last executing test programs: 17.093801368s ago: executing program 4 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x10243, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_names='batadv0\x00'}) ioctl$sock_netdev_private(r0, 0x28949, &(0x7f0000000300)) syz_fuse_handle_req(r1, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000007140)={&(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0xffffffffffffffff, {0x7, 0x29, 0x8, 0x2c020c24, 0x1000, 0x0, 0xa0, 0x6, 0x0, 0x0, 0x4, 0xb}}, &(0x7f0000000300)={0x18, 0x0, 0x2, {0x7fffffff}}, &(0x7f0000000340)={0x18, 0x0, 0x400, {0xb}}, &(0x7f0000002680)={0x18, 0x0, 0x0, {0x3}}, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xee4}}, &(0x7f0000002440)={0x28, 0x0, 0xfffffffffffffffe, {{0x2, 0x40, 0x2}}}, &(0x7f0000002480)={0x60, 0x0, 0x8000000000000000, {{0xf72, 0x2, 0xf, 0x4, 0x8f5b, 0x297e1689, 0x5}}}, &(0x7f0000002500)={0x18, 0x0, 0x3, {0x2}}, &(0x7f00000025c0)=ANY=[@ANYBLOB], &(0x7f0000002580)={0x20, 0x0, 0x8, {0x0, 0x3}}, &(0x7f0000004600)={0x78, 0x0, 0x6e, {0x535, 0x7fff, 0x0, {0x3, 0x9, 0xf2c, 0x7, 0x7, 0x1000, 0x7, 0xfff, 0xd, 0x2000, 0xb, 0x0, 0x0, 0x1, 0x9}}}, 0x0, &(0x7f0000004740)={0xc8, 0xfffffffffffffff5, 0xfffffffffffffffa, [{0x2, 0x6, 0xa, 0xe, '*[/^:.!$:-'}, {0x5, 0x1, 0xb, 0x1, 'veth0_vlan\x00'}, {0x5, 0x0, 0x1, 0x5, '\x00'}, {0x3, 0x9, 0xb, 0x2, 'veth0_vlan\x00'}, {0x1, 0x6, 0x1, 0x7f, '-'}]}, &(0x7f0000006ac0)={0x298, 0x0, 0x10001, [{{0x2, 0x3, 0x14, 0x10000000000001, 0x4, 0x3, {0x2, 0x37b4, 0x7fffffffffffffff, 0x7, 0x6, 0x6, 0x0, 0x6e71, 0x0, 0xc000, 0x6, 0x0, 0x0, 0xfffffff8, 0x3}}, {0xfffffffffffffffe, 0x4, 0x2, 0x2, '@['}}, {{0x2, 0x1, 0x2, 0x5, 0x4, 0xcbe6089, {0x1, 0x7, 0x9, 0x2, 0x6, 0x10000, 0x2, 0x80000000, 0xeb8, 0xc000, 0x1, 0x0, 0x0, 0x9, 0x9}}, {0x2, 0x6, 0xb, 0xe1, 'veth0_vlan\x00'}}, {{0x1, 0x3, 0x40000000000, 0x7, 0x1, 0x7, {0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x3, 0x8d, 0x4, 0x3, 'GPL\x00'}}, {{0x2, 0x3, 0x8000000000000001, 0x6, 0x100, 0xfffffe01, {0x6, 0x8, 0x0, 0x9, 0x7eec, 0xcf7, 0xfffffff8, 0x0, 0x0, 0xc000, 0x1, 0x0, 0x0, 0x3, 0xc}}, {0x2, 0x2, 0x1, 0x101, '\x00'}}]}, &(0x7f0000006e40)={0xa0, 0x0, 0x8, {{0x5, 0x2, 0xffffffffffffff7f, 0xffffffffffffff9b, 0x0, 0x7, {0x5, 0x8370, 0xfffffffffffffffb, 0xffffffff, 0x80000000, 0x1, 0x4, 0x5, 0x6165, 0xa000, 0x2, 0x0, 0xee00, 0x7fff}}, {0x0, 0x2}}}, &(0x7f0000002540)={0x20, 0x0, 0x5, {0x9, 0x6ac4571839b653dd, 0xe33, 0x8}}, 0x0}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.995252244s ago: executing program 4 (id=177): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 15.131333621s ago: executing program 3 (id=182): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000001002"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000100)='security.', &(0x7f0000000640)='\xdd \\\f\xf7\\_\xb2=+(F\x0e^}\xa0p\xa2\xe8\xb4N\xd6 \x03b/\xce]\xa9\x97\x1c7\x9dg\xef\xc7\x86@w\xdc\x8e\xb3\xd09\xbd\x89\x10}s\xe2\xe2\b\xf6\xd3\x83\r\xe1\x84@\x06\x9e\xfb<\xf0o\xec\xd0*\xbd\x8b\xfaQ\x0e\xd0\xa6p\xdc\x84\xb3\x14qJ\xc7-\xb6\x97/\x0e\x86\xfe\xb9a!\xe3}\xbag\xf5\x9f\x8b\xd3\xb3*\x90R\xff\x81A\x85\fU\xea\xc1\x03=\x7f38\x9a\"6#\x88\xb7\x80\xf2\xf8\xf0\xc8\xa8\\\x128\x97\xac{\xd1\x7f\xc0k\xe5(\xa8^ND\xf8\x0e\x03\x1f?\x9c\xa7\xd6e\xaf3i\v\xc8\xefk(_59\xbc\x92\a\xbf\xfeYu\'j\xb2\xe2=\xd6_\xba\xd7?\xfb`-\x862X\x81h\xf6\x8aY\x01|w5=\x0f\xcc\x8a\x9e\xddyvS\x15\xd5U\xd3yAg\x0fI\\g\x86\x94\xdc', &(0x7f0000000400)='&@}\x00', 0x0, &(0x7f0000000480)='+.\x00', &(0x7f00000004c0)='-]\x00']}) 13.070698946s ago: executing program 4 (id=184): syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x4) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000080)={0x69ef3271, 0xe, 0x6, 0x4, 0x401}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 11.102836456s ago: executing program 1 (id=187): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5d7a000600"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xa1a) 10.007825957s ago: executing program 1 (id=189): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) open$dir(0x0, 0x20a40, 0x90) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="800002000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$inet(r1, &(0x7f0000002b80)={&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000480), 0x0, &(0x7f00000029c0)}, 0xc800) accept4$x25(r2, 0x0, &(0x7f00000001c0), 0x800) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = dup(0xffffffffffffffff) ioctl$EVIOCGABS0(r5, 0x80184540, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 9.214980668s ago: executing program 2 (id=190): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e000000200"/43, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xb8}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYBLOB="0101000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000000200)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000002c0)={0x0, 0xfffffffffffffe73}, 0x1, 0x0, 0x0, 0x20018851}, 0x2400a0c0) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024000280"], 0xa8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.169346326s ago: executing program 0 (id=191): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) r4 = syz_create_resource$binfmt(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000640)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r6, 0x1) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000280), 0x0) 9.104705294s ago: executing program 1 (id=192): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000900)={0x40, 0x9, 0x3, "f61b6e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 8.37116819s ago: executing program 2 (id=193): openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$nvram(0xffffff9c, &(0x7f0000000240), 0x40000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x11) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c00010000000000000000000400"], 0x18}], 0x1}, 0x0) 8.207351501s ago: executing program 0 (id=194): read$fb(0xffffffffffffffff, &(0x7f0000000180)=""/4, 0x4) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000f8dbdf", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x200040e4) 6.943819944s ago: executing program 2 (id=195): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.848235988s ago: executing program 4 (id=196): openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$nvram(0xffffff9c, &(0x7f0000000240), 0x40000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x11) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) 6.842088345s ago: executing program 0 (id=197): socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) close(r4) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) 6.720493274s ago: executing program 2 (id=198): r0 = io_uring_setup(0x2d58, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x41, 0x3, 0x3, '\x00', 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 5.933449303s ago: executing program 3 (id=199): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x20040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.886728729s ago: executing program 2 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x2}}}}}}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 5.612524081s ago: executing program 4 (id=201): syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x4) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000080)={0x69ef3271, 0xe, 0x6, 0x4, 0x401}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 4.887316461s ago: executing program 2 (id=202): umount2(0x0, 0x1d) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000500), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0x5460, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x0, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffff0000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000300)=0x1) 4.81028399s ago: executing program 1 (id=203): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x813}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x7ef, 0x9, 0x3031334d, 0x5, 0x0, [{}, {0xffffffff}, {}, {0x0, 0x76dfbff1}, {}, {0x0, 0xffffffff}, {}, {0x3}], 0x0, 0x20}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.733596328s ago: executing program 3 (id=204): socket$pppl2tp(0x18, 0x1, 0x1) userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='6G'], 0x68}, 0x1, 0x0, 0x0, 0x8850}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.407822173s ago: executing program 0 (id=205): mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14) socket$netlink(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80083, 0x0) 4.079641024s ago: executing program 3 (id=206): prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10, 0x0, 0x0, 0x877}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x7}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) connect$inet(r5, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.176750405s ago: executing program 0 (id=207): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5b, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xba, &(0x7f00000003c0)=""/195, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 2.606025375s ago: executing program 3 (id=208): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00"], 0x0) 1.924823567s ago: executing program 1 (id=209): openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$nvram(0xffffff9c, &(0x7f0000000240), 0x40000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x11) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) 967.554999ms ago: executing program 0 (id=210): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5b, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xba, &(0x7f00000003c0)=""/195, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 929.08979ms ago: executing program 4 (id=211): openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$nvram(0xffffff9c, &(0x7f0000000240), 0x40000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x11) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) 809.059648ms ago: executing program 1 (id=212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) epoll_create(0x208000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x20, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) 0s ago: executing program 3 (id=213): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000001002"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000100)='security.', &(0x7f0000000640)='\xdd \\\f\xf7\\_\xb2=+(F\x0e^}\xa0p\xa2\xe8\xb4N\xd6 \x03b/\xce]\xa9\x97\x1c7\x9dg\xef\xc7\x86@w\xdc\x8e\xb3\xd09\xbd\x89\x10}s\xe2\xe2\b\xf6\xd3\x83\r\xe1\x84@\x06\x9e\xfb<\xf0o\xec\xd0*\xbd\x8b\xfaQ\x0e\xd0\xa6p\xdc\x84\xb3\x14qJ\xc7-\xb6\x97/\x0e\x86\xfe\xb9a!