0x6d0 [ 279.694775][T10017] avc_audit_post_callback+0x109/0x910 [ 279.694802][T10017] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 279.694821][T10017] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 279.694837][T10017] ? skb_put+0x138/0x180 [ 279.694853][T10017] ? audit_log_n_string+0x256/0x550 [ 279.694874][T10017] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 279.694891][T10017] common_lsm_audit+0x23f/0x2b0 [ 279.694906][T10017] ? __pfx_common_lsm_audit+0x10/0x10 [ 279.694923][T10017] ? kernel_text_address+0x8d/0x100 [ 279.694936][T10017] slow_avc_audit+0x186/0x210 [ 279.694948][T10017] ? __pfx_slow_avc_audit+0x10/0x10 [ 279.694959][T10017] ? find_held_lock+0x2b/0x80 [ 279.694974][T10017] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 279.694984][T10017] ? avc_denied+0x14a/0x190 [ 279.694995][T10017] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 279.695008][T10017] avc_has_perm+0x1a6/0x1e0 [ 279.695020][T10017] ? __pfx_avc_has_perm+0x10/0x10 [ 279.695029][T10017] ? rtnl_newlink+0x126/0x2380 [ 279.695044][T10017] ? vsnprintf+0x4c5/0x1300 [ 279.695063][T10017] selinux_kernel_module_request+0x128/0x180 [ 279.695080][T10017] ? __pfx_selinux_kernel_module_request+0x10/0x10 [ 279.695102][T10017] security_kernel_module_request+0x87/0x1e0 [ 279.695114][T10017] __request_module+0x17a/0x6a0 [ 279.695142][T10017] ? __pfx___request_module+0x10/0x10 [ 279.695161][T10017] ? find_held_lock+0x2b/0x80 [ 279.695176][T10017] ? rtnl_link_ops_get+0x17b/0x2c0 [ 279.695187][T10017] ? rtnl_link_ops_get+0x17b/0x2c0 [ 279.695203][T10017] rtnl_newlink+0x1657/0x2380 [ 279.695220][T10017] ? __pfx_rtnl_newlink+0x10/0x10 [ 279.695231][T10017] ? find_held_lock+0x2b/0x80 [ 279.695258][T10017] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 279.695269][T10017] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 279.695282][T10017] ? avc_has_perm_noaudit+0x145/0x3b0 [ 279.695310][T10017] ? find_held_lock+0x2b/0x80 [ 279.695324][T10017] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 279.695336][T10017] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 279.695350][T10017] ? __pfx_rtnl_newlink+0x10/0x10 [ 279.695362][T10017] rtnetlink_rcv_msg+0x95e/0xe90 [ 279.695376][T10017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.695392][T10017] ? ref_tracker_free+0x37e/0x6c0 [ 279.695409][T10017] netlink_rcv_skb+0x159/0x420 [ 279.695428][T10017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.695441][T10017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.695462][T10017] ? netlink_deliver_tap+0x1ae/0xcc0 [ 279.695480][T10017] netlink_unicast+0x585/0x850 [ 279.695497][T10017] ? __pfx_netlink_unicast+0x10/0x10 [ 279.695517][T10017] netlink_sendmsg+0x8b0/0xda0 [ 279.695535][T10017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.695552][T10017] ? selinux_socket_sendmsg+0x198/0x2f0 [ 279.695568][T10017] ____sys_sendmsg+0xa4d/0xbe0 [ 279.695583][T10017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.695600][T10017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.695616][T10017] ? __pfx__kstrtoull+0x10/0x10 [ 279.695636][T10017] ___sys_sendmsg+0x190/0x1e0 [ 279.695652][T10017] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.695680][T10017] ? find_held_lock+0x2b/0x80 [ 279.695711][T10017] __sys_sendmmsg+0x20c/0x440 [ 279.695724][T10017] ? __pfx___sys_sendmmsg+0x10/0x10 [ 279.695735][T10017] ? ksys_write+0x190/0x250 [ 279.695761][T10017] ? fput+0x79/0x100 [ 279.695772][T10017] ? ksys_write+0x1ac/0x250 [ 279.695786][T10017] ? __pfx_ksys_write+0x10/0x10 [ 279.695804][T10017] __x64_sys_sendmmsg+0x9c/0x100 [ 279.695815][T10017] ? lockdep_hardirqs_on+0x78/0x100 [ 279.695832][T10017] do_syscall_64+0x115/0x870 [ 279.695841][T10017] ? clear_bhb_loop+0x40/0x90 [ 279.695855][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.695865][T10017] RIP: 0033:0x7f636279de99 [ 279.695879][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.695890][T10017] RSP: 002b:00007f6363687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.695901][T10017] RAX: ffffffffffffffda RBX: 00007f6362a25fa0 RCX: 00007f636279de99 [ 279.695908][T10017] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 279.695914][T10017] RBP: 00007f6363687090 R08: 0000000000000000 R09: 0000000000000000 [ 279.695920][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.695927][T10017] R13: 00007f6362a26038 R14: 00007f6362a25fa0 R15: 00007ffcd88763d8 [ 279.695940][T10017] [ 280.359147][T10017] netlink: 'syz.3.1489': attribute type 3 has an invalid length. [ 282.080951][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.231618][T10070] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1510'. [ 282.878338][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 282.955616][ T3330] wlan1: Selected IBSS BSSID 46:c7:84:20:47:72 based on configured SSID [ 282.966050][T10085] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 283.480970][T10094] netlink: 'syz.0.1518': attribute type 3 has an invalid length. [ 283.969002][ T29] kauditd_printk_skb: 7830 callbacks suppressed [ 283.969021][ T29] audit: type=1400 audit(1784502779.875:215023): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 284.033369][ T29] audit: type=1400 audit(1784502779.875:215024): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 284.057050][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.069478][ T5274] audit: audit_lost=7621 audit_rate_limit=0 audit_backlog_limit=64 [ 284.075344][ T29] audit: type=1400 audit(1784502779.875:215025): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 284.110305][ T5274] audit: backlog limit exceeded [ 284.115406][ T29] audit: type=1400 audit(1784502779.875:215026): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 284.147566][ T29] audit: type=1400 audit(1784502779.875:215027): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 284.190336][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.207581][ T5274] audit: audit_lost=7622 audit_rate_limit=0 audit_backlog_limit=64 [ 284.478461][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 285.626004][T10138] netlink: 7440 bytes leftover after parsing attributes in process `syz.4.1535'. [ 286.290323][T10152] trusted_key: encrypted_key: insufficient parameters specified [ 286.568476][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 287.038481][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 288.063255][T10184] FAULT_INJECTION: forcing a failure. [ 288.063255][T10184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.088237][T10184] CPU: 1 UID: 0 PID: 10184 Comm: syz.3.1551 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.088267][T10184] Tainted: [L]=SOFTLOCKUP [ 288.088272][T10184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 288.088280][T10184] Call Trace: [ 288.088285][T10184] [ 288.088291][T10184] dump_stack_lvl+0x100/0x190 [ 288.088316][T10184] should_fail_ex.cold+0x5/0xa [ 288.088337][T10184] _copy_from_user+0x2e/0xd0 [ 288.088359][T10184] kstrtouint_from_user+0xd6/0x1d0 [ 288.088385][T10184] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 288.088406][T10184] ? __lock_acquire+0x49f/0x1a40 [ 288.088435][T10184] proc_fail_nth_write+0x83/0x220 [ 288.088458][T10184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 288.088488][T10184] vfs_write+0x2aa/0x1050 [ 288.088510][T10184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 288.088533][T10184] ? __pfx_vfs_write+0x10/0x10 [ 288.088553][T10184] ? __fget_files+0x215/0x3d0 [ 288.088574][T10184] ? __fget_files+0x21f/0x3d0 [ 288.088595][T10184] ksys_write+0x12a/0x250 [ 288.088616][T10184] ? __pfx_ksys_write+0x10/0x10 [ 288.088644][T10184] do_syscall_64+0x115/0x870 [ 288.088662][T10184] ? clear_bhb_loop+0x40/0x90 [ 288.088683][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.088700][T10184] RIP: 0033:0x7f636275e6ce [ 288.088715][T10184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 288.088731][T10184] RSP: 002b:00007f6363686fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.088772][T10184] RAX: ffffffffffffffda RBX: 00007f63636876c0 RCX: 00007f636275e6ce [ 288.088782][T10184] RDX: 0000000000000001 RSI: 00007f63636870a0 RDI: 0000000000000003 [ 288.088792][T10184] RBP: 00007f6363687090 R08: 0000000000000000 R09: 0000000000000000 [ 288.088802][T10184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.088811][T10184] R13: 00007f6362a26038 R14: 00007f6362a25fa0 R15: 00007ffcd88763d8 [ 288.088832][T10184] [ 288.305117][T10185] netlink: 'syz.2.1549': attribute type 4 has an invalid length. [ 288.978349][ T29] kauditd_printk_skb: 10269 callbacks suppressed [ 288.978366][ T29] audit: type=1400 audit(1784502784.875:225065): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 289.015984][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.022876][ T5274] audit: audit_lost=7700 audit_rate_limit=0 audit_backlog_limit=64 [ 289.031012][ T5274] audit: backlog limit exceeded [ 289.035998][ T29] audit: type=1400 audit(1784502784.875:225066): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 289.054766][ T5610] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.070510][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.078604][ T5610] audit: audit_lost=7701 audit_rate_limit=0 audit_backlog_limit=64 [ 289.080322][ T5274] audit: audit_lost=7702 audit_rate_limit=0 audit_backlog_limit=64 [ 289.089367][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.985703][T10220] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 290.624564][T10236] x_tables: duplicate entry at hook 2 [ 292.258942][T10277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.299139][T10277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.325401][T10277] bond0 (unregistering): Released all slaves [ 292.639795][ T35] wlan1: Trigger new scan to find an IBSS to join [ 293.736359][T10313] SELinux: syz.2.1597 (10313) wrote to user. This is no longer supported. [ 293.990129][ T29] kauditd_printk_skb: 9275 callbacks suppressed [ 293.990143][ T29] audit: type=1400 audit(1784502789.885:234338): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 294.020100][ T29] audit: type=1400 audit(1784502789.885:234339): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 294.042049][ T29] audit: type=1400 audit(1784502789.885:234340): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 294.067415][ T29] audit: type=1400 audit(1784502789.885:234341): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 294.070531][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.097642][ T29] audit: type=1400 audit(1784502789.885:234342): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 294.120219][ T29] audit: type=1400 audit(1784502789.885:234343): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 294.142599][ T29] audit: type=1400 audit(1784502789.885:234344): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 294.169996][ T5274] audit: audit_lost=7704 audit_rate_limit=0 audit_backlog_limit=64 [ 294.188469][ T29] audit: type=1400 audit(1784502789.885:234345): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 295.245189][T10346] FAULT_INJECTION: forcing a failure. [ 295.245189][T10346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.271754][T10351] batadv_slave_1: entered promiscuous mode [ 295.314189][T10346] CPU: 0 UID: 0 PID: 10346 Comm: syz.0.1609 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.314220][T10346] Tainted: [L]=SOFTLOCKUP [ 295.314226][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 295.314236][T10346] Call Trace: [ 295.314242][T10346] [ 295.314249][T10346] dump_stack_lvl+0x100/0x190 [ 295.314278][T10346] should_fail_ex.cold+0x5/0xa [ 295.314302][T10346] _copy_to_user+0x32/0xd0 [ 295.314325][T10346] pagemap_read+0x51b/0x830 [ 295.314375][T10346] ? __pfx_pagemap_read+0x10/0x10 [ 295.314402][T10346] ? rw_verify_area+0xce/0x6d0 [ 295.314423][T10346] ? __pfx_pagemap_read+0x10/0x10 [ 295.314446][T10346] vfs_read+0x1e4/0xb40 [ 295.314471][T10346] ? __pfx_vfs_read+0x10/0x10 [ 295.314492][T10346] ? find_held_lock+0x2b/0x80 [ 295.314515][T10346] ? __fget_files+0x215/0x3d0 [ 295.314530][T10346] ? __fget_files+0x215/0x3d0 [ 295.314553][T10346] ? __fget_files+0x21f/0x3d0 [ 295.314576][T10346] __x64_sys_pread64+0x1eb/0x250 [ 295.314603][T10346] ? __pfx___x64_sys_pread64+0x10/0x10 [ 295.314631][T10346] do_syscall_64+0x115/0x870 [ 295.314646][T10346] ? clear_bhb_loop+0x40/0x90 [ 295.314665][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.314682][T10346] RIP: 0033:0x7fccd5d9de99 [ 295.314698][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.314715][T10346] RSP: 002b:00007fccd6cd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 295.314738][T10346] RAX: ffffffffffffffda RBX: 00007fccd6025fa0 RCX: 00007fccd5d9de99 [ 295.314749][T10346] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000003 [ 295.314759][T10346] RBP: 00007fccd6cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 295.314768][T10346] R10: 0000000ffffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 295.314778][T10346] R13: 00007fccd6026038 R14: 00007fccd6025fa0 R15: 00007ffe77291df8 [ 295.314800][T10346] [ 295.678465][ T3381] wlan1: Trigger new scan to find an IBSS to join [ 295.731409][T10355] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.159948][ T3381] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 296.883141][T10393] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.892431][ T3381] wlan1: Selected IBSS BSSID 8a:53:97:2e:f3:40 based on configured SSID [ 297.459190][T10409] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5609] was attempted by "ss(pE{بD8HEV[\x0cE0p2\x09'؛69\x076\x0c)\x0a!'Vv>y1lV35ФiAVDoU9)KbVDc\x07ojc9xNRH9p\x22L+Xp>iN0zR>:MLoHIG\x07B9r(dKf^7_N䀟\x5c-D}i;Zzd8:\x072hnk*d-l1N5Ky\x22b%l5.dsUkc$ audit_backlog_limit=64 [ 299.075985][ T5611] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.078370][ T29] audit: type=1400 audit(1784502794.905:243912): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 299.082654][ T5274] audit: audit_lost=8116 audit_rate_limit=0 audit_backlog_limit=64 [ 299.119017][ T5611] audit: audit_lost=8117 audit_rate_limit=0 audit_backlog_limit=64 [ 299.127730][ T5611] audit: backlog limit exceeded [ 299.141067][ T5274] audit: backlog limit exceeded [ 299.152034][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.160093][ T29] audit: type=1400 audit(1784502794.905:243913): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 299.602386][ T35] wlan1: Trigger new scan to find an IBSS to join [ 300.548458][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 300.593765][T10470] bridge_slave_1: left allmulticast mode [ 300.621293][T10470] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.646123][ T3307] wlan1: Trigger new scan to find an IBSS to join [ 300.792711][T10470] bridge_slave_0: left allmulticast mode [ 300.833590][T10470] bridge_slave_0: left promiscuous mode [ 300.878157][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.638643][ T13] wlan1: Trigger new scan to find an IBSS to join [ 303.531622][T10518] netlink: 'syz.0.1668': attribute type 4 has an invalid length. [ 303.576574][ T35] wlan1: Creating new IBSS network, BSSID 72:a7:14:41:d0:78 [ 303.680924][ T3381] wlan1: Trigger new scan to find an IBSS to join [ 304.012359][ T29] kauditd_printk_skb: 9827 callbacks suppressed [ 304.012377][ T29] audit: type=1400 audit(1784502799.905:252923): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.069695][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 304.087842][ T5611] audit: audit_backlog=65 > audit_backlog_limit=64 [ 304.087945][ T5274] audit: audit_lost=8391 audit_rate_limit=0 audit_backlog_limit=64 [ 304.097959][ T29] audit: type=1400 audit(1784502799.915:252924): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.125031][ T5611] audit: audit_lost=8392 audit_rate_limit=0 audit_backlog_limit=64 [ 304.126180][ T5274] audit: backlog limit exceeded [ 304.141447][ T5611] audit: backlog limit exceeded [ 304.167473][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 304.180369][ T29] audit: type=1400 audit(1784502799.915:252925): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.704990][T10538] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 305.771038][T10568] netlink: 'syz.2.1685': attribute type 4 has an invalid length. [ 307.721193][T10597] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 308.244387][T10622] netlink: 'syz.3.1703': attribute type 4 has an invalid length. [ 308.639299][ T3381] wlan1: Trigger new scan to find an IBSS to join [ 309.019662][ T29] kauditd_printk_skb: 10826 callbacks suppressed [ 309.019681][ T29] audit: type=1400 audit(1784502804.915:263456): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.062421][ T29] audit: type=1400 audit(1784502804.925:263457): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.114782][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 309.133562][ T5274] audit: audit_lost=8492 audit_rate_limit=0 audit_backlog_limit=64 [ 309.152422][ T5274] audit: backlog limit exceeded [ 309.164475][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 309.179633][ T5274] audit: audit_lost=8493 audit_rate_limit=0 audit_backlog_limit=64 [ 309.201625][ T5274] audit: backlog limit exceeded [ 309.216907][ T29] audit: type=1400 audit(1784502804.925:263458): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.218539][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 311.606537][ T13] wlan1: Trigger new scan to find an IBSS to join [ 312.068220][T10703] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1734'. [ 312.487789][T10719] netlink: 'syz.2.1739': attribute type 4 has an invalid length. [ 312.563843][ T78] wlan1: Creating new IBSS network, BSSID 8e:41:56:83:89:e3 [ 312.973852][ T1123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.744804][T10745] FAULT_INJECTION: forcing a failure. [ 313.744804][T10745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.778406][T10745] CPU: 0 UID: 0 PID: 10745 Comm: syz.3.1748 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.778436][T10745] Tainted: [L]=SOFTLOCKUP [ 313.778459][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 313.778470][T10745] Call Trace: [ 313.778477][T10745] [ 313.778484][T10745] dump_stack_lvl+0x100/0x190 [ 313.778517][T10745] should_fail_ex.cold+0x5/0xa [ 313.778541][T10745] _copy_from_user+0x2e/0xd0 [ 313.778565][T10745] kstrtouint_from_user+0xd6/0x1d0 [ 313.778592][T10745] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 313.778618][T10745] ? __lock_acquire+0x49f/0x1a40 [ 313.778650][T10745] proc_fail_nth_write+0x83/0x220 [ 313.778678][T10745] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.778709][T10745] vfs_write+0x2aa/0x1050 [ 313.778736][T10745] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.778763][T10745] ? __pfx_vfs_write+0x10/0x10 [ 313.778787][T10745] ? __fget_files+0x215/0x3d0 [ 313.778809][T10745] ? __fget_files+0x21f/0x3d0 [ 313.778835][T10745] ksys_write+0x12a/0x250 [ 313.778859][T10745] ? __pfx_ksys_write+0x10/0x10 [ 313.778891][T10745] do_syscall_64+0x115/0x870 [ 313.778909][T10745] ? clear_bhb_loop+0x40/0x90 [ 313.778937][T10745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.778956][T10745] RIP: 0033:0x7f636275e6ce [ 313.778971][T10745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.778988][T10745] RSP: 002b:00007f6363686fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.779007][T10745] RAX: ffffffffffffffda RBX: 00007f63636876c0 RCX: 00007f636275e6ce [ 313.779019][T10745] RDX: 0000000000000001 RSI: 00007f63636870a0 RDI: 0000000000000003 [ 313.779028][T10745] RBP: 00007f6363687090 R08: 0000000000000000 R09: 0000000000000000 [ 313.779039][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.779049][T10745] R13: 00007f6362a26038 R14: 00007f6362a25fa0 R15: 00007ffcd88763d8 [ 313.779074][T10745] [ 314.098753][ T29] kauditd_printk_skb: 8860 callbacks suppressed [ 314.098771][ T29] audit: type=1400 audit(1784502809.935:272317): avc: denied { create } for pid=10736 comm="syz.0.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 314.138385][ T29] audit: type=1400 audit(1784502809.955:272318): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 314.163245][ T29] audit: type=1400 audit(1784502809.955:272319): avc: denied { create } for pid=10746 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 314.184341][ T29] audit: type=1400 audit(1784502809.965:272320): avc: denied { execmem } for pid=10746 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 314.194322][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 314.205328][ T29] audit: type=1400 audit(1784502809.975:272321): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 314.274014][ T29] audit: type=1400 audit(1784502809.985:272322): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 314.317786][ T29] audit: type=1400 audit(1784502809.985:272323): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 314.323870][ T5274] audit: audit_lost=8495 audit_rate_limit=0 audit_backlog_limit=64 [ 314.360738][T10758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 315.800306][T10791] netlink: 'syz.3.1764': attribute type 4 has an invalid length. [ 317.629692][T10831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.711568][T10843] FAULT_INJECTION: forcing a failure. [ 317.711568][T10843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.726351][T10843] CPU: 0 UID: 0 PID: 10843 Comm: syz.0.1783 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.726381][T10843] Tainted: [L]=SOFTLOCKUP [ 317.726388][T10843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 317.726398][T10843] Call Trace: [ 317.726404][T10843] [ 317.726412][T10843] dump_stack_lvl+0x100/0x190 [ 317.726446][T10843] should_fail_ex.cold+0x5/0xa [ 317.726466][T10843] _copy_from_user+0x2e/0xd0 [ 317.726488][T10843] kstrtouint_from_user+0xd6/0x1d0 [ 317.726511][T10843] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 317.726534][T10843] ? __lock_acquire+0x49f/0x1a40 [ 317.726563][T10843] proc_fail_nth_write+0x83/0x220 [ 317.726587][T10843] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.726650][T10843] vfs_write+0x2aa/0x1050 [ 317.726675][T10843] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.726702][T10843] ? __pfx_vfs_write+0x10/0x10 [ 317.726726][T10843] ? __fget_files+0x215/0x3d0 [ 317.726747][T10843] ? __fget_files+0x21f/0x3d0 [ 317.726769][T10843] ksys_write+0x12a/0x250 [ 317.726791][T10843] ? __pfx_ksys_write+0x10/0x10 [ 317.726819][T10843] do_syscall_64+0x115/0x870 [ 317.726836][T10843] ? clear_bhb_loop+0x40/0x90 [ 317.726855][T10843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.726871][T10843] RIP: 0033:0x7fccd5d5e6ce [ 317.726885][T10843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 317.726900][T10843] RSP: 002b:00007fccd6cd0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.726915][T10843] RAX: ffffffffffffffda RBX: 00007fccd6cd16c0 RCX: 00007fccd5d5e6ce [ 317.726925][T10843] RDX: 0000000000000001 RSI: 00007fccd6cd10a0 RDI: 0000000000000003 [ 317.726934][T10843] RBP: 00007fccd6cd1090 R08: 0000000000000000 R09: 0000000000000000 [ 317.726943][T10843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.726953][T10843] R13: 00007fccd6026038 R14: 00007fccd6025fa0 R15: 00007ffe77291df8 [ 317.726976][T10843] [ 318.144058][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.153896][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.605807][T10856] FAULT_INJECTION: forcing a failure. [ 318.605807][T10856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.628569][T10856] CPU: 1 UID: 0 PID: 10856 Comm: syz.1.1789 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.628589][T10856] Tainted: [L]=SOFTLOCKUP [ 318.628592][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 318.628602][T10856] Call Trace: [ 318.628606][T10856] [ 318.628611][T10856] dump_stack_lvl+0x100/0x190 [ 318.628630][T10856] should_fail_ex.cold+0x5/0xa [ 318.628644][T10856] _copy_from_user+0x2e/0xd0 [ 318.628665][T10856] kstrtouint_from_user+0xd6/0x1d0 [ 318.628682][T10856] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 318.628698][T10856] ? __lock_acquire+0x49f/0x1a40 [ 318.628717][T10856] proc_fail_nth_write+0x83/0x220 [ 318.628734][T10856] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.628753][T10856] vfs_write+0x2aa/0x1050 [ 318.628770][T10856] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.628786][T10856] ? __pfx_vfs_write+0x10/0x10 [ 318.628801][T10856] ? __fget_files+0x215/0x3d0 [ 318.628814][T10856] ? __fget_files+0x21f/0x3d0 [ 318.628842][T10856] ksys_write+0x12a/0x250 [ 318.628857][T10856] ? __pfx_ksys_write+0x10/0x10 [ 318.628877][T10856] do_syscall_64+0x115/0x870 [ 318.628888][T10856] ? clear_bhb_loop+0x40/0x90 [ 318.628901][T10856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.628912][T10856] RIP: 0033:0x7f207675e6ce [ 318.628923][T10856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.628934][T10856] RSP: 002b:00007f20776c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.628945][T10856] RAX: ffffffffffffffda RBX: 00007f20776c26c0 RCX: 00007f207675e6ce [ 318.628952][T10856] RDX: 0000000000000001 RSI: 00007f20776c20a0 RDI: 0000000000000003 [ 318.628959][T10856] RBP: 00007f20776c2090 R08: 0000000000000000 R09: 0000000000000000 [ 318.628965][T10856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.628971][T10856] R13: 00007f2076a26038 R14: 00007f2076a25fa0 R15: 00007ffdf7117388 [ 318.628985][T10856] [ 319.113027][ T29] kauditd_printk_skb: 9188 callbacks suppressed [ 319.113039][ T29] audit: type=1400 audit(1784502815.015:281503): avc: denied { mounton } for pid=10862 comm="syz.3.1792" path="/356/file0" dev="tmpfs" ino=1893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 319.207584][ T29] audit: type=1400 audit(1784502815.045:281504): avc: denied { create } for pid=10859 comm="syz.0.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 319.229937][ T29] audit: type=1400 audit(1784502815.065:281505): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.238755][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 319.251726][ T29] audit: type=1400 audit(1784502815.065:281506): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.279861][ T29] audit: type=1400 audit(1784502815.065:281507): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.301238][ T29] audit: type=1400 audit(1784502815.065:281508): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.350064][ T5274] audit: audit_lost=8499 audit_rate_limit=0 audit_backlog_limit=64 [ 319.358077][ T5274] audit: backlog limit exceeded [ 319.363930][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.923569][T10921] FAULT_INJECTION: forcing a failure. [ 320.923569][T10921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.937941][T10921] CPU: 1 UID: 0 PID: 10921 Comm: syz.1.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.937969][T10921] Tainted: [L]=SOFTLOCKUP [ 320.937976][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 320.937986][T10921] Call Trace: [ 320.937993][T10921] [ 320.938000][T10921] dump_stack_lvl+0x100/0x190 [ 320.938029][T10921] should_fail_ex.cold+0x5/0xa [ 320.938053][T10921] _copy_from_user+0x2e/0xd0 [ 320.938078][T10921] kstrtouint_from_user+0xd6/0x1d0 [ 320.938104][T10921] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 320.938129][T10921] ? __lock_acquire+0x49f/0x1a40 [ 320.938162][T10921] proc_fail_nth_write+0x83/0x220 [ 320.938188][T10921] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 320.938220][T10921] vfs_write+0x2aa/0x1050 [ 320.938247][T10921] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 320.938271][T10921] ? __pfx_vfs_write+0x10/0x10 [ 320.938293][T10921] ? __fget_files+0x215/0x3d0 [ 320.938315][T10921] ? __fget_files+0x21f/0x3d0 [ 320.938338][T10921] ksys_write+0x12a/0x250 [ 320.938364][T10921] ? __pfx_ksys_write+0x10/0x10 [ 320.938405][T10921] ? trace_hardirqs_off+0x70/0x170 [ 320.938443][T10921] do_syscall_64+0x115/0x870 [ 320.938461][T10921] ? clear_bhb_loop+0x40/0x90 [ 320.938484][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.938502][T10921] RIP: 0033:0x7f207675e6ce [ 320.938517][T10921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 320.938535][T10921] RSP: 002b:00007f20776c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.938553][T10921] RAX: ffffffffffffffda RBX: 00007f20776c26c0 RCX: 00007f207675e6ce [ 320.938571][T10921] RDX: 0000000000000001 RSI: 00007f20776c20a0 RDI: 0000000000000004 [ 320.938582][T10921] RBP: 00007f20776c2090 R08: 0000000000000000 R09: 0000000000000000 [ 320.938593][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.938604][T10921] R13: 00007f2076a26038 R14: 00007f2076a25fa0 R15: 00007ffdf7117388 [ 320.938629][T10921] [ 321.989351][T10952] ve: renamed from veth0_vlan (while UP) [ 322.877476][T10975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1833'. [ 324.118494][ T29] kauditd_printk_skb: 13819 callbacks suppressed [ 324.118512][ T29] audit: type=1400 audit(1784502820.015:295011): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.159192][ T29] audit: type=1400 audit(1784502820.015:295012): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.184363][ T29] audit: type=1400 audit(1784502820.015:295013): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.190151][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 324.208895][ T5610] audit: audit_backlog=65 > audit_backlog_limit=64 [ 324.219717][T11002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 324.226335][ T5274] audit: audit_lost=8606 audit_rate_limit=0 audit_backlog_limit=64 [ 324.234429][ T5274] audit: backlog limit exceeded [ 324.241845][T11002] audit: audit_lost=8607 audit_rate_limit=0 audit_backlog_limit=64 [ 324.250144][ T5610] audit: audit_lost=8608 audit_rate_limit=0 audit_backlog_limit=64 [ 328.173516][ T3381] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 328.188752][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 329.147318][T11090] FAULT_INJECTION: forcing a failure. [ 329.147318][T11090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.156567][ T29] kauditd_printk_skb: 12294 callbacks suppressed [ 329.156583][ T29] audit: type=1400 audit(1784502824.995:305677): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 329.187993][ T29] audit: type=1400 audit(1784502825.065:305678): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 329.209184][ T29] audit: type=1400 audit(1784502825.065:305679): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 329.230452][ T29] audit: type=1400 audit(1784502825.065:305680): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 329.251634][ T29] audit: type=1400 audit(1784502825.065:305681): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 329.320561][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 329.328851][ T5610] audit: audit_backlog=65 > audit_backlog_limit=64 [ 329.350350][ T5274] audit: audit_lost=9152 audit_rate_limit=0 audit_backlog_limit=64 [ 329.413548][ T5610] audit: audit_lost=9153 audit_rate_limit=0 audit_backlog_limit=64 [ 329.427297][ T5274] audit: backlog limit exceeded [ 329.444558][T11090] CPU: 1 UID: 0 PID: 11090 Comm: syz.0.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.444581][T11090] Tainted: [L]=SOFTLOCKUP [ 329.444585][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 329.444592][T11090] Call Trace: [ 329.444596][T11090] [ 329.444602][T11090] dump_stack_lvl+0x100/0x190 [ 329.444620][T11090] should_fail_ex.cold+0x5/0xa [ 329.444650][T11090] _copy_to_user+0x32/0xd0 [ 329.444665][T11090] __do_sys_mincore+0x2c7/0x680 [ 329.444686][T11090] do_syscall_64+0x115/0x870 [ 329.444697][T11090] ? clear_bhb_loop+0x40/0x90 [ 329.444711][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.444722][T11090] RIP: 0033:0x7fccd5d9de99 [ 329.444732][T11090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.444742][T11090] RSP: 002b:00007fccd6cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 329.444753][T11090] RAX: ffffffffffffffda RBX: 00007fccd6026090 RCX: 00007fccd5d9de99 [ 329.444761][T11090] RDX: 0000200000000440 RSI: 0000000000001000 RDI: 000020000065c000 [ 329.444767][T11090] RBP: 00007fccd6cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 329.444773][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.444779][T11090] R13: 00007fccd6026128 R14: 00007fccd6026090 R15: 00007ffe77291df8 [ 329.444793][T11090] [ 330.750646][T11114] bond0: entered promiscuous mode [ 330.771196][T11114] bond_slave_0: entered promiscuous mode [ 330.791020][T11114] bond_slave_1: entered promiscuous mode [ 330.957864][T11114] batadv0: entered promiscuous mode [ 331.124540][T11118] netlink: 'syz.3.1882': attribute type 10 has an invalid length. [ 331.163621][T11118] syz_tun: entered promiscuous mode [ 331.287080][T11118] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 331.990630][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1889'. [ 332.027608][T11138] netlink: 'syz.4.1889': attribute type 10 has an invalid length. [ 332.041973][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1889'. [ 332.249308][T11138] geneve2: entered promiscuous mode [ 332.266357][T11138] geneve2: entered allmulticast mode [ 332.829708][T11156] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5610] was attempted by ""[11156] [ 334.162565][ T29] kauditd_printk_skb: 7737 callbacks suppressed [ 334.162587][ T29] audit: type=1400 audit(1784502830.065:313148): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 334.218088][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 334.237749][ T5274] audit: audit_lost=9244 audit_rate_limit=0 audit_backlog_limit=64 [ 334.253570][ T5274] audit: backlog limit exceeded [ 334.282763][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 334.298906][T11183] audit: audit_backlog=65 > audit_backlog_limit=64 [ 334.319181][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 334.333865][ T29] audit: type=1400 audit(1784502830.075:313149): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 334.370955][ T5609] audit: audit_lost=9245 audit_rate_limit=0 audit_backlog_limit=64 [ 334.383608][ T5274] audit: audit_lost=9246 audit_rate_limit=0 audit_backlog_limit=64 [ 334.552929][T11188] tc_dump_action: action bad kind [ 335.493157][T11199] FAULT_INJECTION: forcing a failure. [ 335.493157][T11199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.548285][T11199] CPU: 0 UID: 0 PID: 11199 Comm: syz.3.1909 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.548314][T11199] Tainted: [L]=SOFTLOCKUP [ 335.548321][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 335.548332][T11199] Call Trace: [ 335.548338][T11199] [ 335.548345][T11199] dump_stack_lvl+0x100/0x190 [ 335.548373][T11199] should_fail_ex.cold+0x5/0xa [ 335.548412][T11199] _copy_to_user+0x32/0xd0 [ 335.548435][T11199] simple_read_from_buffer+0xcb/0x170 [ 335.548464][T11199] proc_fail_nth_read+0x1af/0x230 [ 335.548489][T11199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.548512][T11199] ? rw_verify_area+0xce/0x6d0 [ 335.548532][T11199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.548554][T11199] vfs_read+0x1e4/0xb40 [ 335.548579][T11199] ? __pfx_vfs_read+0x10/0x10 [ 335.548602][T11199] ? __fget_files+0x215/0x3d0 [ 335.548623][T11199] ? __fget_files+0x21f/0x3d0 [ 335.548645][T11199] ksys_read+0x12a/0x250 [ 335.548668][T11199] ? __pfx_ksys_read+0x10/0x10 [ 335.548698][T11199] do_syscall_64+0x115/0x870 [ 335.548715][T11199] ? clear_bhb_loop+0x40/0x90 [ 335.548743][T11199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.548760][T11199] RIP: 0033:0x7f636275e6ce [ 335.548775][T11199] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.548791][T11199] RSP: 002b:00007f6363686fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.548808][T11199] RAX: ffffffffffffffda RBX: 00007f63636876c0 RCX: 00007f636275e6ce [ 335.548819][T11199] RDX: 000000000000000f RSI: 00007f63636870a0 RDI: 0000000000000004 [ 335.548829][T11199] RBP: 00007f6363687090 R08: 0000000000000000 R09: 0000000000000000 [ 335.548839][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.548848][T11199] R13: 00007f6362a26038 R14: 00007f6362a25fa0 R15: 00007ffcd88763d8 [ 335.548872][T11199] [ 335.856978][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 336.283309][T11212] netlink: 'syz.0.1910': attribute type 4 has an invalid length. [ 336.741906][T11221] tc_dump_action: action bad kind [ 337.603561][T11241] mmap: syz.4.1915 (11241) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 339.168984][ T29] kauditd_printk_skb: 6668 callbacks suppressed [ 339.169001][ T29] audit: type=1400 audit(1784502835.065:319814): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 339.228458][ T29] audit: type=1400 audit(1784502835.075:319815): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 339.259712][T11278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 339.269934][ T5274] audit: audit_backlog=66 > audit_backlog_limit=64 [ 339.283218][T11278] audit: audit_lost=9248 audit_rate_limit=0 audit_backlog_limit=64 [ 339.299129][ T29] audit: type=1400 audit(1784502835.075:319816): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 339.300278][ T5274] audit: audit_lost=9249 audit_rate_limit=0 audit_backlog_limit=64 [ 339.328034][T11278] audit: backlog limit exceeded [ 339.351004][ T29] audit: type=1400 audit(1784502835.075:319817): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 339.395559][ T29] audit: type=1400 audit(1784502835.075:319818): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 339.418957][T11278] netlink: 'syz.1.1935': attribute type 4 has an invalid length. [ 341.428083][T11304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=11304 comm=syz.3.1945 [ 344.180205][ T29] kauditd_printk_skb: 8732 callbacks suppressed [ 344.180224][ T29] audit: type=1400 audit(1784502840.085:327363): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 344.229669][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.257867][ T29] audit: type=1400 audit(1784502840.085:327364): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 344.310892][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.313342][ T29] audit: type=1400 audit(1784502840.085:327365): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 344.318004][ T5274] audit: audit_lost=9646 audit_rate_limit=0 audit_backlog_limit=64 [ 344.349601][ T5274] audit: backlog limit exceeded [ 344.360901][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.367442][ T5274] audit: audit_lost=9647 audit_rate_limit=0 audit_backlog_limit=64 [ 344.374961][ T29] audit: type=1400 audit(1784502840.115:327366): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 344.375350][ T5274] audit: backlog limit exceeded [ 344.617399][T11367] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 344.798110][T11375] futex_wake_op: syz.3.1966 tries to shift op by 36; fix this program [ 344.828424][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 345.110711][T11382] netlink: 'syz.2.1971': attribute type 49 has an invalid length. [ 345.126139][T11382] bond0: (slave bond_slave_0): Releasing backup interface [ 345.145690][T11382] bond_slave_0: left promiscuous mode [ 345.244217][T11382] bond_slave_0: entered promiscuous mode [ 345.251428][T11382] bond_slave_0: entered allmulticast mode [ 348.362605][T11455] netlink: 'syz.0.1991': attribute type 4 has an invalid length. [ 348.790216][T11458] netlink: 'syz.2.1993': attribute type 4 has an invalid length. [ 349.198228][ T29] kauditd_printk_skb: 10518 callbacks suppressed [ 349.198245][ T29] audit: type=1400 audit(1784502845.085:336979): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 349.240149][ T29] audit: type=1400 audit(1784502845.085:336980): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 349.248585][ T5274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 349.261433][ T29] audit: type=1400 audit(1784502845.085:336981): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 349.261469][ T29] audit: type=1400 audit(1784502845.085:336982): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 349.311185][ T5274] audit: audit_lost=9950 audit_rate_limit=0 audit_backlog_limit=64 [ 349.337706][T11470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 349.344314][T11470] audit: audit_lost=9951 audit_rate_limit=0 audit_backlog_limit=64 [ 349.352196][T11470] audit: backlog limit exceeded [ 349.358050][T11470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 455.585877][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 455.592935][ C0] rcu: 1-...!: (1 GPs behind) idle=e834/0/0x1 softirq=42789/42790 fqs=37 [ 455.602244][ C0] rcu: (detected by 0, t=10502 jiffies, g=57521, q=140 ncpus=2) [ 455.610138][ C0] Sending NMI from CPU 0 to CPUs 1: [ 455.610193][ C1] NMI backtrace for cpu 1 [ 455.610212][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.610233][ C1] Tainted: [L]=SOFTLOCKUP [ 455.610239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 455.610249][ C1] RIP: 0010:do_raw_spin_unlock+0xdd/0x1e0 [ 455.610283][ C1] Code: 85 a9 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 6b 08 48 89 ea 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e c4 00 00 00 <65> 8b 05 50 c8 7d 12 39 43 08 0f 85 86 00 00 00 48 b8 00 00 00 00 [ 455.610296][ C1] RSP: 0018:ffffc90000a08e60 EFLAGS: 00000046 [ 455.610310][ C1] RAX: 0000000000000000 RBX: ffff8880b8528400 RCX: ffffffff81e5c753 [ 455.610320][ C1] RDX: 1ffff110170a5081 RSI: 