\xe3}\xbag\xf5\x9f\x8b\xd3\xb3*\x90R\xff\x81A\x85\fU\xea\xc1\x03=\x7f38\x9a\"6#\x88\xb7\x80\xf2\xf8\xf0\xc8\xa8\\\x128\x97\xac{\xd1\x7f\xc0k\xe5(\xa8^ND\xf8\x0e\x03\x1f?\x9c\xa7\xd6e\xaf3i\v\xc8\xefk(_59\xbc\x92\a\xbf\xfeYu\'j\xb2\xe2=\xd6_\xba\xd7?\xfb`-\x862X\x81h\xf6\x8aY\x01|w5=\x0f\xcc\x8a\x9e\xddyvS\x15\xd5U\xd3yAg\x0fI\\g\x86\x94\xdc', &(0x7f0000000400)='&@}\x00', 0x0, &(0x7f0000000480)='+.\x00', &(0x7f00000004c0)='-]\x00']}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 51.561101][ T30] audit: type=1400 audit(1743468193.856:88): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.564374][ T5809] cgroup: Unknown subsys name 'net' [ 51.583907][ T30] audit: type=1400 audit(1743468193.866:89): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.611284][ T30] audit: type=1400 audit(1743468193.886:90): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.744852][ T5809] cgroup: Unknown subsys name 'cpuset' [ 51.752821][ T5809] cgroup: Unknown subsys name 'rlimit' [ 51.875031][ T30] audit: type=1400 audit(1743468194.176:91): avc: denied { setattr } for pid=5809 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.905777][ T30] audit: type=1400 audit(1743468194.176:92): avc: denied { create } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.926455][ T30] audit: type=1400 audit(1743468194.176:93): avc: denied { write } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.947255][ T30] audit: type=1400 audit(1743468194.176:94): avc: denied { read } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.967976][ T30] audit: type=1400 audit(1743468194.176:95): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.973836][ T5811] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 52.003848][ T30] audit: type=1400 audit(1743468194.176:96): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 52.027367][ T30] audit: type=1400 audit(1743468194.206:97): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.860661][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.456502][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.480451][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.487599][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.489152][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.495270][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.502991][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.510348][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.516394][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.523487][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.530257][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.545216][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.552683][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.560106][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.567227][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.575254][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.581847][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 56.581857][ T30] audit: type=1400 audit(1743468198.876:108): avc: denied { open } for pid=5828 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.618359][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.626038][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.632561][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.642031][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.642601][ T30] audit: type=1400 audit(1743468198.876:109): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.649074][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.680920][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.688706][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.696009][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.703876][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.711161][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.934734][ T30] audit: type=1400 audit(1743468199.236:110): avc: denied { module_request } for pid=5828 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 57.059174][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 57.089636][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 57.166645][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 57.196934][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 57.276606][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.284944][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.292422][ T5828] bridge_slave_0: entered allmulticast mode [ 57.298903][ T5828] bridge_slave_0: entered promiscuous mode [ 57.320120][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 57.343087][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.350176][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.357577][ T5828] bridge_slave_1: entered allmulticast mode [ 57.364154][ T5828] bridge_slave_1: entered promiscuous mode [ 57.370943][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.378050][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.385498][ T5820] bridge_slave_0: entered allmulticast mode [ 57.392123][ T5820] bridge_slave_0: entered promiscuous mode [ 57.427807][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.435197][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.442398][ T5820] bridge_slave_1: entered allmulticast mode [ 57.449003][ T5820] bridge_slave_1: entered promiscuous mode [ 57.466462][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.473992][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.481085][ T5819] bridge_slave_0: entered allmulticast mode [ 57.488187][ T5819] bridge_slave_0: entered promiscuous mode [ 57.522982][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.530143][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.538279][ T5819] bridge_slave_1: entered allmulticast mode [ 57.545252][ T5819] bridge_slave_1: entered promiscuous mode [ 57.551572][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.559233][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.566531][ T5834] bridge_slave_0: entered allmulticast mode [ 57.573171][ T5834] bridge_slave_0: entered promiscuous mode [ 57.581753][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.609079][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.616392][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.623818][ T5834] bridge_slave_1: entered allmulticast mode [ 57.630397][ T5834] bridge_slave_1: entered promiscuous mode [ 57.638264][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.657186][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.667867][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.712702][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.738869][ T5828] team0: Port device team_slave_0 added [ 57.753465][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.764240][ T5820] team0: Port device team_slave_0 added [ 57.770129][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.777303][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.784485][ T5832] bridge_slave_0: entered allmulticast mode [ 57.790914][ T5832] bridge_slave_0: entered promiscuous mode [ 57.799281][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.811386][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.821696][ T5828] team0: Port device team_slave_1 added [ 57.835570][ T5820] team0: Port device team_slave_1 added [ 57.841399][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.848586][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.855712][ T5832] bridge_slave_1: entered allmulticast mode [ 57.862533][ T5832] bridge_slave_1: entered promiscuous mode [ 57.917260][ T5834] team0: Port device team_slave_0 added [ 57.931085][ T5819] team0: Port device team_slave_0 added [ 57.939559][ T5819] team0: Port device team_slave_1 added [ 57.945921][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.952955][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.978858][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.998110][ T5834] team0: Port device team_slave_1 added [ 