0000000000000004 RDI: ffff8880b8528400 [ 455.610329][ C1] RBP: ffff8880b8528408 R08: 0000000000000000 R09: ffffed10170a5080 [ 455.610339][ C1] R10: ffff8880b8528403 R11: 0000000000000000 R12: ffff8880b8528410 [ 455.610348][ C1] R13: ffffffff89c75cf0 R14: ffff8880b8528640 R15: ffff8880b8528690 [ 455.610358][ C1] FS: 0000000000000000(0000) GS:ffff888123ee7000(0000) knlGS:0000000000000000 [ 455.610373][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.610383][ C1] CR2: 0000200000000040 CR3: 0000000023b3c000 CR4: 00000000003526f0 [ 455.610402][ C1] Call Trace: [ 455.610409][ C1] [ 455.610421][ C1] _raw_spin_unlock_irqrestore+0x22/0x80 [ 455.610453][ C1] __hrtimer_run_queues+0x37b/0x9c0 [ 455.610477][ C1] hrtimer_interrupt+0x3e5/0x940 [ 455.610501][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 455.610525][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 455.610546][ C1] [ 455.610550][ C1] [ 455.610555][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 455.610573][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 455.610596][ C1] Code: f6 8c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 a9 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 455.610612][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 455.610622][ C1] RAX: 0000000000687b53 RBX: ffff88801eafa540 RCX: ffffffff8bb9f2d5 [ 455.610631][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a4788 RDI: ffffffff8c401280 [ 455.610640][ C1] RBP: ffffed1003d5f4a8 R08: 0000000000000001 R09: ffffed10170a678d [ 455.610649][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 455.610657][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 455.610668][ C1] ? ct_kernel_exit+0x125/0x180 [ 455.610683][ C1] default_idle+0x9/0x10 [ 455.610700][ C1] default_idle_call+0x6c/0xb0 [ 455.610714][ C1] do_idle+0x3a7/0x5b0 [ 455.610732][ C1] ? __pfx_do_idle+0x10/0x10 [ 455.610747][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 455.610768][ C1] cpu_startup_entry+0x4f/0x60 [ 455.610785][ C1] start_secondary+0x21d/0x2d0 [ 455.610801][ C1] ? __pfx_start_secondary+0x10/0x10 [ 455.610818][ C1] common_startup_64+0x13e/0x158 [ 455.610843][ C1] [ 455.611181][ C0] rcu: rcu_preempt kthread starved for 10313 jiffies! g57521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 455.919011][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 455.928972][ C0] rcu: RCU grace-period kthread stack dump: [ 455.934847][ C0] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 455.948364][ C0] Call Trace: [ 455.951642][ C0] [ 455.954571][ C0] __schedule+0x125c/0x6730 [ 455.959094][ C0] ? __pfx___schedule+0x10/0x10 [ 455.963994][ C0] ? find_held_lock+0x2b/0x80 [ 455.968673][ C0] ? schedule+0x225/0x2c0 [ 455.973006][ C0] schedule+0xdd/0x2c0 [ 455.977069][ C0] schedule_timeout+0x127/0x280 [ 455.981918][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 455.987286][ C0] ? __pfx_process_timeout+0x10/0x10 [ 455.992748][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 455.998552][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 456.004008][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 456.008778][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 456.014086][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 456.019139][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 456.024335][ C0] ? rcu_is_watching+0x12/0xc0 [ 456.029108][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 456.034919][ C0] rcu_gp_kthread+0x179/0x230 [ 456.039681][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 456.044966][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 456.050776][ C0] ? __kthread_parkme+0x18c/0x230 [ 456.055909][ C0] ? kthread+0x13a/0x450 [ 456.060152][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 456.065340][ C0] kthread+0x370/0x450 [ 456.069414][ C0] ? __pfx_kthread+0x10/0x10 [ 456.074004][ C0] ret_from_fork+0x72b/0xd50 [ 456.078614][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 456.083719][ C0] ? __switch_to+0x800/0x10f0 [ 456.088386][ C0] ? __pfx_kthread+0x10/0x10 [ 456.093072][ C0] ret_from_fork_asm+0x1a/0x30 [ 456.097858][ C0] [ 456.100875][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 456.107360][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.117857][ C0] Tainted: [L]=SOFTLOCKUP [ 456.122171][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 456.132219][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 456.137863][ C0] Code: f6 8c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 a9 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 456.157570][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 456.163647][ C0] RAX: 000000000042b03b RBX: ffffffff8e891480 RCX: ffffffff8bb9f2d5 [ 456.171970][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a4788 RDI: ffffffff8c401280 [ 456.180113][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 456.188072][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 456.196032][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 456.204001][ C0] FS: 0000000000000000(0000) GS:ffff888123de7000(0000) knlGS:0000000000000000 [ 456.213021][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.219595][ C0] CR2: 00005625a4a15be0 CR3: 00000000763ea000 CR4: 00000000003526f0 [ 456.227567][ C0] Call Trace: [ 456.230934][ C0] [ 456.233854][ C0] default_idle+0x9/0x10 [ 456.238092][ C0] default_idle_call+0x6c/0xb0 [ 456.242848][ C0] do_idle+0x3a7/0x5b0 [ 456.246926][ C0] ? __pfx_do_idle+0x10/0x10 [ 456.251510][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 456.257420][ C0] cpu_startup_entry+0x4f/0x60 [ 456.262360][ C0] rest_init+0x251/0x260 [ 456.266600][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 456.272159][ C0] start_kernel+0x48e/0x490 [ 456.276672][ C0] x86_64_start_reservations+0x24/0x30 [ 456.282123][ C0] x86_64_start_kernel+0x12b/0x130 [ 456.287237][ C0] common_startup_64+0x13e/0x158 [ 456.292188][ C0]