58.004685][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.011601][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.037768][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.062132][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.069074][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.094985][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.107372][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.119077][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.136713][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.143780][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.169719][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.205633][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.215715][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.242409][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.253870][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.260816][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.286967][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.299246][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.306250][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.332304][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.353549][ T5832] team0: Port device team_slave_0 added [ 58.359782][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.366926][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.393585][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.424266][ T5832] team0: Port device team_slave_1 added [ 58.434095][ T5820] hsr_slave_0: entered promiscuous mode [ 58.440894][ T5820] hsr_slave_1: entered promiscuous mode [ 58.484885][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.493212][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.519376][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.565433][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.572529][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.598413][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.612541][ T5827] Bluetooth: hci1: command tx timeout [ 58.612544][ T5830] Bluetooth: hci2: command tx timeout [ 58.616793][ T5819] hsr_slave_0: entered promiscuous mode [ 58.630730][ T5819] hsr_slave_1: entered promiscuous mode [ 58.637144][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.645206][ T5819] Cannot create hsr debugfs directory [ 58.656825][ T5828] hsr_slave_0: entered promiscuous mode [ 58.662907][ T5828] hsr_slave_1: entered promiscuous mode [ 58.668830][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.676537][ T5828] Cannot create hsr debugfs directory [ 58.692222][ T5830] Bluetooth: hci0: command tx timeout [ 58.709741][ T5834] hsr_slave_0: entered promiscuous mode [ 58.716864][ T5834] hsr_slave_1: entered promiscuous mode [ 58.722888][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.730532][ T5834] Cannot create hsr debugfs directory [ 58.771955][ T5830] Bluetooth: hci4: command tx timeout [ 58.771983][ T5827] Bluetooth: hci3: command tx timeout [ 58.789939][ T5832] hsr_slave_0: entered promiscuous mode [ 58.796686][ T5832] hsr_slave_1: entered promiscuous mode [ 58.802720][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.810256][ T5832] Cannot create hsr debugfs directory [ 59.036641][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.056447][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.084197][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.114094][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.148470][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.157500][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.168527][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.178409][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.232373][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.248325][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.260600][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.271435][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.342496][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.364486][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.377108][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.390621][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.450980][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.465652][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.477317][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.491713][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.506699][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.543667][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.558883][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.587448][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.594619][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.617267][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.625710][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.632845][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.668688][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.675904][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.695725][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.702820][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.725047][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.776588][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.787867][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.794987][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.819452][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.826769][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.850490][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.868472][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.879946][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.881224][ T30] audit: type=1400 audit(1743468202.186:111): avc: denied { sys_module } for pid=5820 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.953347][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.011343][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.046800][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.053981][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.076319][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.100232][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.107362][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.143915][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.151014][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.163560][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.170668][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.186628][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.267256][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.321045][ T5820] veth0_vlan: entered promiscuous mode [ 60.349124][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.387774][ T5820] veth1_vlan: entered promiscuous mode [ 60.510909][ T5828] veth0_vlan: entered promiscuous mode [ 60.557825][ T5820] veth0_macvtap: entered promiscuous mode [ 60.578274][ T5828] veth1_vlan: entered promiscuous mode [ 60.590820][ T5820] veth1_macvtap: entered promiscuous mode [ 60.635985][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.667202][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.681749][ T5819] veth0_vlan: entered promiscuous mode [ 60.692502][ T5827] Bluetooth: hci1: command tx timeout [ 60.693318][ T5830] Bluetooth: hci2: command tx timeout [ 60.704576][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.713828][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.723237][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.732082][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.755846][ T5828] veth0_macvtap: entered promiscuous mode [ 60.767745][ T5819] veth1_vlan: entered promiscuous mode [ 60.783297][ T5830] Bluetooth: hci0: command tx timeout [ 60.790694][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.801329][ T5828] veth1_macvtap: entered promiscuous mode [ 60.824394][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.852020][ T5830] Bluetooth: hci3: command tx timeout [ 60.862113][ T5830] Bluetooth: hci4: command tx timeout [ 60.872932][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.883773][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.895400][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.910427][ T5819] veth0_macvtap: entered promiscuous mode [ 60.945462][ T5832] veth0_vlan: entered promiscuous mode [ 60.958512][ T5819] veth1_macvtap: entered promiscuous mode [ 60.966714][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.977734][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.988725][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.002518][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.010560][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.036915][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.046101][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.055619][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.064459][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.077307][ T5832] veth1_vlan: entered promiscuous mode [ 61.107744][ T5834] veth0_vlan: entered promiscuous mode [ 61.117482][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.128699][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.139313][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.149731][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.160526][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.170237][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.170431][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.190302][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.190978][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.207762][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.218205][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.228751][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.238825][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.248109][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.257421][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.267402][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.290581][ T5834] veth1_vlan: entered promiscuous mode [ 61.301596][ T30] audit: type=1400 audit(1743468203.596:112): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.7U2IWG/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.327640][ T30] audit: type=1400 audit(1743468203.596:113): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.360948][ T30] audit: type=1400 audit(1743468203.606:114): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.7U2IWG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.389944][ T30] audit: type=1400 audit(1743468203.606:115): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.412243][ T30] audit: type=1400 audit(1743468203.606:116): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.7U2IWG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.441091][ T30] audit: type=1400 audit(1743468203.606:117): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.7U2IWG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 61.476955][ T5832] veth0_macvtap: entered promiscuous mode [ 61.485809][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.498542][ T5834] veth0_macvtap: entered promiscuous mode [ 61.547971][ T5834] veth1_macvtap: entered promiscuous mode [ 61.580261][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.583043][ T5832] veth1_macvtap: entered promiscuous mode [ 61.593848][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.618495][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.629059][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.652848][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.664856][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.687052][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.707683][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.738712][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.788703][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.801956][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.811787][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.823746][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.841975][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.858733][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.872352][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.896377][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.905559][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.914841][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.928703][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.942185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.953753][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.005030][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 62.005044][ T30] audit: type=1400 audit(1743468204.276:128): avc: denied { map_create } for pid=5900 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.008875][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.011148][ T30] audit: type=1400 audit(1743468204.286:129): avc: denied { map_read map_write } for pid=5900 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.032405][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.040963][ T30] audit: type=1400 audit(1743468204.286:130): avc: denied { prog_load } for pid=5900 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.464306][ T30] audit: type=1400 audit(1743468204.286:131): avc: denied { bpf } for pid=5900 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.624721][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.635420][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.635478][ T30] audit: type=1400 audit(1743468204.286:132): avc: denied { perfmon } for pid=5900 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.646157][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.669101][ T30] audit: type=1400 audit(1743468204.466:133): avc: denied { create } for pid=5900 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.676759][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.696373][ T30] audit: type=1400 audit(1743468204.476:134): avc: denied { connect } for pid=5900 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.727766][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.728323][ T30] audit: type=1400 audit(1743468204.476:135): avc: denied { write } for pid=5900 comm="syz.1.2" path="socket:[6050]" dev="sockfs" ino=6050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.763862][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.776461][ T5823] Bluetooth: hci2: command tx timeout [ 62.781886][ T5827] Bluetooth: hci1: command tx timeout [ 62.801427][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.811422][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.811530][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.829505][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.839394][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.850229][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.860234][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.871059][ T5823] Bluetooth: hci0: command tx timeout [ 62.878067][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.888255][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.898861][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.909472][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.929165][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.931559][ T30] audit: type=1400 audit(1743468205.226:136): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.BLrEpO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.941369][ T5823] Bluetooth: hci4: command tx timeout [ 62.964787][ T5827] Bluetooth: hci3: command tx timeout [ 62.978289][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.987208][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.996126][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.009346][ T5080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.017832][ T5080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.149363][ T5080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.159852][ T5080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.234608][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.252388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.267298][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.295865][ T5080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.324121][ T5080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.414774][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.446776][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.467726][ T30] audit: type=1400 audit(1743468205.766:137): avc: denied { read write } for pid=5914 comm="syz.4.5" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.484782][ T5913] overlayfs: overlapping lowerdir path [ 63.513883][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.537091][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.052861][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 64.132750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.182264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.447265][ T5925] netlink: 'syz.4.6': attribute type 16 has an invalid length. [ 64.453154][ T974] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.456033][ T5925] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6'. [ 64.473328][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.612416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.702063][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 64.710041][ T974] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.730126][ T974] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.740083][ T974] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.761782][ T974] usb 1-1: Product: syz [ 64.766056][ T974] usb 1-1: Manufacturer: syz [ 64.777030][ T974] usb 1-1: SerialNumber: syz [ 64.852616][ T5827] Bluetooth: hci2: command tx timeout [ 64.858051][ T5827] Bluetooth: hci1: command tx timeout [ 64.914465][ T974] usb 1-1: config 0 descriptor?? [ 64.927285][ T5921] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.934599][ T5827] Bluetooth: hci0: command tx timeout [ 64.942523][ T974] hub 1-1:0.0: bad descriptor, ignoring hub [ 64.948672][ T974] hub 1-1:0.0: probe with driver hub failed with error -5 [ 65.043624][ T5933] random: crng reseeded on system resumption [ 65.270408][ T5934] lo speed is unknown, defaulting to 1000 [ 65.276515][ T5934] lo speed is unknown, defaulting to 1000 [ 65.285926][ T5934] lo speed is unknown, defaulting to 1000 [ 65.305713][ T5934] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.353183][ T5934] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 65.453270][ T5827] Bluetooth: hci4: command tx timeout [ 65.459007][ T5827] Bluetooth: hci3: command tx timeout [ 65.530386][ T5934] lo speed is unknown, defaulting to 1000 [ 65.537457][ T5934] lo speed is unknown, defaulting to 1000 [ 65.544601][ T5934] lo speed is unknown, defaulting to 1000 [ 65.586398][ T5934] lo speed is unknown, defaulting to 1000 [ 65.601462][ T5934] lo speed is unknown, defaulting to 1000 [ 65.743856][ T974] usb 1-1: USB disconnect, device number 2 [ 66.124141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.942837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.952361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.117455][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 67.117465][ T30] audit: type=1400 audit(1743468209.416:166): avc: denied { create } for pid=5950 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.204428][ T30] audit: type=1400 audit(1743468209.456:167): avc: denied { bind } for pid=5950 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.252166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.325563][ T30] audit: type=1400 audit(1743468209.456:168): avc: denied { name_bind } for pid=5950 comm="syz.1.10" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 67.346716][ T30] audit: type=1400 audit(1743468209.456:169): avc: denied { node_bind } for pid=5950 comm="syz.1.10" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 67.376285][ T30] audit: type=1400 audit(1743468209.456:170): avc: denied { listen } for pid=5950 comm="syz.1.10" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.397992][ T30] audit: type=1400 audit(1743468209.456:171): avc: denied { connect } for pid=5950 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.418264][ T30] audit: type=1400 audit(1743468209.456:172): avc: denied { name_connect } for pid=5950 comm="syz.1.10" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 67.441861][ T30] audit: type=1400 audit(1743468209.476:173): avc: denied { allowed } for pid=5942 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.524092][ T30] audit: type=1400 audit(1743468209.476:174): avc: denied { create } for pid=5942 comm="syz.3.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.563517][ T30] audit: type=1400 audit(1743468209.476:175): avc: denied { map } for pid=5942 comm="syz.3.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.767763][ T5959] raw_sendmsg: syz.1.14 forgot to set AF_INET. Fix it! [ 68.892012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.497314][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.506658][ T5904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.371890][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 70.378540][ T5872] usb 4-1: config 0 has no interfaces? [ 70.431621][ T5904] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 70.445334][ T5872] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 70.956656][ T5904] usb 5-1: config 0 has no interface number 0 [ 70.963702][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.970097][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.982626][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.992575][ T5904] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.007846][ T5904] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 71.019885][ T5872] usb 4-1: config 0 descriptor?? [ 71.028464][ T5904] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 71.049152][ T5904] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.062967][ T5904] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 71.072388][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.089694][ T5904] usb 5-1: config 0 descriptor?? [ 71.112400][ T5904] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 71.888670][ T5904] usb 5-1: USB disconnect, device number 2 [ 71.898706][ T5904] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 72.917040][ T5904] usb 4-1: USB disconnect, device number 2 [ 73.239987][ T6010] random: crng reseeded on system resumption [ 73.903185][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 73.903200][ T30] audit: type=1400 audit(1743468216.206:209): avc: denied { read } for pid=6011 comm="syz.3.30" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 74.426211][ T30] audit: type=1400 audit(1743468216.206:210): avc: denied { open } for pid=6011 comm="syz.3.30" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.166270][ T30] audit: type=1400 audit(1743468217.466:211): avc: denied { search } for pid=5491 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.192643][ T30] audit: type=1400 audit(1743468217.466:212): avc: denied { read } for pid=5491 comm="dhcpcd" name="n100" dev="tmpfs" ino=1950 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.216699][ T30] audit: type=1400 audit(1743468217.466:213): avc: denied { open } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=1950 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.381904][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.491318][ T6031] tipc: Started in network mode [ 75.496560][ T6031] tipc: Node identity ffffffff, cluster identity 4711 [ 75.503394][ T6031] tipc: Node number set to 4294967295 [ 75.832580][ T30] audit: type=1400 audit(1743468217.466:214): avc: denied { getattr } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=1950 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.857696][ T30] audit: type=1326 audit(1743468217.486:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.3.33" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c65b8d169 code=0x0 [ 76.071865][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 76.080987][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 76.103637][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 76.175594][ T6035] siw: device registration error -23 [ 76.588792][ T971] cfg80211: failed to load regulatory.db [ 76.616876][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 76.735526][ T24] usb 5-1: Product: syz [ 76.739724][ T24] usb 5-1: Manufacturer: syz [ 76.754159][ T30] audit: type=1400 audit(1743468217.496:216): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.761879][ T24] usb 5-1: SerialNumber: syz [ 76.821370][ T24] usb 5-1: config 0 descriptor?? [ 76.922408][ T6022] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.930468][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 76.936918][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 77.927472][ T30] audit: type=1400 audit(1743468217.546:217): avc: denied { name_bind } for pid=6023 comm="syz.3.33" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 78.201358][ T24] usb 5-1: USB disconnect, device number 3 [ 78.247686][ T30] audit: type=1400 audit(1743468217.546:218): avc: denied { read write } for pid=6023 comm="syz.3.33" name="video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.462474][ T6057] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 78.507275][ T6063] random: crng reseeded on system resumption [ 78.853754][ T971] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.456926][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 79.456940][ T30] audit: type=1400 audit(1743468221.756:230): avc: denied { append } for pid=6029 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=1987 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.489292][ T971] usb 1-1: config 0 has no interfaces? [ 79.494996][ T971] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 79.506022][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.532778][ T971] usb 1-1: config 0 descriptor?? [ 79.644811][ T30] audit: type=1400 audit(1743468221.926:231): avc: denied { setopt } for pid=6075 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.386557][ T30] audit: type=1400 audit(1743468222.686:232): avc: denied { remove_name } for pid=6077 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=1987 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.414928][ T30] audit: type=1400 audit(1743468222.706:233): avc: denied { unlink } for pid=6077 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=1987 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.851705][ T5869] usb 1-1: USB disconnect, device number 3 [ 82.060287][ T6101] netlink: 'syz.0.45': attribute type 16 has an invalid length. [ 82.099741][ T6101] netlink: 48 bytes leftover after parsing attributes in process `syz.0.45'. [ 82.130262][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.162898][ T30] audit: type=1400 audit(1743468224.456:234): avc: denied { ioctl } for pid=6102 comm="syz.4.46" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.282149][ T30] audit: type=1400 audit(1743468224.496:235): avc: denied { create } for pid=6102 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.329249][ T30] audit: type=1400 audit(1743468224.496:236): avc: denied { write } for pid=6102 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.475070][ T6110] process 'syz.4.46' launched './file0' with NULL argv: empty string added [ 82.483748][ T30] audit: type=1400 audit(1743468224.776:237): avc: denied { execute } for pid=6102 comm="syz.4.46" name="file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.621060][ T6113] cgroup: subsys name conflicts with all [ 82.675065][ T30] audit: type=1400 audit(1743468224.786:238): avc: denied { append } for pid=6107 comm="syz.3.47" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.712039][ T30] audit: type=1400 audit(1743468224.806:239): avc: denied { execute_no_trans } for pid=6102 comm="syz.4.46" path="/9/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.163818][ T6135] ubi31: attaching mtd0 [ 84.173031][ T6135] ubi31: scanning is finished [ 84.177753][ T6135] ubi31: empty MTD device detected [ 84.840942][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 85.285079][ T6143] random: crng reseeded on system resumption [ 85.810714][ T6135] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 87.408855][ T6158] overlayfs: failed to resolve './file0': -2 [ 87.730340][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 87.730355][ T30] audit: type=1400 audit(1743468230.026:247): avc: denied { read write } for pid=6170 comm="syz.3.57" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.759432][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.921864][ T30] audit: type=1400 audit(1743468230.026:248): avc: denied { open } for pid=6170 comm="syz.3.57" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.069838][ T30] audit: type=1400 audit(1743468230.366:249): avc: denied { search } for pid=5491 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=8869 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 88.092616][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.178647][ T30] audit: type=1400 audit(1743468230.466:250): avc: denied { bind } for pid=6174 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.897283][ T30] audit: type=1400 audit(1743468231.196:251): avc: denied { create } for pid=6190 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.978671][ T30] audit: type=1400 audit(1743468231.226:252): avc: denied { write } for pid=6190 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.013769][ T30] audit: type=1400 audit(1743468231.226:253): avc: denied { accept } for pid=6190 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.066370][ T30] audit: type=1400 audit(1743468231.226:254): avc: denied { create } for pid=6190 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 89.116502][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.134432][ T6196] bond0: (slave rose0): Enslaving as an active interface with an up link [ 89.159178][ T30] audit: type=1400 audit(1743468231.256:255): avc: denied { sys_module } for pid=6190 comm="syz.0.62" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 89.279757][ T30] audit: type=1400 audit(1743468231.256:256): avc: denied { bind } for pid=6190 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.705991][ T6179] syz.3.57: attempt to access beyond end of device [ 90.705991][ T6179] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 91.143658][ T6232] random: crng reseeded on system resumption [ 91.567374][ T6179] XFS (nbd3): SB validate failed with error -5. [ 91.715716][ T6195] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd1": -EINTR [ 92.823140][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 92.823155][ T30] audit: type=1400 audit(1743468235.126:262): avc: denied { connect } for pid=6237 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.593472][ T6266] ubi31: attaching mtd0 [ 93.603366][ T6266] ubi31: scanning is finished [ 94.121219][ T6266] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 94.128901][ T6266] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 94.136234][ T6266] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 94.143273][ T6266] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 94.150714][ T6266] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 94.157629][ T6266] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 94.165799][ T6266] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3286076856 [ 94.175924][ T6266] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.186803][ T6268] ubi31: background thread "ubi_bgt31d" started, PID 6268 [ 94.352051][ T52] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.701867][ T52] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.731395][ T52] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.771852][ T52] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.790170][ T52] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.894003][ T52] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.911939][ T52] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.921862][ T52] usb 3-1: Product: syz [ 94.926034][ T52] usb 3-1: Manufacturer: syz [ 95.416884][ T52] cdc_wdm 3-1:1.0: skipping garbage [ 95.444574][ T52] cdc_wdm 3-1:1.0: skipping garbage [ 95.449863][ T52] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 95.467640][ T52] usb 3-1: USB disconnect, device number 2 [ 96.627550][ T6308] random: crng reseeded on system resumption [ 97.516892][ T6323] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.528007][ T6323] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 97.579203][ T30] audit: type=1400 audit(1743468239.806:263): avc: denied { mount } for pid=6285 comm="syz.3.75" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.761886][ T30] audit: type=1400 audit(1743468239.806:264): avc: denied { mounton } for pid=6285 comm="syz.3.75" path="/18/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 97.855467][ T30] audit: type=1400 audit(1743468239.806:265): avc: denied { mount } for pid=6285 comm="syz.3.75" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.031894][ T30] audit: type=1400 audit(1743468239.816:266): avc: denied { unlink } for pid=6285 comm="syz.3.75" name="#1" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.300403][ T30] audit: type=1400 audit(1743468240.586:267): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.493319][ T6342] overlayfs: overlapping lowerdir path [ 99.746426][ T6360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.758109][ T6360] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 101.627551][ T6388] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[6388] [ 102.486348][ T971] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.146593][ T971] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.157373][ T971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.216781][ T971] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.226399][ T971] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.246507][ T971] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.261828][ T971] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.282603][ T971] usb 4-1: Product: syz [ 103.286843][ T971] usb 4-1: Manufacturer: syz [ 103.336753][ T971] cdc_wdm 4-1:1.0: skipping garbage [ 103.409452][ T971] cdc_wdm 4-1:1.0: skipping garbage [ 103.446537][ T971] cdc_wdm 4-1:1.0: skipping garbage [ 103.767114][ T971] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 103.794495][ T971] usb 4-1: USB disconnect, device number 3 [ 103.900847][ T30] audit: type=1400 audit(1743468246.196:268): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.465232][ T6440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.476717][ T6440] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 108.556728][ T30] audit: type=1400 audit(1743468250.446:269): avc: denied { create } for pid=6494 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 108.766255][ T6460] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd4": -EINTR [ 109.481927][ T30] audit: type=1326 audit(1743468251.776:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.2.105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef7518d169 code=0x0 [ 109.656248][ T6490] syz.1.101: attempt to access beyond end of device [ 109.656248][ T6490] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 109.770656][ T6520] tipc: Started in network mode [ 109.775671][ T6520] tipc: Node identity ffffffff, cluster identity 4711 [ 109.782530][ T6520] tipc: Node number set to 4294967295 [ 110.145781][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.146182][ T6490] XFS (nbd1): SB validate failed with error -5. [ 111.534951][ T971] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.593910][ T6538] random: crng reseeded on system resumption [ 111.946106][ T971] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.114690][ T971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.140588][ T971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.150254][ T971] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.185880][ T971] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.198298][ T6532] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 112.220449][ T971] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.234795][ T971] usb 1-1: Product: syz [ 112.241420][ T971] usb 1-1: Manufacturer: syz [ 112.259679][ T971] cdc_wdm 1-1:1.0: skipping garbage [ 112.268548][ T971] cdc_wdm 1-1:1.0: skipping garbage [ 112.279061][ T971] cdc_wdm 1-1:1.0: skipping garbage [ 112.290905][ T971] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 112.466358][ T5869] usb 1-1: USB disconnect, device number 4 [ 112.774669][ T971] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.472413][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 113.480991][ T971] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 113.501936][ T971] usb 2-1: config 0 has no interface number 0 [ 113.508137][ T971] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.534881][ T971] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 113.574429][ T971] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.734251][ T971] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.856028][ T971] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 113.919390][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.922073][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.990661][ T971] usb 2-1: config 0 descriptor?? [ 113.995870][ T30] audit: type=1400 audit(1743468256.286:271): avc: denied { read } for pid=6593 comm="syz.3.120" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.049841][ T971] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 114.101019][ T30] audit: type=1400 audit(1743468256.286:272): avc: denied { open } for pid=6593 comm="syz.3.120" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.128547][ T30] audit: type=1400 audit(1743468256.286:273): avc: denied { ioctl } for pid=6593 comm="syz.3.120" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.132582][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 114.256166][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 114.423592][ T5871] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 114.444598][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 114.461822][ T5871] usb 3-1: Product: syz [ 114.466005][ T5871] usb 3-1: Manufacturer: syz [ 114.470676][ T5871] usb 3-1: SerialNumber: syz [ 114.483491][ T5871] usb 3-1: config 0 descriptor?? [ 114.521022][ T6583] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.657199][ T5871] hub 3-1:0.0: bad descriptor, ignoring hub [ 114.707838][ T5871] hub 3-1:0.0: probe with driver hub failed with error -5 [ 114.893935][ T5871] usb 2-1: USB disconnect, device number 2 [ 115.021931][ T5871] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 115.322088][ T5869] usb 3-1: USB disconnect, device number 3 [ 116.612860][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.203520][ T5869] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.231954][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.265600][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.288222][ T5869] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.740982][ T5869] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.764134][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.781813][ T5869] usb 5-1: Product: syz [ 117.851597][ T6654] random: crng reseeded on system resumption [ 117.973530][ T5869] usb 5-1: Manufacturer: syz [ 118.009593][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 118.028253][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 118.055876][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 118.061132][ T5869] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 118.734936][ T30] audit: type=1400 audit(1743468260.586:274): avc: denied { create } for pid=6656 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.776134][ T5869] usb 5-1: USB disconnect, device number 4 [ 118.809991][ T30] audit: type=1400 audit(1743468260.596:275): avc: denied { write } for pid=6656 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.319776][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.354318][ T30] audit: type=1400 audit(1743468260.596:276): avc: denied { read append } for pid=6656 comm="syz.2.133" name="event3" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.018901][ T30] audit: type=1400 audit(1743468264.716:277): avc: denied { write } for pid=6708 comm="syz.3.142" path="socket:[9690]" dev="sockfs" ino=9690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 123.339700][ T30] audit: type=1400 audit(1743468264.716:278): avc: denied { nlmsg_read } for pid=6708 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.495062][ T6730] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.506561][ T6730] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 124.564694][ T30] audit: type=1400 audit(1743468266.436:279): avc: denied { write } for pid=6721 comm="syz.3.145" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.587306][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.582086][ T52] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.281898][ T5871] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.427519][ T52] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.444663][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 126.456090][ T52] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.472236][ T5871] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 126.491204][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.506205][ T5871] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 126.526026][ T52] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 126.538519][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 126.660339][ T5871] usb 4-1: Product: syz [ 126.666882][ T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 126.685869][ T5871] usb 4-1: Manufacturer: syz [ 126.700425][ T5871] usb 4-1: SerialNumber: syz [ 126.716444][ T52] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.730315][ T5871] usb 4-1: config 0 descriptor?? [ 126.747884][ T52] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.762359][ T6743] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 126.775807][ T5871] hub 4-1:0.0: bad descriptor, ignoring hub [ 126.794979][ T5871] hub 4-1:0.0: probe with driver hub failed with error -5 [ 126.802878][ T52] usb 2-1: Product: syz [ 126.813661][ T52] usb 2-1: Manufacturer: syz [ 126.835824][ T52] cdc_wdm 2-1:1.0: skipping garbage [ 126.857759][ T52] cdc_wdm 2-1:1.0: skipping garbage [ 126.871488][ T52] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 127.039486][ T5872] usb 2-1: USB disconnect, device number 3 [ 127.369382][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 127.930316][ T52] usb 4-1: USB disconnect, device number 4 [ 128.293590][ T30] audit: type=1400 audit(1743468270.566:280): avc: denied { rename } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.484032][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 129.487519][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 129.679741][ T30] audit: type=1400 audit(1743468270.566:281): avc: denied { unlink } for pid=5179 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.708831][ T6792] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 129.711828][ T30] audit: type=1400 audit(1743468270.566:282): avc: denied { create } for pid=5179 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.792222][ T6821] siw: device registration error -23 [ 132.375939][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.384386][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.418186][ T6832] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.429726][ T6832] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 132.524203][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.375088][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.767495][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.822348][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.006233][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 134.366424][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 134.580426][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.724848][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.877951][ T24] usb 5-1: Product: syz [ 134.967724][ T24] usb 5-1: Manufacturer: syz [ 135.057890][ T6848] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.288718][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 136.020601][ T6892] syz.2.167: attempt to access beyond end of device [ 136.020601][ T6892] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 136.038208][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 136.080395][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 136.210845][ T6892] XFS (nbd2): SB validate failed with error -5. [ 136.382586][ T24] usb 5-1: USB disconnect, device number 5 [ 139.840410][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 143.482014][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.012084][ T5872] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.069569][ T5872] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 145.411263][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.438220][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.455665][ T5872] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.465340][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.073093][ T5872] usb 3-1: Product: syz [ 146.077351][ T5872] usb 3-1: Manufacturer: syz [ 146.114122][ T5872] usb 3-1: can't set config #1, error -71 [ 146.154019][ T7004] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 146.180449][ T5872] usb 3-1: USB disconnect, device number 4 [ 147.102310][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.375952][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.478546][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 147.833459][ T10] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 147.842450][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.851508][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.983345][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.995490][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.004355][ T10] usb 2-1: Product: syz [ 148.008808][ T10] usb 2-1: Manufacturer: syz [ 148.031229][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 148.559986][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 150.326971][ T52] lo speed is unknown, defaulting to 1000 [ 150.565713][ T52] usb 2-1: USB disconnect, device number 4 [ 150.630334][ T30] audit: type=1326 audit(1743468292.926:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.2.202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef7518d169 code=0x0 [ 150.844643][ T30] audit: type=1400 audit(1743468293.126:284): avc: denied { create } for pid=7069 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.856033][ T7068] ubi: mtd0 is already attached to ubi31 [ 150.953631][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.965648][ T5827] Bluetooth: hci5: command 0x1003 tx timeout [ 151.205316][ T7077] random: crng reseeded on system resumption [ 151.793243][ T7094] siw: device registration error -23 [ 153.241947][ T5872] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.444090][ T5872] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.483645][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.526831][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.572555][ T5872] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.701893][ T5872] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.719199][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.218453][ T5872] usb 4-1: Product: syz [ 154.226720][ T5872] usb 4-1: Manufacturer: syz [ 154.248829][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 154.254562][ T5872] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 154.465835][ T10] usb 4-1: USB disconnect, device number 5 [ 155.687668][ T7128] [ 155.690029][ T7128] ====================================================== [ 155.697029][ T7128] WARNING: possible circular locking dependency detected [ 155.704045][ T7128] 6.14.0-syzkaller-11125-g609706855d90 #0 Not tainted [ 155.710797][ T7128] ------------------------------------------------------ [ 155.717794][ T7128] syz.4.211/7128 is trying to acquire lock: [ 155.723660][ T7128] ffff888028bb8698 (kn->active#24){++++}-{0:0}, at: __kernfs_remove+0x281/0x6f0 [ 155.732697][ T7128] [ 155.732697][ T7128] but task is already holding lock: [ 155.740037][ T7128] ffff888034750768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf0/0x720 [ 155.750384][ T7128] [ 155.750384][ T7128] which lock already depends on the new lock. [ 155.750384][ T7128] [ 155.760762][ T7128] [ 155.760762][ T7128] the existing dependency chain (in reverse order) is: [ 155.769751][ T7128] [ 155.769751][ T7128] -> #2 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 155.777469][ T7128] __mutex_lock+0x199/0xb90 [ 155.782477][ T7128] ieee80211_change_mac+0x110/0x1480 [ 155.788268][ T7128] netif_set_mac_address+0x309/0x4a0 [ 155.794055][ T7128] dev_set_mac_address_user+0xc6/0x270 [ 155.800015][ T7128] dev_ifsioc+0x1457/0x1f70 [ 155.805016][ T7128] dev_ioctl+0x223/0x10e0 [ 155.809857][ T7128] sock_do_ioctl+0x19d/0x280 [ 155.814986][ T7128] sock_ioctl+0x227/0x6b0 [ 155.819817][ T7128] __x64_sys_ioctl+0x190/0x200 [ 155.825083][ T7128] do_syscall_64+0xcd/0x260 [ 155.830088][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.836483][ T7128] [ 155.836483][ T7128] -> #1 (dev_addr_sem){++++}-{4:4}: [ 155.843842][ T7128] down_read+0x9b/0x480 [ 155.848496][ T7128] address_show+0x23/0x2a0 [ 155.853419][ T7128] dev_attr_show+0x53/0xe0 [ 155.858333][ T7128] sysfs_kf_seq_show+0x23e/0x410 [ 155.863782][ T7128] seq_read_iter+0x506/0x12c0 [ 155.868964][ T7128] kernfs_fop_read_iter+0x40f/0x5a0 [ 155.874658][ T7128] vfs_read+0x8c8/0xc70 [ 155.879311][ T7128] ksys_read+0x12a/0x240 [ 155.884064][ T7128] do_syscall_64+0xcd/0x260 [ 155.889068][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.895458][ T7128] [ 155.895458][ T7128] -> #0 (kn->active#24){++++}-{0:0}: [ 155.902905][ T7128] __lock_acquire+0x1173/0x1ba0 [ 155.908259][ T7128] lock_acquire+0x179/0x350 [ 155.913257][ T7128] kernfs_drain+0x4c8/0x5d0 [ 155.918262][ T7128] __kernfs_remove+0x281/0x6f0 [ 155.923526][ T7128] kernfs_remove_by_name_ns+0xb2/0x170 [ 155.929480][ T7128] remove_files+0x96/0x1c0 [ 155.934404][ T7128] sysfs_remove_group+0x8b/0x180 [ 155.939842][ T7128] sysfs_remove_groups+0x60/0xa0 [ 155.945281][ T7128] device_remove_attrs+0x203/0x290 [ 155.950892][ T7128] device_del+0x38e/0x9f0 [ 155.955723][ T7128] unregister_netdevice_many_notify+0x17eb/0x25a0 [ 155.962659][ T7128] unregister_netdevice_queue+0x305/0x3f0 [ 155.968880][ T7128] _cfg80211_unregister_wdev+0x64b/0x830 [ 155.975010][ T7128] ieee80211_remove_interfaces+0x34e/0x720 [ 155.981315][ T7128] ieee80211_unregister_hw+0x55/0x3a0 [ 155.987184][ T7128] mac80211_hwsim_netlink_notify+0x2ea/0x8e0 [ 155.993663][ T7128] notifier_call_chain+0xb9/0x410 [ 155.999189][ T7128] blocking_notifier_call_chain+0x69/0xa0 [ 156.005415][ T7128] netlink_release+0x186b/0x2020 [ 156.010854][ T7128] __sock_release+0xb0/0x270 [ 156.016466][ T7128] sock_close+0x1c/0x30 [ 156.021119][ T7128] __fput+0x3ff/0xb70 [ 156.025597][ T7128] task_work_run+0x14d/0x240 [ 156.030692][ T7128] syscall_exit_to_user_mode+0x27b/0x2a0 [ 156.036828][ T7128] do_syscall_64+0xda/0x260 [ 156.041854][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.048244][ T7128] [ 156.048244][ T7128] other info that might help us debug this: [ 156.048244][ T7128] [ 156.058444][ T7128] Chain exists of: [ 156.058444][ T7128] kn->active#24 --> dev_addr_sem --> &rdev->wiphy.mtx [ 156.058444][ T7128] [ 156.071112][ T7128] Possible unsafe locking scenario: [ 156.071112][ T7128] [ 156.078555][ T7128] CPU0 CPU1 [ 156.083897][ T7128] ---- ---- [ 156.089234][ T7128] lock(&rdev->wiphy.mtx); [ 156.093714][ T7128] lock(dev_addr_sem); [ 156.100368][ T7128] lock(&rdev->wiphy.mtx); [ 156.107369][ T7128] lock(kn->active#24); [ 156.111591][ T7128] [ 156.111591][ T7128] *** DEADLOCK *** [ 156.111591][ T7128] [ 156.119707][ T7128] 4 locks held by syz.4.211/7128: [ 156.124700][ T7128] #0: ffff88805b0a5c08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 156.135213][ T7128] #1: ffffffff901c1950 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x53/0xa0 [ 156.146325][ T7128] #2: ffffffff90122128 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x3a0 [ 156.156130][ T7128] #3: ffff888034750768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf0/0x720 [ 156.166807][ T7128] [ 156.166807][ T7128] stack backtrace: [ 156.172671][ T7128] CPU: 1 UID: 0 PID: 7128 Comm: syz.4.211 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 156.172687][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.172695][ T7128] Call Trace: [ 156.172699][ T7128] [ 156.172704][ T7128] dump_stack_lvl+0x116/0x1f0 [ 156.172722][ T7128] print_circular_bug+0x275/0x350 [ 156.172742][ T7128] check_noncircular+0x14c/0x170 [ 156.172762][ T7128] __lock_acquire+0x1173/0x1ba0 [ 156.172775][ T7128] ? blocking_notifier_call_chain+0x69/0xa0 [ 156.172795][ T7128] lock_acquire+0x179/0x350 [ 156.172806][ T7128] ? __kernfs_remove+0x281/0x6f0 [ 156.172824][ T7128] ? up_write+0x1b2/0x520 [ 156.172837][ T7128] kernfs_drain+0x4c8/0x5d0 [ 156.172852][ T7128] ? __kernfs_remove+0x281/0x6f0 [ 156.172870][ T7128] ? __pfx_kernfs_drain+0x10/0x10 [ 156.172889][ T7128] __kernfs_remove+0x281/0x6f0 [ 156.172908][ T7128] kernfs_remove_by_name_ns+0xb2/0x170 [ 156.172920][ T7128] remove_files+0x96/0x1c0 [ 156.172936][ T7128] sysfs_remove_group+0x8b/0x180 [ 156.172952][ T7128] sysfs_remove_groups+0x60/0xa0 [ 156.172970][ T7128] device_remove_attrs+0x203/0x290 [ 156.172987][ T7128] ? __pfx_device_remove_attrs+0x10/0x10 [ 156.173002][ T7128] ? up_write+0x1b2/0x520 [ 156.173016][ T7128] device_del+0x38e/0x9f0 [ 156.173033][ T7128] ? __pfx_device_del+0x10/0x10 [ 156.173051][ T7128] ? netdev_unregister_kobject+0x2da/0x540 [ 156.173071][ T7128] unregister_netdevice_many_notify+0x17eb/0x25a0 [ 156.173092][ T7128] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 156.173111][ T7128] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.173129][ T7128] ? unregister_netdevice_queue+0x295/0x3f0 [ 156.173147][ T7128] unregister_netdevice_queue+0x305/0x3f0 [ 156.173165][ T7128] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 156.173184][ T7128] _cfg80211_unregister_wdev+0x64b/0x830 [ 156.173199][ T7128] ieee80211_remove_interfaces+0x34e/0x720 [ 156.173217][ T7128] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 156.173235][ T7128] ieee80211_unregister_hw+0x55/0x3a0 [ 156.173247][ T7128] mac80211_hwsim_netlink_notify+0x2ea/0x8e0 [ 156.173262][ T7128] ? kcov_open+0x41/0x80 [ 156.173274][ T7128] ? __pfx_mac80211_hwsim_netlink_notify+0x10/0x10 [ 156.173289][ T7128] notifier_call_chain+0xb9/0x410 [ 156.173306][ T7128] ? __pfx_mac80211_hwsim_netlink_notify+0x10/0x10 [ 156.173321][ T7128] blocking_notifier_call_chain+0x69/0xa0 [ 156.173340][ T7128] netlink_release+0x186b/0x2020 [ 156.173365][ T7128] ? netlink_release+0x1de/0x2020 [ 156.173382][ T7128] ? __pfx_netlink_release+0x10/0x10 [ 156.173399][ T7128] ? __pfx_locks_remove_file+0x10/0x10 [ 156.173415][ T7128] __sock_release+0xb0/0x270 [ 156.173432][ T7128] ? __pfx_sock_close+0x10/0x10 [ 156.173447][ T7128] sock_close+0x1c/0x30 [ 156.173462][ T7128] __fput+0x3ff/0xb70 [ 156.173472][ T7128] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.173488][ T7128] task_work_run+0x14d/0x240 [ 156.173503][ T7128] ? __pfx_task_work_run+0x10/0x10 [ 156.173516][ T7128] ? __pfx___do_sys_close_range+0x10/0x10 [ 156.173534][ T7128] syscall_exit_to_user_mode+0x27b/0x2a0 [ 156.173551][ T7128] do_syscall_64+0xda/0x260 [ 156.173569][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.173581][ T7128] RIP: 0033:0x7fe92bd8d169 [ 156.173592][ T7128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.173604][ T7128] RSP: 002b:00007ffe8bdf3a18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 156.173615][ T7128] RAX: 0000000000000000 RBX: 00007fe92bfa7ba0 RCX: 00007fe92bd8d169 [ 156.173622][ T7128] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 156.173629][ T7128] RBP: 00007fe92bfa7ba0 R08: 0000000000009c94 R09: 000000198bdf3d0f [ 156.173636][ T7128] R10: 00007fe92bfa7ac0 R11: 0000000000000246 R12: 0000000000025eff [ 156.173644][ T7128] R13: 00007fe92bfa6160 R14: ffffffffffffffff R15: 00007ffe8bdf3b30 [ 156.173655][ T7128]